devanshbatham / openredirex Goto Github PK

View Code? Open in Web Editor NEW

626.0 16.0 123.0 860 KB

A fuzzer for detecting open redirect vulnerabilities

License: MIT License

Python 93.31% Shell 6.69%

openredirect open-redirect openredirect-scanner openredirect-fuzzer

openredirex's Introduction

Hey, It's Devansh ⚡

Projects 🏗️

ParamSpider - Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing
FavFreak - Making Favicon.ico based Recon Great again
OpenRedireX - A fuzzer for detecting open redirect vulnerabilities
CertEagle - Weaponizing Live CT logs for automated monitoring of assets
Quaithe - Quaithe empowers you to execute multiple commands in parallel for blazing-fast performance.
DNSleuth - DNSleuth allows you to spy on the DNS queries your machine is making.
Watson - Watson is a utility for note management and search from your terminal.
ip2cloud - Check IP addresses against known cloud provider IP address ranges
getresolvers - A simple utility to fetch freshly updated DNS resolvers
revwhoix - A simple utility to perform reverse WHOIS lookups using whoisxml API
heaptruffle - Mine URLs from Browser's Heap Snapshot for fun and profit
ip2asn - A utility to quickly map IP addresses to their respective ASN
revit - A command-line utility for performing reverse DNS lookups
getsan - A utility to fetch and display dns names from the SSL/TLS cert data
headerpwn - A fuzzer for finding anomalies and analyzing how servers respond to different HTTP headers
dnsaudit - A command-line utility for auditing DNS configuration using Zonemaster API
rayder - A lightweight tool for orchestrating and organizing your bug hunting recon / pentesting command-line workflows
realm - A utility for recursively traversing SSL/TLS certificates for collecting DNS names

Knowledge Bases 💡

Awesome Bugbounty Writeups - A curated list of bugbounty writeups (Bug type wise)
Vulnerabilities Unmasked - Learn complex security vulnerabilities in simple terms that even a five-year-old can understand!
Everything About DNS - Explains the basics of DNS at different levels of complexity for readers with various technical backgrounds.
Solidity Gas Optimization Tips - Solidity Gas Optimization Tips and Tricks

Contact 📞

openredirex's People

Contributors

Stargazers

Watchers

Forkers

affilares marcostolosa 0xfatty mefkan-24 dviros askyeye golfzp sherlocksecurity pspn maxvaer kiralab lychhayly shahid1996 securitym0nk sec99 bbhunter massito hack404-007 hehacks mmg1 cyrilmia 5l1v3r1 inosec u3mur4 asadanwar90 sk3lk0 r4b3rt commercialbear habibendris10 vishal9066 blmqt cowlingbanana 3cr3sc3nt tamersp25 rassec prisnelov zaidozaid ravkishu killvxk jh0nnyb3g00d chouaibhm jsoh2020 hacking-repo zeroc00i hollow667 ototot ameg-yag cr4ck32 h4ckdi baasanbayaroverflow nusiloot cqr-cryeye-forks zpaav slooppe upenderadepu elamaran619 pratyaksh06 no-github peekandhax trickest-community madusec sy3omda nocomp bugpie54 rajivraj hackinfinity polling-repo-continua sleepyeinstein gprime31 hartl3y94 designerscoders darkoneiroi steev90 blackkhawkk bug-tools guleum piyushimself cyberindia1 ckevens abdibimantara fostane 0xsojalsec excloudx6 xmardus oxl-legacy agentjacker not1cyyy heyihuiforjava eldrago11 0xkayala tochibap nishantbhagat57 firasens danzee1 madalin-dogaru stivenhacker ethicalsecurity-agency afwu peff1235 satyasys

openredirex's Issues

ModuleNotFoundError: No module named 'aiohttp'

root@bbmachine:~/tools/OpenRedireX# python3 openredirex.py -h
Traceback (most recent call last):
File "openredirex.py", line 3, in
import aiohttp
ModuleNotFoundError: No module named 'aiohttp'

