Find unsafe redirects in your web application.
Guides testing of web application redirects for validation bypasses and related exploit chains.
When to use it
Use when URL parameters, form actions, or JavaScript sinks control navigation targets that may lead to attacker-controlled destinations.
Give it redirect behavior to assess; it provides testing guidance covering crafted URLs, OAuth redirects, and token preservation.
No setup requirements listed.
No additional actions listed.