{"id":15955,"date":"2022-10-21T12:29:00","date_gmt":"2022-10-21T12:29:00","guid":{"rendered":"https:\/\/www.stroople.com\/?p=15955"},"modified":"2024-07-26T13:02:57","modified_gmt":"2024-07-26T13:02:57","slug":"attaques-par-redirection-ouverte","status":"publish","type":"post","link":"https:\/\/www.stroople.com\/fr\/open-redirect-attacks\/","title":{"rendered":"Attaque: Open Redirect"},"content":{"rendered":"<div data-elementor-type=\"wp-post\" data-elementor-id=\"15955\" class=\"elementor elementor-15955\" wpc-filter-elementor-widget=\"1\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-7d49f15 elementor-section-items-stretch elementor-section-height-min-height elementor-section-content-middle elementor-section-stretched elementor-section-boxed elementor-section-height-default syd-sticky-section-no\" data-id=\"7d49f15\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;stretch_section&quot;:&quot;section-stretched&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t\t<div class=\"elementor-background-overlay\"><\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-no\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-e483e8d syd-sticky-section-no\" data-id=\"e483e8d\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-0199858 syd-sticky-section-no elementor-widget elementor-widget-heading\" data-id=\"0199858\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">\nAttaque: Open Redirect<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b5eba93 syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"b5eba93\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Quels sont-ils et comment les \u00e9viter ?<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7f7d994 elementor-widget-divider--view-line syd-sticky-section-no elementor-widget elementor-widget-divider\" data-id=\"7f7d994\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2ae64cd elementor-align-center elementor-icon-list--layout-traditional elementor-list-item-link-full_width syd-sticky-section-no elementor-widget elementor-widget-icon-list\" data-id=\"2ae64cd\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul class=\"elementor-icon-list-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"#aboutus\">\n\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">D\u00e9filer vers le bas<\/span>\n\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-32cbefc elementor-section-stretched elementor-section-boxed elementor-section-height-default elementor-section-height-default syd-sticky-section-no\" data-id=\"32cbefc\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;stretch_section&quot;:&quot;section-stretched&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-ddf5d0b syd-sticky-section-no\" data-id=\"ddf5d0b\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-98ff542 syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"98ff542\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Longtemps n\u00e9glig\u00e9, le phishing est d\u00e9sormais au c\u0153ur des pr\u00e9occupations de chacun et a su se renouveler ces derni\u00e8res ann\u00e9es, tant du c\u00f4t\u00e9 de l'attaque que de la d\u00e9fense.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-208e8af syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"208e8af\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Les m\u00e9thodes \u00e9voluent rapidement, tout comme les outils utilis\u00e9s pour la combattre. Au cours des derni\u00e8res ann\u00e9es, nous avons vu les solutions passer de <em>de filtre bay\u00e9sien classique <\/em>(qui \u00e9valuent l'en-t\u00eate et le contenu d'un message \u00e9lectronique entrant et d\u00e9terminent la probabilit\u00e9 qu'il constitue un spam) \u00e0 des solutions dites <em>d'intelligence artificielle,<\/em> sans pour autant que les changements soient massifs sur le temps de prise en charge. En fait, l'explosion de l'usage du phishing combin\u00e9e \u00e0 une obligation des entreprises \u00e0 rembourser induit une augmentation toujours plus importante de travail pour la #blueteam, aussi bien dans la d\u00e9tection que dans la rem\u00e9diation (au travers des take-down par exemple).<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f566047 syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"f566047\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Faire du Threat Hunting, \u00e7a on connait chez Stroople, et c'est pour cela que je vais vous pr\u00e9senter ici une m\u00e9thode assez m\u00e9connue mais simple et particuli\u00e8rement efficace contre les syst\u00e8mes de s\u00e9curit\u00e9 bas\u00e9s sur la \"qualit\u00e9\" du domaine pr\u00e9sent dans l'URL. Qualit\u00e9 mesur\u00e9e au moyen de calcul de l'anciennet\u00e9 de domaine, DA du domaine et ainsi de suite.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4e3a379 syd-sticky-section-no elementor-widget elementor-widget-heading\" data-id=\"4e3a379\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Mais l'Open Redirect, c'est quoi?