Open Redirect Vulnerability Lab written in Flask.
python3 and pip3 must be pre-installed.
git clone https://github.com/amir-h-fallahi/Open-Redirect-Lab/
cd Open-Redirect-Lab
pip3 install virtualenv
virtualenv env
source env/bin/activate # Linux, Mac
env\Scripts\activate # Windows
pip3 install -r requirements.txt
python3 app.py
- It's availabe on http://127.0.0.1:5000
- Also after running you can access it on http://local.securityflaws.net:5000/
CTRL+C
to down the Flask app.deactivate
to quit the virtual env.
- http://127.0.0.1:5000/auth/login/
- Default credentials:
- Username:
admin
- Password:
admin
- Username:
- http://127.0.0.1:5000/dashboard/
- After logging in you can access it.
- 1 client side open redirect.
- http://127.0.0.1:5000/checkout/
- 10 level of client side open redirect.
- http://127.0.0.1:5000/redirect/
- 9 level of server side open redirect.
Increasing the level has nothing to do with the difficulty of the challenge.