News for hackers. Stuff that matters.

A comment on Open redirects – a vulnerability class no one but attackers cares about. Parent comment

Re:Open redirects – a vulnerability class no one but attacke... by bjornedstrom on Friday January 04, 2019 @04:30AM (#18822846)
As a security professional I agree. When I worked at companies with bug bounties I always considered open redirects in the lamest category of bugs, unless the open redirect was cleverly combined with other issues, which was very rare.
[ Parent | on HN ]
Re:Open redirects – a vulnerability class no one but attacke... by Kalium on Friday January 04, 2019 @10:34AM (#18824678)
I once worked to patch an open redirect on a system where the redirect was at the end of the oauth flow. Could have been used for some pretty nasty phishing attacks.
[ Parent | on HN ]