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9ca8e55 syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"9ca8e55\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>L'Open Redirect, on en rencontre souvent quand on parle de Web, lors d'un audit ou d'un #pentest. Bien souvent, elle est caus\u00e9e par un manque de sanitization donc il se trouve souvent que le m\u00eame param\u00e8tre en cause soit vuln\u00e9rable \u00e0 une #xss, ou m\u00eame #lfi \/ #rfi voire une #xxe.<\/p><p>Consid\u00e9r\u00e9e souvent comme un probl\u00e8me mineur en terme de s\u00e9curit\u00e9 pure, les derni\u00e8res ann\u00e9es ont montr\u00e9 qu'elle pouvait \u00eatre un probl\u00e8me majeur en mati\u00e8re de #seo et de #phishing.<\/p><p>Passons le SEO pour cet article m\u00eame s'il y'aurait beaucoup \u00e0 dire et int\u00e9ressons nous au cas du phishing.<\/p><p>Je vous donne une petite d\u00e9finition simple:<\/p><p>Une Open Redirect, c'est une redirection non voulue, sans interaction utilisateur, d'un site A vers un site B.<\/p><p>Et parce que rien ne vaut un exemple, je vais vous donner une OR que j'ai trouv\u00e9 r\u00e9cemment:<\/p><p><a href=\"https:\/\/www.notamweb.aviation-civile.gouv.fr\/Script\/IHM\/Com_Chargement.php?URL=https:\/\/google.fr\/humans.txt\">https:\/\/www.notamweb.aviation-civile.gouv.fr\/Script\/IHM\/Com_Chargement.php?URL=https:\/\/google.fr\/humans.txt<\/a><\/p><p>Donc si vous prenez ce lien, et que vous cliquez dessus, vous serez redirig\u00e9 vers le site de google sans votre accord, alors que vous \u00e9tiez suppos\u00e9 cliquer sur un lien de l'aviation civile. C'est \u00e7a une OR.<\/p><p>Imaginez que vous recevez, par exemple, un courriel d'une entreprise en qui vous avez confiance et qui vous propose une offre exceptionnelle pour vous remercier d'\u00eatre client. Comme l'offre semble trop belle pour \u00eatre vraie, vous soup\u00e7onnez que quelque chose pourrait \u00eatre \"bidon\", c'est pourquoi vous passez votre curseur sur le lien pour v\u00e9rifier sa l\u00e9gitimit\u00e9.<\/p><p>Tout semble correct, alors vous cliquez sur le lien. \ud83d\ude31 Mais que faire si le lien pointe vers le site web de confiance et vous redirige ensuite vers une page web ou une application malveillante contr\u00f4l\u00e9e par des escrocs ? C'est exactement ce que peut faire Open Redirect.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7df45a3 syd-sticky-section-no elementor-widget elementor-widget-heading\" data-id=\"7df45a3\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Concret maintenant. Ouvrir Redirect &amp; Phishing<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2f5b784 syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"2f5b784\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Je pense que vous devez voir d\u00e8s maintenant o\u00f9 je veux en venir.. Avec une OR, avec en site A un site respectable, cr\u00e9dible avec une vraie activit\u00e9 et en site B un site malveillant, r\u00e9cent, clairement du phishing, on peut arriver \u00e0 faire de l'\u00e9vasion.<\/p><p>Si, par exemple, vous pensiez mettre en place un syst\u00e8me d'anciennet\u00e9 de domaines pour lutter contre le spam et le phishing, sachez que vous devez aussi v\u00e9rifier la m\u00e9thode. En effet, si vous r\u00e9cup\u00e9rez classiquement la valeur du domaine dans un cas d'OR, le domaine extrait sera le domaine A et non le domaine malveillant B.<br \/>Un peu de pratique maintenant. Cette fois-ci, je vous propose de prendre un autre exemple que celui plus haut avec une vraie page de phishing. Et je vais utiliser une campagne en cours pour \u00eatre en condition r\u00e9elle. Voici la page de phishing une fois que vous \u00eates dessus:<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-15cabb8 syd-sticky-section-no elementor-widget elementor-widget-image\" data-id=\"15cabb8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"768\" height=\"378\" src=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/Amazon-phishing-768x378.png\" class=\"attachment-medium_large size-medium_large wp-image-14534\" alt=\"\" srcset=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/Amazon-phishing-768x378.png 768w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/Amazon-phishing-300x148.png 300w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/Amazon-phishing-1024x504.png 1024w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/Amazon-phishing-1536x756.png 1536w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/Amazon-phishing-18x9.png 18w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/Amazon-phishing-1000x492.png 1000w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/Amazon-phishing-230x113.png 230w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/Amazon-phishing-350x172.png 350w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/Amazon-phishing-480x236.png 480w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/Amazon-phishing.png 1909w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8d3b098 syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"8d3b098\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Donc on voit clairement que c'est une page de phishing, aux couleurs d'Amazon car j'ai choisi Amazon via le param\u00e8tre GET logo. Cette campagne ne cible pas qu'Amazon mais aussi des groupes fran\u00e7ais.