从开放式重定向到账户接管：一次意外的旅程

Free Link🎈

Hey there!😁

Image by Copilot

You know you’re built differently when, while everyone else is worried about Monday meetings, you’re worried about missing an Open Redirect in your mass recon. 😂📜

My life is basically:
Netflix, Bug Bounties, Missed Texts, and Occasional Jackpot Bugs. 🎯

If recon was a love language, trust me, I’d be married by now. 💍

Anyway, here’s the wild, completely accidental story of how I turned a boring Open Redirect into a full-blown Account Takeover (ATO). 🚀

So there I was, doing my usual subdomain hunting + endpoint fuzzing ritual:

subfinder -d target.com -silent | tee subs.txt
waybackurls target.com | grep -iE 'redirect|next|url|return|continue' | tee params.txt
ffuf -w params.txt -u https://target.com/FUZZ

💡 Tip: Always hunt for parameters like:

?redirect=
?next=
?url=
?continue=
?returnUrl=