Only relative redirects are allowed!

Important information

Our challenges do NOT require any bruteforcing/directory fuzzing/massive amounts of traffic. Please practise hacking on our challenges manually.

Failure to abide by the rules will put you at risk of being restricted from using our free challenges.

Begin challenge

Easy Open URL Redirect

Sometimes developers want to redirect the user after a certain action has been completed but they don't want users to redirect to third party websites.

To combat this developers will sometimes check if the first character is / and if yes, allow the redirect.

Can you find the vulnerable parameter & work out how to bypass this open redirect filter?

Completed the challenge?

You can browse the intended solution to this challenge below.

Solution

Challenge hints

Stuck? Click below to reveal hints!

Guides

All about Open Redirects [Uber 8k Bug] Login CSRF + Open Redirect = Account Take Over by RonChan Scanning JS files for bugs

Learn like a pro

Practise hacking on a fully functioning website containing real bugs found on bug bounty programs. Use your hacker mindset to uncover as many vulnerabilities as possible!

Become a BOUNTY HUNTER