Hello there!
In this write-up, I will go through my recent P3.
As you know, some platforms do not accept open redirect vulnerability and consider it out of scope. However, in some cases, you can upgrade the open redirect to XSS or other significant vulnerabilities.
Started with waybackurls and greb for the keyword “post_logout_redirect_uri=” since it’s usually used by web apps for redirection.
