Open Redirect & URL Validation (offensive-open-redirect)

Authorization & Scope Notice: This skill is part of the REA_Skill + claude-red Unified Security & Reverse Engineering Suite. It is designed strictly for authorized security assessments, defensive architecture reviews, vulnerability triage, bug bounty verification, and remediation engineering on software, infrastructure, and assets you own or have explicit permission to test.

Overview

Open redirect vulnerability assessment covering returnUrl/next parameter validation, protocol-relative URLs, backslash/authority confusion, OAuth redirect_uri token leakage chains, and strict origin allowlisting. Use when auditing login flows, OAuth callbacks, and external link routers.

Operational Workflow