Open Redirect Scanner

Find URL redirect vulnerabilities that attackers use for phishing campaigns.

How this scan works

Probe common redirect param names (next, redirect, url, return, continue) with a safe, non-resolving test domain
Inspect the Location header / meta-refresh for an unvalidated external redirect
Check for allow-list behavior vs. raw passthrough