HexBrain

HackerOne · Report #57163

Open-redirect on hackerone.com

Validstatus
6upvotes
23 Apr 2015disclosed

Summary

asd2

How it was found

Hello!

I would like to report about open-redirect on hackerone.com

Here is the PoC that redirects to example.com IP address: https://hackerone.com/%2F1572395042

There is one more strange behavior in URL. For example: https://hackerone.com//hackerone.com - works https://hackerone.com//hackerone1.com - doesn't work

I will investigate it further and get back with details if I find something more.

Thanks!

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original