<\/p><p>Pour des raisons de s\u00e9curit\u00e9, je vais mettre les urls malveillantes dans des balises de code pour qu'elles soient non cliquables. L'url de la page est donc:<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b485bb7 syd-sticky-section-no elementor-widget elementor-widget-image\" data-id=\"b485bb7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"743\" height=\"95\" src=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/URL-malveillante.png\" class=\"attachment-large size-large wp-image-14535\" alt=\"\" srcset=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/URL-malveillante.png 743w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/URL-malveillante-300x38.png 300w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/URL-malveillante-18x2.png 18w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/URL-malveillante-230x29.png 230w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/URL-malveillante-350x45.png 350w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/URL-malveillante-480x61.png 480w\" sizes=\"(max-width: 743px) 100vw, 743px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e5dcffb syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"e5dcffb\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Je l'ai bien s\u00fbr test\u00e9 sur urlscan.io: <a href=\"https:\/\/urlscan.io\/result\/6a9a7105-f7c2-4252-887b-9aff3bdca7f6\/\">https:\/\/urlscan.io\/result\/6a9a7105-f7c2-4252-887b-9aff3bdca7f6\/<\/a><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-694f943 syd-sticky-section-no elementor-widget elementor-widget-image\" data-id=\"694f943\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"1024\" height=\"686\" src=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/busysong-1024x686.png\" class=\"attachment-large size-large wp-image-14536\" alt=\"\" srcset=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/busysong-1024x686.png 1024w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/busysong-300x201.png 300w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/busysong-768x514.png 768w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/busysong-18x12.png 18w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/busysong-1000x670.png 1000w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/busysong-230x154.png 230w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/busysong-350x234.png 350w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/busysong-480x321.png 480w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/busysong.png 1383w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-583cf19 syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"583cf19\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Et je l'ai test\u00e9 sur <a href=\"https:\/\/www.isitphishing.ai de Vade\" data-wplink-url-error=\"true\">https:\/\/www.isitphishing.ai de Vade<\/a>:<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-88d4a0e syd-sticky-section-no elementor-widget elementor-widget-image\" data-id=\"88d4a0e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"478\" src=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/isit-1024x478.png\" class=\"attachment-large size-large wp-image-14537\" alt=\"\" srcset=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/isit-1024x478.png 1024w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/isit-300x140.png 300w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/isit-768x358.png 768w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/isit-1536x717.png 1536w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/isit-18x8.png 18w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/isit-1000x467.png 1000w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/isit-230x107.png 230w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/isit-350x163.png 350w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/isit-480x224.png 480w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/isit.png 1894w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f8c1855 syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"f8c1855\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Ce n'est pas encore d\u00e9tect\u00e9 par cette solution mais l'id\u00e9e globale est faite. Donc on a une page \u00e9vidente de phishing avec un domaine malicieux.<\/p><p>Maintenant prenons une OR utilis\u00e9e par une campagne de phishing en cours, et utilisons l'url de phishing donn\u00e9e plus haut.<\/p><p>Vous constaterez bien la redirection.