- High-speed scanning (10,000+ mutations/min) for open redirect detection.
- URL mutation engine to fuzz redirect parameters.
- Match response status codes (
-m
) and filter vulnerable results only (-v
). - Built-in concurrency control for optimal performance.
- Color-coded output and real-time counters.
To install redirx:
go install -v github.com/yourpwnguy/redirx/cmd/redirx@latest
# Optional: move binary to a system-wide directory
cp ~/go/bin/redirx /usr/local/bin/
Usage:
redirx [flags]
Flags:
-h, --help help for redirx
-m, --mcode ints Status Codes to match
-p, --payloads string Path to file containing payloads
-r, --rate int Max concurrent requests (rate-limit) (default 5)
-u, --url strings Url(s) to scan (repeatable)
-l, --url-list string Path to file containing urls (one per line)
-v, --vuln Show only vulnerable results (BUG) and suppress SAFE lines
redirx
is designed with these goal: to be the fastest in its class and precision. Unlike bloated scanners, redirx aggressively mutates URL parameters and uses intelligent response validation to reduce noise. Whether you're automating recon pipelines or manually hunting, redirx
makes testing open redirects fast, accurate, and easy to integrate.
Open to pull requests, bug reports, and feature suggestions. Got an idea? Open an issue or submit a PR.