Issue #8: Added unvalidated redirect vulnerability

Signed-off-by: Siddharth Goel <[email protected]>
siddharthgoel88 · May 10, 2015 · 1648047 · 1648047
1 parent 24d64e0
commit 1648047
Show file tree

Hide file tree

Showing 3 changed files with 22 additions and 0 deletions.
diff --git a/unvalidated-redirects/index.php b/unvalidated-redirects/index.php
@@ -0,0 +1,9 @@
+<?php
+	echo "Yuhu !! I am just another page <br/>";
+
+        if(isset($_GET['redirect'])){
+		echo "Will be redirecting in 5 seconds";
+                $redirect_url = $_GET['redirect'];
+                header("refresh: 5; url=" . $redirect_url );
+        }	
+?>
diff --git a/unvalidated-redirects/redirect.html b/unvalidated-redirects/redirect.html
@@ -0,0 +1,13 @@
+<!DOCTYPE>
+<html>
+	<head>
+		<meta charset="utf-8">
+		<title>Unvalidated Redirects</title>
+	</head>
+
+	<body>
+		<center>
+			<img src="unvalidated-redirects.jpg" alt="Unvalidated redirects" />
+		</center>
+	</body>
+</html>
diff --git a/unvalidated-redirects/unvalidated-redirects.jpg b/unvalidated-redirects/unvalidated-redirects.jpg