Open Redirect on via GET parameter “redirect”

📰 Medium · Cybersecurity

Learn how to identify and exploit Open Redirect vulnerabilities via GET parameters, and understand why it matters for cybersecurity

intermediate Published 20 Jun 2026

Action Steps

Identify potential Open Redirect vulnerabilities by analyzing URL parameters, such as 'redirect' or 'next'
Use tools like Burp Suite or curl to test and exploit the vulnerability by sending a crafted GET request
Analyze the response to determine if the vulnerability is exploitable, and if so, extract the redirect URL
Test the redirect URL to ensure it redirects to the expected location, and document the findings
Apply mitigation strategies, such as validating user-inputted URLs and using whitelist-based redirects, to prevent Open Redirect attacks

Who Needs to Know This

This micro-lesson is useful for cybersecurity professionals, particularly those in penetration testing and vulnerability assessment roles, as it provides hands-on experience with identifying and exploiting Open Redirect vulnerabilities.

Key Insight

💡 Open Redirect vulnerabilities can be exploited via GET parameters, allowing attackers to redirect users to malicious sites

Key Takeaways

Learn how to identify and exploit Open Redirect vulnerabilities via GET parameters, and understand why it matters for cybersecurity

Full Article

Title: Open Redirect on preprod-datahub.xelians.fr through /login via GET parameter “redirect”

URL Source: https://medium.com/@lazyboii147/open-redirect-on-via-get-parameter-redirect-9438c3882638?source=rss------cybersecurity-5

Published Time: 2026-06-20T23:43:23Z

Markdown Content:
# Open Redirect on preprod-datahub.xelians.fr through /login via GET parameter “redirect” | by Lazyboii | Jun, 2026 | Medium

[Sitemap](https://medium.com/sitemap/sitemap.xml)

[Open in app](https://play.google.com/store/apps/details?id=com.medium.reader&referrer=utm_source%3DmobileNavBar&source=post_page---top_nav_layout_nav-----------------------------------------)

Sign up

[Sign in](https://medium.com/m/signin?operation=login&redirect=https%3A%2F%2Fmedium.com%2F%40lazyboii147%2Fopen-redirect-on-via-get-parameter-redirect-9438c3882638&source=post_page---top_nav_layout_nav-----------------------global_nav------------------)

[](https://medium.com/?source=post_page---top_nav_layout_nav-----------------------------------------)

Get app

[Write](https://medium.com/m/signin?operation=register&redirect=https%3A%2F%2Fmedium.com%2Fnew-story&source=---top_nav_layout_nav-----------------------new_post_topnav------------------)

[Search](https://medium.com/search?source=post_page---top_nav_layout_nav-----------------------------------------)

Sign up

[Sign in](https://medium.com/m/signin?operation=login&redirect=https%3A%2F%2Fmedium.com%2F%40lazyboii147%2Fopen-redirect-on-via-get-parameter-redirect-9438c3882638&source=post_page---top_nav_layout_nav-----------------------global_nav------------------)

![Image 1: Unknown user](https://miro.medium.com/v2/resize:fill:32:32/1*dmbNkD5D-u45r44go_cf0g.png)

# Open Redirect on preprod-datahub.xelians.fr through /login via GET parameter “redirect”

[![Image 2: Lazyboii](https://miro.medium.com/v2/da:true/resize:fill:32:32/0*vhjQH6UTJj57hC-t)](https://medium.com/@lazyboii147?source=post_page---byline--9438c3882638---------------------------------------)

[Lazyboii](https://medium.com/@lazyboii147?source=post_page---byline--9438c3882638---------------------------------------)

Follow

5 min read

·

2 hours ago

[](https://medium.com/m/signin?actionUrl=https%3A%2F%2Fmedium.com%2F_%2Fvote%2Fp%2F9438c3882638&operation=register&redirect=https%3A%2F%2Fmedium.com%2F%40lazyboii147%2Fopen-redirect-on-via-get-parameter-redirect-9438c3882638&user=Lazyboii&userId=a01bed4b85fe&source=---header_actions--9438c3882638---------------------clap_footer------------------)

[](https://medium.com/m/signin?actionUrl=https%3A%2F%2Fmedium.com%2F_%2Frepost%2Fp%2F9438c3882638&operation=register&redirect=https%3A%2F%2Fmedium.com%2F%40lazyboii147%2Fopen-redirect-on-via-get-parameter-redirect-9438c3882638&user=Lazyboii&userId=a01bed4b85fe&source=---header_actions--9438c3882638---------------------repost_header------------------)

[](https://medium.com/m/signin?actionUrl=https%3A%2F%2Fmedium.com%2F_%2Fbookmark%2Fp%2F9438c3882638&operation=register&redirect=https%3A%2F%2Fmedium.com%2F%40lazyboii147%2Fopen-redirect-on-via-get-parameter-redirect-9438c3882638&source=---header_actions--9438c3882638---------------------bookmark_footer------------------)

[Listen](https://medium.com/m/signin?actionUrl=https%3A%2F%2Fmedium.com%2Fplans%3Fdimension%3Dpost_audio_button%26postId%3D9438c3882638&operation=register&redirect=https%3A%2F%2Fmedium.com%2F%40lazyboii147%2Fopen-redirect-on-via-get-parameter-redirect-9438c3882638&source=---header_actions--9438c3882638---------------------post_audio_button------------------)

Share

![Image 3](https://miro.medium.com/v2/resize:fit:50/0*zNoIG1WPQndzGUCV)

[Lazyboii](https://medium.com/@lazyboii147)

5 min read

·

Report metadata

Bug type Open Redirect (CWE-601)

Scope

[https://preprod-datahub.xelians.fr/](https://preprod-datahub.xelians.fr/)

Host

preprod-datahub.xelians.fr

Endpoint

/login

Vulnerable part

GET parameter

Part name

redirect

Payload

[https://attacker.example/](https://attacker.example/)

Tec

Read full article → ← Back to Reads

Open Redirect on via GET parameter “redirect”

Key Takeaways

Full Article

Related Videos