<\/p><p>Pour finaliser la d\u00e9monstration, je vous propose une petite exp\u00e9rience en utilisant la librairie urllib pour r\u00e9cup\u00e9rer la valeur du domaine:<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-fcce3cb syd-sticky-section-no elementor-widget elementor-widget-image\" data-id=\"fcce3cb\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"191\" src=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/librairie-1024x191.png\" class=\"attachment-large size-large wp-image-14538\" alt=\"\" srcset=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/librairie-1024x191.png 1024w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/librairie-300x56.png 300w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/librairie-768x143.png 768w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/librairie-18x3.png 18w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/librairie-1000x186.png 1000w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/librairie-230x43.png 230w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/librairie-350x65.png 350w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/librairie-480x89.png 480w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/10\/librairie.png 1502w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6183473 syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"6183473\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Ces 2 liens pointent tous deux vers la page de phishing mais dans le 2e cas, l'OR fait que le parsing consid\u00e8re le domaine de l'url comme \u00e9tant celui de bigpress et non le domaine de destination qui est buysong.<br \/>Bien s\u00fbr, il est possible d'am\u00e9liorer encore cette m\u00e9thode, en la combinant \u00e0 d'autres m\u00e9thodes, ou en d\u00e9guisant le lien dans une balise html.<\/p><p>Chez Stroople, l'OR on la connait bien et on couvre bien des m\u00e9thodes de d\u00e9tection gr\u00e2ce \u00e0 notre p\u00f4le de #cti. On rend fou aussi nos coll\u00e8gues commerciaux gr\u00e2ce \u00e0 l'OR.<\/p><p>Amusez-vous bien et bon phishing \u00e0 tous\ud83d\ude09<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-440bdb9 syd-sticky-section-no elementor-widget elementor-widget-testimonial\" data-id=\"440bdb9\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"testimonial.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-testimonial-wrapper\">\n\t\t\t\n\t\t\t\t\t\t<div class=\"elementor-testimonial-meta elementor-has-image elementor-testimonial-image-position-aside\">\n\t\t\t\t<div class=\"elementor-testimonial-meta-inner\">\n\t\t\t\t\t\t\t\t\t\t\t<div class=\"elementor-testimonial-image\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"2560\" height=\"2560\" src=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/09\/AdobeStock_434245333-scaled.jpeg\" class=\"attachment-full size-full wp-image-14236\" alt=\"\" srcset=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/09\/AdobeStock_434245333-scaled.jpeg 2560w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/09\/AdobeStock_434245333-300x300.jpeg 300w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/09\/AdobeStock_434245333-1024x1024.jpeg 1024w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/09\/AdobeStock_434245333-150x150.jpeg 150w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/09\/AdobeStock_434245333-768x768.jpeg 768w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/09\/AdobeStock_434245333-1536x1536.jpeg 1536w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/09\/AdobeStock_434245333-2048x2048.jpeg 2048w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/09\/AdobeStock_434245333-12x12.jpeg 12w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/09\/AdobeStock_434245333-1000x1000.jpeg 1000w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/09\/AdobeStock_434245333-230x230.jpeg 230w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/09\/AdobeStock_434245333-350x350.jpeg 350w, https:\/\/www.stroople.com\/wp-content\/uploads\/2022\/09\/AdobeStock_434245333-480x480.jpeg 480w\" sizes=\"(max-width: 2560px) 100vw, 2560px\" \/>\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t<div class=\"elementor-testimonial-details\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"elementor-testimonial-name\">Jules (Oletros)<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"elementor-testimonial-job\">Analyste de l'\u00e9quipe violette<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e0bee95 elementor-align-center syd-sticky-section-no elementor-widget elementor-widget-button\" data-id=\"e0bee95\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"https:\/\/www.linkedin.com\/newsletters\/7120442855684231170\/?displayConfirmation=true\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">S'abonner sur LinkedIn<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>Open Redirect Attacks What Are They And How To Avoid Them ? Scroll Down