PwnRedir is a tool designed to detect open redirects vulnerabilities on websites. It helps penetration testers and bug hunters find open redirect bugs through a scan supported by a list of payloads.
git clone https://github.com/pwn0sec/open-redir.git
PwnRedir use requests python module.
sudo pip install -r requirements.txt
Short form | Long form | Description |
---|---|---|
-u | --url | URL to fuzz |
-f | --file | File with the list of payloads |
-h | --help | Show the help message |
- To scan an URL:
python pwnredir.py -u https://www.example.com/redirect.php?url= -f payloads.list
python pwnredir.py --url https://www.example.com/redirect.php?url= --file payloads.list
Current version is 0.1