open-redirect.yaml

#collect:
#  - uniq:
#    - [ URI ]
generate:
  - payload:
    - "//DNS_MARKER"
    - "http://DNS_MARKER/"
  - method:
    - replace
detect:
  - response:
    - body: "<META[^>]+content=[^>]+DNS_MARKER"
  - response:
    - body: "<a[^>]+href=[^>]+DNS_MARKER"
  - response:
    - headers:
        - 'Location': DNS_MARKER
meta-info:
  - type: redir
  - threat: 30
  - tags:
    - Open Redirect
    - Unsafe Redirection # TODO: WASC and OWASP references