Breaking News

Tuesday, 15 September 2020

OpenRedireX - Asynchronous Open Redirect Fuzzer For Humans

OpenRedireX - Asynchronous Open Redirect Fuzzer For Humans


A Fuzzer For OpenRedirect Issues.

Key Features :

  • Takes a url or list of urls and fuzzes them for Open redirect issues
  • You can specify your own payloads in 'payloads.txt'
  • Shows Location header history (if any)
  • Fast (as it is Asynchronous)
  • umm thats it , nothing much !


Usage :
Note : Use Python 3.7+ !

$ git clone https://github.com/devanshbatham/OpenRedireX
$ cd OpenRedireX
$ python3 -m venv env
$ source env/bin/activate
Note : The "FUZZ" is important and the url must be in double qoutes !
$ python3.7 openredirex.py -u "https://vulnerable.com/?url=FUZZ" -p payloads.txt --keyword FUZZ


For single URL :

$ python3.7 openredirex.py -u "https://vulnerable.com/?url=FUZZ" -p payloads.txt --keyword FUZZ


For List of URLs :

$ python3.7 openredirex.py -l urls.txt -p payloads.txt --keyword FUZZ


Example :


Credits :
Thanks mate @NullPxl


0 comments:

Post a Comment

'; (function() { var dsq = document.createElement('script'); dsq.type = 'text/javascript'; dsq.async = true; dsq.src = '//' + disqus_shortname + '.disqus.com/embed.js'; (document.getElementsByTagName('head')[0] || document.getElementsByTagName('body')[0]).appendChild(dsq); })();
'; (function() { var dsq = document.createElement('script'); dsq.type = 'text/javascript'; dsq.async = true; dsq.src = '//' + disqus_shortname + '.disqus.com/embed.js'; (document.getElementsByTagName('head')[0] || document.getElementsByTagName('body')[0]).appendChild(dsq); })();