Lab: DOM-based open redirection

PRACTITIONER

This lab contains a DOM-based open-redirection vulnerability. To solve this lab, exploit this vulnerability and redirect the victim to the exploit server.

Access the lab

Solution

The blog post page contains the following link, which returns to the home page of the blog:

<a href='#' onclick='returnURL' = /url=https?:\/\/.+)/.exec(location); if(returnUrl)location.href = returnUrl[1];else location.href = "/"'>Back to Blog</a>

The url parameter contains an open redirection vulnerability that allows you to change where the "Back to Blog" link takes the user. To solve the lab, construct and visit the following URL, remembering to change the URL to contain your lab ID and your exploit-server ID:

https://your-lab-id.web-security-academy.net/post?postId=4&url=https://your-exploit-server-id.web-security-academy.net/

Want to track your progress and have a more personalized learning experience? (It's free!)

In this topic

DOM-based vulnerabilities DOM clobbering

Find DOM-based vulnerabilities using Burp Suite

The benefits of working through PortSwigger's Web Security Academy

Get started with the Web Security Academy where you can practise exploiting vulnerabilities on realistic targets .. and its free!

^{Already got an account?
Login here}

Lab: DOM-based open redirection

Solution

In this topic

All topics

Find DOM-based vulnerabilities using Burp Suite

Find DOM-based vulnerabilities using Burp Suite