'redirect' 검색 결과

Guide authorized testing of open redirects, where a site sends visitors to an unintended destination. This skill defines test boundaries, alternative investigation paths, and the evidence needed to report findings or conclude an investigation.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Define the scope of an authorized redirect test
• Review evidence for OAuth redirect_uri findings
• Choose another direction when redirect checks stall

Configure OAuth, the authorization flow used for provider sign-in, with portless development URLs. It guides callback registration and authentication library settings, helping diagnose rejected domains, redirect URL mismatches, and callbacks that point to the wrong address.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Setting up provider sign-in with portless development URLs
• Diagnosing redirect URL mismatch errors
• Using an owned domain when .localhost is rejected

Find open redirects, where a website sends visitors to an externally controlled address. Check URL parameters and browser scripts, confirm actual navigation, and investigate whether the redirect can expose OAuth authorization codes or enable server-side access to internal services.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Find redirect candidates in collected URLs
• Review JavaScript that controls browser navigation
• Assess OAuth authorization code exposure through redirects

Audit website redirects after URL migrations, domain changes, or CMS upgrades. Record each redirect path and HTTP status code, identify unnecessary steps or loops, and update redirects to point directly to the final destination.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Checking redirect paths after a URL migration
• Finding redirect chains and loops after a domain change
• Simplifying redirect rules accumulated through CMS upgrades

Audit JavaScript page redirects, confirm their impact on loading time with performance measurements, and identify where server-side 301 or 302 redirects can replace them. Get specific findings and an explanation of loading and search indexing concerns.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Investigating slow loads caused by page redirects
• Reviewing redirects that use window.location
• Planning server-side 301 or 302 redirects

Audit internal links after URL migrations, domain changes, or site rebuilds. Trace redirects, record source pages and final destinations, and guide link updates so visitors and search crawlers reach the destination without extra redirect requests.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Update internal links after a URL migration
• Audit links after a domain change
• Find redirect chains after a site rebuild

Check HTML for meta refresh redirects that can interrupt reading and confuse users. Suggest server-side redirects or clear links users choose themselves, with guidance for checking the resulting behavior using accessibility tools or assistive technology.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Finding automatic redirects in HTML
• Replacing meta refresh with server-side redirects
• Reviewing page transitions for screen reader users

Check that HTTP requests redirect to HTTPS with a permanent 301 response while preserving the page path and query parameters. Review server or CDN settings, verify response headers, and explain how HSTS helps returning visitors avoid HTTP requests.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Checking HTTP redirects before a site launch
• Verifying paths and query parameters survive redirects
• Reviewing server redirects and HSTS settings

Identify Open Redirect vulnerabilities where applications route users to arbitrary external URLs based on unvalidated input. Prove maximum impact by chaining Open Redirects with OAuth token theft, SSRF, or Phishing, graduating this typically low-risk finding into a high-severity report.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Trace OAuth and OIDC sign-in flows in a CTF sandbox, from redirects through token exchange to application acceptance. Show where tokens become a recognized identity or permission, and preserve the smallest reproducible flow.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Trace sign-in redirects and callback parameters
• Inspect state, nonce, and PKCE validation
• Check how tokens become application identity or permissions

Build intermediary servers for authorized security exercises, separating public traffic from the command server used by the test team. It covers simple forwarding, request filtering with nginx or Apache, TLS certificates, and validation against the exercise’s traffic profile.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Separating public infrastructure from an exercise command server
• Filtering exercise traffic against a defined profile
• Adding TLS certificates to a redirector

Investigate security flaws in OAuth login flows, including weak redirect checks, leaked access tokens, and skipped authentication steps. The skill guides testing of web and mobile integrations and helps document demonstrated impact and reproducible findings.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing redirect validation in social login
• Checking state and nonce validation
• Investigating mobile login links

Assess account takeover risks across password resets, email changes, JWT tokens, SSO, and recovery flows. The skill connects individual weaknesses into testable scenarios and requires proof that an attacker session can gain access to a separate test account.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Review password reset links and token handling
• Check reauthentication for email and password changes
• Assess takeover risks involving JWT and SSO

