hunt-open-redirect SKILL.md skillA
hunt-open-redirect from galact-byte/galact-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add galact-byte/galact-skills/hunt-open-redirect@git:20260806.1b94651Pins git:20260806.1b94651 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- galact-byte/galact-skills
- Path
skills/hunt-open-redirect/SKILL.md- Versions recorded
- 1
- Latest version
- git:20260806.1b94651, committed Aug 6, 2026
- Size
- 4,137 bytes
- Repository stars
- 7
- License
- a license file GitHub does not identify
在授权渗透测试中挖掘开放重定向（open redirect）及其危害升级。当目标按用户可控参数做跳转（登录后 next、SSO returnUrl、注销、短链、回调）时使用——典型场景：绕过 URL 白名单跳到外站钓鱼、泄露 token/Referer、开放重定向作为 SSRF/OAuth token 窃取的跳板。适用目标类型 Web / REST API / SSO。触发场景包括用户说"测下开放重定向""这个 next/redirect 参数能跳外站吗""绕过重定向白名单""open redirect 偷 token"。输出：可跳外站的参数 + PoC + 危害升级的 finding（含 killed 记录）。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# hunt-open-redirect · 开放重定向猎杀 只解决**开放重定向一类**：找到"按用户输入跳转且校验不严"的参数，绕过白名单跳到外部域，并评估危害升级（钓鱼、Referer/token 泄露、作为 SSRF/OAuth 窃取跳板）。判定靠**响应把浏览器导向攻击者控制的外部域**（`Location` 头或前端跳转）。 开放重定向本身多为中低危，价值在**升级**（配合 OAuth `redirect_uri`、SSRF、token 泄露）。默认只跳到**自控的无害标记域**证明可控，不做钓鱼/不诱导真实用户。绕过写法与真实报告见 `reference.md`。 ## Scope（授权范围） **先确认授权。** 落实：授权目标、可用的自控标记域（证明可跳外站）、是否评估升级链（OAuth/SSRF）。任一不清楚就停下问。 ## Goal 判定跳转参数能否被导向任意外部域（含白名单绕过），给出可复现 PoC 与危害升级路径（钓鱼/token 泄露/SSRF/OAuth），只跳自控域证明。 ## Workflow `scope-check → recon → hunt → validate → report`。 ### 1. scope-check - **动作**：写 `evidence/scope.txt`（marker_domain）。 - **命令**：`bash tools/recon.sh <target> --scope-only`。 - **终止条件**：scope 明确，否则 KILL。 ### 2. recon - **动作**：枚举跳转参数——`redirect`/`redirect_uri`/`next`/`return`/`returnUrl`/`goto`/`dest`/`continue`/`url`/`callback`，登录/注销/SSO/短链流程。 - **输出**：`recon/endpoints.json`。 - **命令**：`bash tools/recon.sh <target>`。 - **终止条件**：至少 1 个跳转参数。 ### 3. hunt - **动作**：对每个参数发绕过变体（`//marker`、`/\marker`、`https://marker`、`https://target@marker`、`https://target.marker`、`https://marker%23.target`、反斜杠/空白/编码），检查 `Location` 头或 meta/JS 跳转是否指向 marker 域。 - **输出**：`candidates.json`。 …
Read the whole file at its exact version.
How to install
mdr add galact-byte/galact-skills/hunt-open-redirect@sha256:cb5894b361741e5fThe line at the top of this page pins the label git:20260806.1b94651, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_j33kaaecu2xyswor)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on Aug 6, 2026.
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (4137 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
galact-byte/galact-skills · 7 stars · license a license file GitHub does not identify · pushed 2026-10-12 · branch master
API
GET https://markdownregistry.com/api/v1/artifacts/art_j33kaaecu2xyswor GET https://markdownregistry.com/api/v1/resolve?ref=galact-byte/galact-skills/hunt-open-redirect GET https://markdownregistry.com/api/v1/blob/cb5894b361741e5f4c44856e67c5c4cddb06a4b4e31197d751e8f7e3a95934af
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from galact-byte/galact-skills
Every file in galact-byte/galact-skills