XSS with open redirect

michael1026 · 2014-08-08T09:43:13+00:00

So, let's say I have a page that redirects anywhere, I can XSS the page by redirecting it to javascript:alert(0);, but the current page I'm working on doesn't try redirecting that, only offers a link (yes, this is XSS, but as part of their security, they don't consider that a bug). This page will redirect anywhere else, though. Is there anything else that will work?

Cybele
Guest

Aug 8, 2014 05:20 AM

PM me your skype/xmpp please. I'd like to take a look.

Next Oldest | Next Newest

New Reply

Possibly Related Threads...
Thread / Author	Replies	Views	Last Post
Open Redirect on TrustPilot ? by antonio.carrillo78Jan 29, 2025 07:55 AM	0	104	Jan 29, 2025 07:55 AM Last Post: antonio.carrillo78
Open redirect vulnerability construction by cryptery03Mar 29, 2022 12:14 AM	1	206	Mar 29, 2022 12:14 AM Last Post: cryptery03
[XSS] Pornhub.com - Persistant XSS - core Domain [PoC] (fixed, img-links updated). by Gee4rceApr 19, 2021 06:47 AM	26	4,070	Apr 19, 2021 06:47 AM Last Post: theghostofgreen

View a Printable Version
Export as PDF
Subscribe to this thread

Login
Username/Email:
Password:	Lost Password?
	Remember me