Redirect & Navigation
Redirect & Navigation traces HTTP redirect chains and looks for places where user-controlled data can influence navigation targets.
The module:
- Follows HTTP redirects (3xx) starting from the given URL.
- Records the full redirect chain with status codes.
- Extracts “candidate redirect endpoints” where parameters (such as
continue,next, orurl) may control the destination.
Use it to:
- De-obfuscate short links or marketing redirects.
- Inspect where login or SSO flows ultimately land.
- Identify potential open redirect candidates for further testing.
For request format, parameters, and examples, see the Endpoint page in this module.
Last updated on