Open Redirect

Art of deception

1. Google.com open redirect

Google has a built in Open Redirect you can chain: https://google[.]com/amp/s/poc.rhynorater.com

If there is a case where only google.com is being allowed to redirect to then you can use this layer of redirect.

Last updated