Question

You’re ready to find your first open redirect. Follow the steps covered in this chapter to test your target applications:

你已经准备好找出第一个开放重定向。按照本章所涵盖的步骤测试目标应用程序：

1. Search for redirect URL parameters. These might be vulnerable to parameter-based open redirect.
2. Search for pages that perform referer-based redirects. These are candidates for a referer-based open redirect.
3. Test the pages and parameters you’ve found for open redirects.
4. If the server blocks the open redirect, try the protection bypass techniques mentioned in this chapter.
5. Brainstorm ways of using the open redirect in your other bug chains!