Forest Global Training Partners

Cyber Risks · PortSwigger Research

[MoBP] Flexible redirection

Summary: Burp Suite now lets users configure Intruder and Repeater to follow redirects with four options: on-site only, in-scope only, all redirects, or none. The previous behavior restricted redirect-following to the same host and port to prevent inadvertently attacking third-party sites via off-site redirectors that relayed attack payloads in the redirection URL.

What's compelling: The old same-host restriction blocked legitimate testing cases, such as HTTPS login brute-forcing redirected to an HTTP result page, single sign-on flows that bounce through a central authentication host, and fuzzing where a redirect to a dynamic error page is useful but a redirect to the logout function kills the session.

Read the original at PortSwigger Research ↗

Topics
Identity & Access Management
Related