Retrieve HTML or JSON from URLs through Browserbase without starting a browser session. Inspect HTTP status codes and response headers, control redirects, and enable proxies for static page retrieval and simple content collection.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Retrieve HTML or JSON from static pages
• Inspect HTTP status codes and response headers
• Check redirect destinations

Fix OAuth PKCE "Session not found" or "No code verifier" errors in SPAs after redirect from external auth server. Use when: (1) OAuth callback fails with session/verifier not found despite flow starting correctly, (2) PKCE code_verifier stored in sessionStorage is missing after redirect back from auth server, (3) Error only happens in production or cross-origin redirects, not in local dev. Root cause: sessionStorage is lost when the browser opens a new tab, changes browsing context, or certain browsers clear it during cross-origin navigation. Fix: use localStorage instead (clean up after exchange).

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Route protection with beforeLoad, redirect()/throw redirect(), isRedirect helper, authenticated layout routes (_authenticated), non-redirect auth (inline login), RBAC with roles and permissions, auth provider integration (Auth0, Clerk, Supabase), router context for auth state.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

在授权渗透测试中挖掘开放重定向（open redirect）及其危害升级。当目标按用户可控参数做跳转（登录后 next、SSO returnUrl、注销、短链、回调）时使用——典型场景：绕过 URL 白名单跳到外站钓鱼、泄露 token/Referer、开放重定向作为 SSRF/OAuth token 窃取的跳板。适用目标类型 Web / REST API / SSO。触发场景包括用户说"测下开放重定向""这个 next/redirect 参数能跳外站吗""绕过重定向白名单""open redirect 偷 token"。输出：可跳外站的参数 + PoC + 危害升级的 finding（含 killed 记录）。

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Configure Netlify projects via netlify.toml and the _headers/_redirects files — covering build settings and deploy contexts alongside environment variables/scopes and the Secrets Controller plus redirect/rewrite/proxy and custom-header rules. Use when setting a build command or publish directory, adding redirect or rewrite or proxy rules, configuring custom headers or basic auth, setting or scoping environment variables and secrets, wiring up a monorepo or SPA fallback, or skipping unnecessary builds. Reach for this whenever you touch netlify.toml or ask "why is my env var undefined in a function" or "how do I redirect this path".

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Hunt Open Redirect — all types including low-impact, chained to OAuth token theft → ATO, phishing chains. URL parameter manipulation, JavaScript redirect, meta refresh, header injection. Use when hunting redirect bugs or building ATO chains.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Audit URL word separators and generate hyphenated slugs, the readable parts of page addresses. Plan changes from underscores or spaces, including permanent redirects, internal link updates, and sitemap changes.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Auditing underscores and spaces in URL paths
• Generating hyphenated slugs from page titles
• Planning URL migrations with permanent redirects

Audit canonical URLs, which tell search engines the preferred page address, for redirects. The skill checks rendered HTML and HTTP responses, identifies affected routes or templates, and guides updates that point directly to the final URL returning 200 OK.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Checking canonical URLs for redirects
• Reviewing canonical tags after URL changes
• Inspecting templates that generate canonical metadata

Access and test protected Vercel deployments with agent-browser using an existing Vercel identity and a short-lived authentication token. Keep deployment protection enabled while diagnosing login redirects, environment access mismatches, and application authentication errors.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Testing a protected Preview deployment
• Diagnosing Vercel login redirects and protection errors
• Identifying access rules needed for Production testing

Create, edit, and reorganize Mastra documentation with guidance matched to the page type. Find the relevant rules for writing, links, navigation, shared components, diagrams, and redirects when reviewing pages or changing their structure.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Write or revise Mastra documentation pages
• Review sidebars and page organization
• Check redirects when moving or deleting pages

Open redirect playbook. Use when URL parameters, form actions, or JavaScript sinks control navigation targets and may redirect users to attacker-controlled destinations.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.