New Module: http_redirect_scan

[securestep9]

http_redirect_scan module checks if a target webserver returns an 3xx http status code and logs it along with the redirection URL as specified in the Location response header . This can be very useful for recon as some redirections can be going to a subdomain/URL not exposed anywhere else, the redirection can go to a login page and include an auth token/session id in the URL etc.

Additionally understanding the redirections within subdomains can help you identify any unauthorised or malicious redirects that may have been set up by cybercriminals. By regularly monitoring and auditing these redirects on the subdomains of your organisation you can mitigate the risk of phishing attacks and subdomain hijacking