> For the complete documentation index, see [llms.txt](https://gowthams.gitbook.io/bughunter-handbook/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/open-redirect.md).

# Open Redirect

**Blogs / Articles:**

**Writeups**:

* Top 25 open redirect reports - <https://medium.com/@corneacristian/top-25-open-redirect-bug-bounty-reports-5ffe11788794>
* <https://twitter.com/vickieli7/status/1339587647459618816?s=20>

**Cheatsheet:**

* <https://pentester.land/cheatsheets/2018/11/02/open-redirect-cheatsheet.html>

**Payloads:**

![https://twitter.com/lutfumertceylan/status/1272895185031217152](https://3284959579-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LmdDaax1PAvLD05wJYt%2F-MItb_whPTff4zGQ2Vao%2F-MItcFEscDLZ2R-EaKg3%2Fimage.png?alt=media\&token=298cefdd-bbc0-4d5c-ba40-43c2ed39d33e)

* <https://gist.github.com/EdOverflow/c4d6d8c43b315546892aa5dab67fdd6c>

Tools:

* <https://github.com/PushpenderIndia/ORhunter>

**Tweets:**

* [**https://twitter.com/DaherMohamed4/status/1227988338851942402**](https://twitter.com/DaherMohamed4/status/1227988338851942402)

[when you are looking for bugs like SSRF & Open Redirect. and there is a blacklisted character. try to bypassed using other Unicode characters. I found Open Redirect Bypass Using (。) Chinese dot "%E3%80%82". poc: redirect\_to=////evil%E3%80%82com #BugBounty #bugbountytip](https://twitter.com/h4x0r_dz/status/1335880542353559552)[<br>](https://twitter.com/h4x0r_dz/status/1335880542353559552/photo/1)

![https://twitter.com/0xblackbird/status/1377386706542895105?s=20](https://3284959579-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LmdDaax1PAvLD05wJYt%2F-MXk8TgnL47QhDE_PaCg%2F-MXmQYFtziuxLIkNbVau%2Fimage.png?alt=media\&token=d84e913b-eb26-46a9-9c1d-74e56ab6dc7f)

* <https://gist.github.com/0xblackbird/d7677a05ea50586cf2be0a601e665d1a>