Not working - wrong way to install

It not working basically python modules missing

system arch linux

in my pov installing using this meathod script
isnt not good idea

we must use others way to pack in linux

FUZZ error

this error always comes back when I pass a list of urls + wordlist payloads
@devanshbatham

SSL error in data received

I am getting the following error when running this tool:

SSL error in data received
protocol: <asyncio.sslproto.SSLProtocol object at 0x7faf9d066128>
transport: <_SelectorSocketTransport fd=10 read=polling write=<idle, bufsize=0>>
Traceback (most recent call last):
File "/usr/lib/python3.7/asyncio/sslproto.py", line 526, in data_received
ssldata, appdata = self._sslpipe.feed_ssldata(data)
File "/usr/lib/python3.7/asyncio/sslproto.py", line 207, in feed_ssldata
self._sslobj.unwrap()
File "/usr/lib/python3.7/ssl.py", line 767, in unwrap
return self._sslobj.shutdown()
ssl.SSLError: [SSL: KRB5_S_INIT] application data after close notify (_ssl.c:2609)
SSL error in data received
protocol: <asyncio.sslproto.SSLProtocol object at 0x7faf9d08a128>
transport: <_SelectorSocketTransport fd=34 read=polling write=<idle, bufsize=0>>
Traceback (most recent call last):
File "/usr/lib/python3.7/asyncio/sslproto.py", line 526, in data_received
ssldata, appdata = self._sslpipe.feed_ssldata(data)
File "/usr/lib/python3.7/asyncio/sslproto.py", line 207, in feed_ssldata
self._sslobj.unwrap()
File "/usr/lib/python3.7/ssl.py", line 767, in unwrap
return self._sslobj.shutdown()
ssl.SSLError: [SSL: KRB5_S_INIT] application data after close notify (_ssl.c:2609)
SSL error in data received
protocol: <asyncio.sslproto.SSLProtocol object at 0x7faf9d066a58>
transport: <_SelectorSocketTransport fd=24 read=polling write=<idle, bufsize=0>>
Traceback (most recent call last):
File "/usr/lib/python3.7/asyncio/sslproto.py", line 526, in data_received
ssldata, appdata = self._sslpipe.feed_ssldata(data)
File "/usr/lib/python3.7/asyncio/sslproto.py", line 207, in feed_ssldata
self._sslobj.unwrap()
File "/usr/lib/python3.7/ssl.py", line 767, in unwrap
return self._sslobj.shutdown()
ssl.SSLError: [SSL: KRB5_S_INIT] application data after close notify (_ssl.c:2609)
SSL error in data received
protocol: <asyncio.sslproto.SSLProtocol object at 0x7faf9d08a668>
transport: <_SelectorSocketTransport fd=42 read=polling write=<idle, bufsize=0>>
Traceback (most recent call last):
File "/usr/lib/python3.7/asyncio/sslproto.py", line 526, in data_received
ssldata, appdata = self._sslpipe.feed_ssldata(data)
File "/usr/lib/python3.7/asyncio/sslproto.py", line 207, in feed_ssldata
self._sslobj.unwrap()
File "/usr/lib/python3.7/ssl.py", line 767, in unwrap
return self._sslobj.shutdown()
ssl.SSLError: [SSL: KRB5_S_INIT] application data after close notify (_ssl.c:2609)
SSL error in data received
protocol: <asyncio.sslproto.SSLProtocol object at 0x7faf9d08a7b8>
transport: <_SelectorSocketTransport fd=44 read=polling write=<idle, bufsize=0>>
Traceback (most recent call last):
File "/usr/lib/python3.7/asyncio/sslproto.py", line 526, in data_received
ssldata, appdata = self._sslpipe.feed_ssldata(data)
File "/usr/lib/python3.7/asyncio/sslproto.py", line 207, in feed_ssldata
self._sslobj.unwrap()
File "/usr/lib/python3.7/ssl.py", line 767, in unwrap
return self._sslobj.shutdown()
ssl.SSLError: [SSL: KRB5_S_INIT] application data after close notify (_ssl.c:2609)

error while processing the url

i'm facing this issue here:

echo 'https://domain.tld&path=FUZZ' | openredirex -k FUZZ

/ __ ____ ___ ____ / __ ___ / ()____ _ __
/ / / / __ / _ / __ / // / _ / __ / / / _ | |//
/ // / // / / / / / , / __/ // / / / / /> <
_/ ./_// /// ||_/_,/// ___//||
/_/

