Test a redirect endpoint against common open redirect payloads. Provide the base URL including the redirect parameter (e.g. https://example.com/login?next=) and a canary domain to inject. The backend probes each payload and reports which ones escape to an external host.
Target
Results
Testing payloads...
Enter a URL with a redirect parameter to begin testing...
How It Works
Each payload is appended to the provided URL and sent to the target server. The server-side response is inspected — no browser redirects are followed. If the Location header points to the canary domain, the endpoint is marked vulnerable.
Only public HTTP/HTTPS targets on ports 80 and 443 are allowed. Use this tool only against systems you own or have explicit permission to test.