this tool test open redirect vulnerability via signs EX.. [/, //,\/, etc..]
cat subdomains | httprobe > https.txt | use tool on this file [https.txt]
the tool will put the sign and send request , when found redirect will alert you.
the tool have argument -m, --multiple , this arg make many testing , some testing is bruteforce parameters and try many signs
i am make code to auto install modules only must have modules importlib , pip
pip3 install importlib,pip
short arg | long arg | Description |
---|---|---|
-u | --urls | File contain urls |
-s | --sign | Determine one or multiple signs which put every url [Default = /] |
-m | --multiple | will try many testing [open-redirect] on url |
-t | --threads | Threads number to multiProccess [Default = 100] |
-T | --timeout | Time out waiting if delay request , [Default 3] |
-o | --output | Save the results to text file |
-h | --help | show the help message and exit |
if you want use multiple signs usage -s, --sign /,/,//,// ==> seperator via [,]
- Default usage
python3 redir_trick.py --urls https.txt
- Put multiple signs
python3 redir_trick.py --urls https.txt --sign \\/,/,//
- Determine threads and timeout
python3 redir_trick.py --urls https.txt --threads 200 --timeout 10
- try many testing
python3 redir_trick.py --urls https.txt --threads 200 --timeout 10 -m