redirect-forge - Open Redirect Testing and Bypass
Detects open redirects, tests validation bypasses, and assesses OAuth, SSRF, CSP, phishing, and account-takeover chains.
Tags
Updated: 2026-10-06Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Discover redirect parameters
- Confirm controllable redirects
- Test allowlist bypasses
- Assess OAuth redirect abuse
- Chain redirects with SSRF
- Document test findings
Inputs
- Target URLs
- HTTP responses
- JavaScript files
- OAuth flow parameters
- Redirect allowlists
Outputs
- Redirect test findings
- Observed Location headers
- OAuth impact evidence
- Bypass test results