[INFO] Processing 1 URLs with 3 payloads.
[ERROR] Error fetching: https://domain.tld&path=//[email protected]/%2f..
[ERROR] Error fetching: https://domain.tld&path=///google.com/%2f..
[ERROR] Error fetching: https://domain.tld&path=///[email protected]/%2f..
Processing: 100%|████████████████████| 3/3 [00:02<00:00, 14.72url/s]

i know domain.tld has an open redirect vulnerability in the given parameter but this tool doesn't seem to be finding that and i don't know what is causing the error either.
i'm using ubuntu 22 and i have installed all the required python libraries.

i'll appreicate your help

SSL error in data received

[+] Total URLs loaded : 1
[+] Total Payloads loaded : 44
[+] Scanning Started [Only Suspected URLs with redirect history will be displayed , all others will be ignored]

SSL error in data received
protocol: <asyncio.sslproto.SSLProtocol object at 0x7fd6a6902400>
transport: <_SelectorSocketTransport fd=6 read=polling write=<idle, bufsize=0>>
Traceback (most recent call last):
File "/usr/local/lib/python3.7/asyncio/sslproto.py", line 526, in data_received
ssldata, appdata = self._sslpipe.feed_ssldata(data)
File "/usr/local/lib/python3.7/asyncio/sslproto.py", line 207, in feed_ssldata
self._sslobj.unwrap()
File "/usr/local/lib/python3.7/ssl.py", line 767, in unwrap
return self._sslobj.shutdown()
ssl.SSLError: [SSL: KRB5_S_INIT] application data after close notify (_ssl.c:2609)
SSL error in data received
protocol: <asyncio.sslproto.SSLProtocol object at 0x7fd6a5eb3c88>
transport: <_SelectorSocketTransport fd=8 read=polling write=<idle, bufsize=0>>
Traceback (most recent call last):
File "/usr/local/lib/python3.7/asyncio/sslproto.py", line 526, in data_received
ssldata, appdata = self._sslpipe.feed_ssldata(data)
File "/usr/local/lib/python3.7/asyncio/sslproto.py", line 207, in feed_ssldata
self._sslobj.unwrap()
File "/usr/local/lib/python3.7/ssl.py", line 767, in unwrap
return self._sslobj.shutdown()
ssl.SSLError: [SSL: KRB5_S_INIT] application data after close notify (_ssl.c:2609)
SSL error in data received
protocol: <asyncio.sslproto.SSLProtocol object at 0x7fd6a5ebaa90>
transport: <_SelectorSocketTransport fd=29 read=polling write=<idle, bufsize=0>>
Traceback (most recent call last):

may i know how to fix? :(

ModuleNotFoundError: No module named 'aiohttp'

(env) root@kali:~/OpenRedireX# python3.7 openredirex.py -u "https://REDACTED_TARGET=FUZZ" -p payloads.txt --keyword FUZZ
Traceback (most recent call last):
File "openredirex.py", line 2, in
import aiohttp
ModuleNotFoundError: No module named 'aiohttp'

AttributeError: module 'asyncio' has no attribute 'run'

Traceback (most recent call last):
File "openredirex.py", line 126, in
main()
File "openredirex.py", line 106, in main
asyncio.run(redirme(url_list , args.payloads, args.keyword))
AttributeError: module 'asyncio' has no attribute 'run'

Traceback (most recent call last):

