PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Abusing Redirect Discrepancies to leak secrets in URLs

ethiack.com | research | #secrets | #web-security | #research | #open-redirect | #browser | #ethiack | #secret-leakage
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Ethiack shows how server and browser redirect discrepancies, including Chrome's ERR_TOO_MANY_REDIRECTS page, can halt redirect chains early and leak secrets carried in URL paths and fragments.
Published
Collected

Related coverage

research · portswigger.net
Introducing the URL validation bypass cheat sheet
PortSwigger launches the URL Validation Bypass Cheat Sheet, consolidating payloads for SSRF, CORS misconfiguration and open redirect testing, with three contexts and Intruder-friendly wordlists.
research · blog.quarkslab.com
CM Browser: HTTPS URL Leak
A vulnerability in Cheetah Mobile's CM Browser (50M+ installs) sends a device's full HTTPS URLs and query parameters to a remote server despite encrypted transport, leaking browsing activity.
research · aikido.dev
Aikido Attack finds multiple 0-days in Hoppscotch
AI pentest agents found three 0-days in the open source API platform Hoppscotch: open redirect to account takeover, stored XSS via mock server, and broken access control—patched in 2026.3.0.
research · vercel.com
DeepsecBench: evaluating model performance in finding cybersecurity vulnerabilities
Today we're releasing DeepsecBench, a benchmark that evaluates how well different models find security vulnerabilities in application code.
research · calif.io
RCE in Ladybird
# RCE in Ladybird When Bruce told me he wanted to hack Ladybird, my first thought was: why does the monk want to find bugs in a bug? Bruce Dang and Thai Duong April 24, 2026 madbugs Contents 1....
research · vercel.com
Security boundaries in agentic architectures
A framework for drawing security boundaries in agentic architectures. Most agents run with zero isolation between the agent and the code it generates. Learn where to draw the boundaries, from secret injection to full application sandboxing.
Back