Phishing, which has long been neglected, is now [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":15959,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[114],"tags":[],"class_list":["post-15955","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security-operations-soc-detection"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Open Redirect Attacks - Stroople<\/title>\n<meta name=\"description\" content=\"There are a few consistent patterns in phishing emails, and if you can learn to identify them, you are much less at risk of clicking on one. Open Redirect Attacks: What Are They And How To Avoid Them\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.stroople.com\/fr\/attaques-par-redirection-ouverte\/\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Open Redirect Attacks - Stroople\" \/>\n<meta property=\"og:description\" content=\"There are a few consistent patterns in phishing emails, and if you can learn to identify them, you are much less at risk of clicking on one. Open Redirect Attacks: What Are They And How To Avoid Them\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.stroople.com\/fr\/attaques-par-redirection-ouverte\/\" \/>\n<meta property=\"og:site_name\" content=\"Stroople\" \/>\n<meta property=\"article:published_time\" content=\"2022-10-21T12:29:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-07-26T13:02:57+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2023\/01\/AdobeStock_238459613-scaled.jpeg\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1707\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"STROOPLEADMINISTRATOR\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@Stroople1\" \/>\n<meta name=\"twitter:site\" content=\"@Stroople1\" \/>\n<meta name=\"twitter:label1\" content=\"\u00c9crit par\" \/>\n\t<meta name=\"twitter:data1\" content=\"STROOPLEADMINISTRATOR\" \/>\n\t<meta name=\"twitter:label2\" content=\"Dur\u00e9e de lecture estim\u00e9e\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/open-redirect-attacks\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/open-redirect-attacks\\\/\"},\"author\":{\"name\":\"STROOPLEADMINISTRATOR\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#\\\/schema\\\/person\\\/a1eb93cbbffe1681999993af123a6d44\"},\"headline\":\"Open Redirect Attacks\",\"datePublished\":\"2022-10-21T12:29:00+00:00\",\"dateModified\":\"2024-07-26T13:02:57+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/open-redirect-attacks\\\/\"},\"wordCount\":900,\"publisher\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/open-redirect-attacks\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.stroople.com\\\/wp-content\\\/uploads\\\/2023\\\/01\\\/AdobeStock_238459613-scaled.jpeg\",\"articleSection\":[\"SecOps\"],\"inLanguage\":\"fr-FR\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/open-redirect-attacks\\\/\",\"url\":\"https:\\\/\\\/www.stroople.com\\\/open-redirect-attacks\\\/\",\"name\":\"Open Redirect Attacks - Stroople\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/open-redirect-attacks\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/open-redirect-attacks\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.stroople.com\\\/wp-content\\\/uploads\\\/2023\\\/01\\\/AdobeStock_238459613-scaled.jpeg\",\"datePublished\":\"2022-10-21T12:29:00+00:00\",\"dateModified\":\"2024-07-26T13:02:57+00:00\",\"description\":\"There are a few consistent patterns in phishing emails, and if you can learn to identify them, you are much less at risk of clicking on one. Open Redirect Attacks: What Are They And How To Avoid Them\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/open-redirect-attacks\\\/#breadcrumb\"},\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.stroople.com\\\/open-redirect-attacks\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/open-redirect-attacks\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.stroople.com\\\/wp-content\\\/uploads\\\/2023\\\/01\\\/AdobeStock_238459613-scaled.jpeg\",\"contentUrl\":\"https:\\\/\\\/www.stroople.com\\\/wp-content\\\/uploads\\\/2023\\\/01\\\/AdobeStock_238459613-scaled.jpeg\",\"width\":2560,\"height\":1707,\"caption\":\"Open Redirect Attacks: What Are They And How To Avoid Them\u200b\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/open-redirect-attacks\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\\\/\\\/www.stroople.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Open Redirect Attacks\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#website\",\"url\":\"https:\\\/\\\/www.stroople.com\\\/\",\"name\":\"Stroople\",\"description\":\"Cybersecurity Expertise\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.stroople.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"fr-FR\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#organization\",\"name\":\"Stroople Cybersecurity\",\"alternateName\":\"Stroople\",\"url\":\"https:\\\/\\\/www.stroople.