Traceback (most recent call last):
File "/home/kali/Bugbounty/OpenRedireX/openredirex.py", line 126, in
main()
File "/home/kali/Bugbounty/OpenRedireX/openredirex.py", line 108, in main
asyncio.run(redirme(args.list, args.payloads, args.keyword))
File "/usr/local/lib/python3.9/asyncio/runners.py", line 44, in run
return loop.run_until_complete(main)
File "/usr/local/lib/python3.9/asyncio/base_events.py", line 642, in run_until_complete
return future.result()
File "/home/kali/Bugbounty/OpenRedireX/openredirex.py", line 80, in redirme
await gen_tasks(session, url_list, payload_list, keyword)
File "/home/kali/Bugbounty/OpenRedireX/openredirex.py", line 39, in gen_tasks
results = await asyncio.gather(*tasks)
File "/home/kali/Bugbounty/OpenRedireX/openredirex.py", line 46, in getResponse
async with session.get(r_url, allow_redirects=True, timeout=10) as response:
File "/usr/local/lib/python3.9/site-packages/aiohttp/client.py", line 1117, in aenter
self._resp = await self._coro
File "/usr/local/lib/python3.9/site-packages/aiohttp/client.py", line 492, in _request
req = self._request_class(
File "/usr/local/lib/python3.9/site-packages/aiohttp/client_reqrep.py", line 305, in init
self.update_host(url)
File "/usr/local/lib/python3.9/site-packages/aiohttp/client_reqrep.py", line 366, in update_host
raise InvalidURL(url)
aiohttp.client_exceptions.InvalidURL: 88407996/articles?portalId=5212498&currentArticleId=10127762043&currentArticleLanguage=en&currentUrl=https://help.aware360.com/knowledge-base/setting-your&ssoLogin=false

not working buggyyyyyy

AIOHTTP

root@localhost:~/Tools/OpenRedireX# python3.7 openredirex.py -l url.txt -p payloads.txt --keyword FUZZ
Traceback (most recent call last):
File "openredirex.py", line 2, in
import aiohttp
ModuleNotFoundError: No module named 'aiohttp'

giving error asyncio unable to run the tool

Traceback (most recent call last):
File "./openredirex.py", line 126, in
main()
File "./openredirex.py", line 108, in main
asyncio.run(redirme(args.list, args.payloads, args.keyword))
AttributeError: module 'asyncio' has no attribute 'run'

Im getting this while running

Not working!

ultimate@Ultimate-Haxor:/Desktop/Quick_Recon/OpenRedireX$ python3.7 openredirex.py -l urls.txt -p payloads.txt --keyword FUZZ
Traceback (most recent call last):
File "openredirex.py", line 3, in
import aiohttp
ModuleNotFoundError: No module named 'aiohttp'
ultimate@Ultimate-Haxor:/Desktop/Quick_Recon/OpenRedireX$

all pip installed. But it not work properly.

issue

(env) root@user-VirtualBox:/home/mru/OpenRedireX# python3.7 openredirex.py -l urls.txt -p payloads.txt --keyword FUZZ

         ____                   ____           ___          _  __
        / __ \____  ___  ____  / __ \___  ____/ (_)_______ | |/ /
       / / / / __ \/ _ \/ __ \/ /_/ / _ \/ __  / / ___/ _ \|   / 
      / /_/ / /_/ /  __/ / / / _, _/  __/ /_/ / / /  /  __/   |  
      \____/ .___/\___/_/ /_/_/ |_|\___/\__,_/_/_/   \___/_/|_|  
            /_/                                                    


                      - By Devansh(Asm0d3us) and NullPxl

Traceback (most recent call last):
File "openredirex.py", line 125, in
main()
File "openredirex.py", line 107, in main
asyncio.run(redirme(args.list, args.payloads, args.keyword))
AttributeError: module 'asyncio' has no attribute 'run'

zsh: killed

python3 openredirex.py -l /home/kali/Desktop/redir.txt -p /home/kali/Desktop/redirlist.txt --keyword=FUZZ

[+] Total URLs loaded : 64231
[+] Total Payloads loaded : 866
[+] Scanning Started [Only Suspected URLs with redirect history will be displayed , all others will be ignored]

zsh: killed python3 openredirex.py -l /home/kali/Desktop/redir.txt -p --keyword=FUZZ

kali linux