diff --git a/Open Redirect/README.md b/Open Redirect/README.md index d74315fc..ec2cfb7a 100644 --- a/Open Redirect/README.md +++ b/Open Redirect/README.md @@ -114,6 +114,14 @@ http://www.yoursite.com/http://www.theirsite.com/ http://www.yoursite.com/folder/www.folder.com ``` +Using "?" characted, browser will translate it to "/?" + +```powershell +http://www.yoursite.com?http://www.theirsite.com/ +http://www.yoursite.com?folder/www.folder.com +``` + + Host/Split Unicode Normalization ```powershell https://evil.c℀.example.com . ---> https://evil.ca/c.example.com