loading
Loading content
loading
Vulnerabilities
Async open-redirect fuzzer for parameterized URLs.
overview
OpenRedireX replaces a marked keyword in each URL with redirect payloads and watches Location headers for off-site sends, including chained hops.
Point --payloads at your redirect tricks. Set --keyword when the injection marker is not FUZZ. Raise or lower --concurrency to match target tolerance.
Sit it after URL collection from a crawler or archive miner. URL list plus --payloads in, vulnerable redirects out as FILE and FOLDER.
use cases
Feed a file of parameterized URLs and let OpenRedireX swap each parameter for redirect payloads, flagging the ones that send the browser off-site.
Point --payloads at a payloads file to run the exact redirect tricks you want, rather than a fixed built-in set.
Read the reported Location header history to see the full hop path a payload triggered, not only the first redirect.
Raise or lower --concurrency to move a large URL file fast while staying within the target's tolerance.
reference
| Name | Type | Flag | Description |
|---|---|---|---|
| url | STRING | · | Single URL to test. |
| urls-file | FILE | · | File of URLs with parameters to test. |
| payloads-file | FILE | --payloads | File of redirect payloads to use. |
| keyword | STRING | --keyword | Keyword in URLs to replace with the payload (default FUZZ). |
| concurrency | STRING | --concurrency | Number of concurrent tasks (default 100). |
Showing key inputs. openredirex exposes 5 inputs in total.
example
# fuzz a list of parameterized URLs with custom redirect payloadscat urls.txt | openredirex --payloads payloads.txt --keyword FUZZ --concurrency 50[i] Reading URLs from input[i] Loaded 18 payloads[+] Testing https://example.com/login?next=FUZZ[VULN] https://example.com/login?next=//203.0.113.10 Location: //203.0.113.10[VULN] https://example.com/redirect?url=https:203.0.113.10 Location: https://203.0.113.10[-] https://example.com/goto?to=FUZZ (no open redirect)[i] Done. 2 of 3 URLs vulnerable.guidance
Use OpenRedireX when you already have parameterized URLs and want open-redirect checks with your own payloads. Collect URLs first. For multi-class scanning, use a general scanner; for XSS parameters, use a dedicated XSS tool.
Open-redirect fuzzer that also checks CRLF. OpenRedireX focuses on async runs with custom payload files.
Rewrites query values to seed payloads. Pair it upstream to mark injection points for OpenRedireX.
XSS-focused parameter scanner. OpenRedireX is the narrower open-redirect tool.
faq
related
Automates OS command injection detection and exploitation.
Subdomain takeover scanner with cloud-zone intake.
Locate public CVE proof-of-concept repositories on GitHub.
Decode, forge, crack, and tamper JWTs for auth checks.
Triage reflected special characters on parameterized URLs.
Detect and exploit SQL injection on authorized web targets.
A URL list and a payloads file feed OpenRedireX, which fuzzes each URL and writes the ones vulnerable to open redirect as a queryable output.
Facts on this page come from the live Trickest tool library.