Important information
Our challenges do NOT require any bruteforcing/directory fuzzing/massive amounts of traffic. Please practise hacking on our challenges manually.
Failure to abide by the rules will put you at risk of being restricted from using our free challenges.
Only relative redirects are allowed!
Easy
Open URL Redirect
Sometimes developers want to redirect the user after a certain action has been completed but they don't want users to redirect to third party websites.
To combat this developers will sometimes check if the first character is / and if yes, allow the redirect.
Can you find the vulnerable parameter & work out how to bypass this open redirect filter?
Completed the challenge?
You can browse the intended solution to this challenge below.
Getting started
Learn about vulnerability types
Getting started in bug bounties
Test your knowledge
Free Web Application Challenges
Guides for your hunts
ZSeano's Methodology
Effective Note Taking for bug bounties
Useful Resources
Disclosed HackerOne Reports
Our community
Endorsed Members
Hackevents
Member Articles