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.stroople.com\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/Logo-Stroople-responsive.png\",\"contentUrl\":\"https:\\\/\\\/www.stroople.com\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/Logo-Stroople-responsive.png\",\"width\":1000,\"height\":1000,\"caption\":\"Stroople Cybersecurity\"},\"image\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/Stroople1\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/stroople\\\/\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UC_kTnaswN04kjIrHU0Pi_qg\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#\\\/schema\\\/person\\\/a1eb93cbbffe1681999993af123a6d44\",\"name\":\"STROOPLEADMINISTRATOR\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/cf565399cf069755c53f17b9c363d364247d5ad1c1bc3bc3ff3b9ff928b80411?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/cf565399cf069755c53f17b9c363d364247d5ad1c1bc3bc3ff3b9ff928b80411?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/cf565399cf069755c53f17b9c363d364247d5ad1c1bc3bc3ff3b9ff928b80411?s=96&d=mm&r=g\",\"caption\":\"STROOPLEADMINISTRATOR\"},\"sameAs\":[\"https:\\\/\\\/stroople.com\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Attaques par redirection ouverte - Stroople","description":"Les courriels d'hame\u00e7onnage pr\u00e9sentent quelques constantes, et si vous apprenez \u00e0 les identifier, vous risquez beaucoup moins de cliquer sur l'un d'entre eux. Attaques par redirection ouverte : Qu'est-ce que c'est et comment l'\u00e9viter ?","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.stroople.com\/fr\/attaques-par-redirection-ouverte\/","og_locale":"fr_FR","og_type":"article","og_title":"Open Redirect Attacks - Stroople","og_description":"There are a few consistent patterns in phishing emails, and if you can learn to identify them, you are much less at risk of clicking on one. Open Redirect Attacks: What Are They And How To Avoid Them","og_url":"https:\/\/www.stroople.com\/fr\/attaques-par-redirection-ouverte\/","og_site_name":"Stroople","article_published_time":"2022-10-21T12:29:00+00:00","article_modified_time":"2024-07-26T13:02:57+00:00","og_image":[{"width":2560,"height":1707,"url":"https:\/\/www.stroople.com\/wp-content\/uploads\/2023\/01\/AdobeStock_238459613-scaled.jpeg","type":"image\/jpeg"}],"author":"STROOPLEADMINISTRATOR","twitter_card":"summary_large_image","twitter_creator":"@Stroople1","twitter_site":"@Stroople1","twitter_misc":{"\u00c9crit par":"STROOPLEADMINISTRATOR","Dur\u00e9e de lecture estim\u00e9e":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.stroople.com\/open-redirect-attacks\/#article","isPartOf":{"@id":"https:\/\/www.stroople.com\/open-redirect-attacks\/"},"author":{"name":"STROOPLEADMINISTRATOR","@id":"https:\/\/www.stroople.com\/#\/schema\/person\/a1eb93cbbffe1681999993af123a6d44"},"headline":"Open Redirect Attacks","datePublished":"2022-10-21T12:29:00+00:00","dateModified":"2024-07-26T13:02:57+00:00","mainEntityOfPage":{"@id":"https:\/\/www.stroople.com\/open-redirect-attacks\/"},"wordCount":900,"publisher":{"@id":"https:\/\/www.stroople.com\/#organization"},"image":{"@id":"https:\/\/www.stroople.com\/open-redirect-attacks\/#primaryimage"},"thumbnailUrl":"https:\/\/www.stroople.com\/wp-content\/uploads\/2023\/01\/AdobeStock_238459613-scaled.jpeg","articleSection":["SecOps"],"inLanguage":"fr-FR"},{"@type":"WebPage","@id":"https:\/\/www.stroople.com\/open-redirect-attacks\/","url":"https:\/\/www.stroople.com\/open-redirect-attacks\/","name":"Attaques par redirection ouverte - Stroople","isPartOf":{"@id":"https:\/\/www.stroople.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.stroople.com\/open-redirect-attacks\/#primaryimage"},"image":{"@id":"https:\/\/www.stroople.com\/open-redirect-attacks\/#primaryimage"},"thumbnailUrl":"https:\/\/www.stroople.com\/wp-content\/uploads\/2023\/01\/AdobeStock_238459613-scaled.jpeg","datePublished":"2022-10-21T12:29:00+00:00","dateModified":"2024-07-26T13:02:57+00:00","description":"Les courriels d'hame\u00e7onnage pr\u00e9sentent quelques constantes, et si vous apprenez \u00e0 les identifier, vous risquez beaucoup moins de cliquer sur l'un d'entre eux. Attaques par redirection ouverte : Qu'est-ce que c'est et comment l'\u00e9viter ?","breadcrumb":{"@id":"https:\/\/www.stroople.com\/open-redirect-attacks\/#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.stroople.com\/open-redirect-attacks\/"]}]},{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/www.stroople.com\/open-redirect-attacks\/#primaryimage","url":"https:\/\/www.stroople.com\/wp-content\/uploads\/2023\/01\/AdobeStock_238459613-scaled.jpeg","contentUrl":"https:\/\/www.stroople.com\/wp-content\/uploads\/2023\/01\/AdobeStock_238459613-scaled.jpeg","width":2560,"height":1707,"caption":"Open Redirect Attacks: What Are They And How To Avoid Them\u200b"},{"@type":"BreadcrumbList","@id":"https:\/\/www.stroople.com\/open-redirect-attacks\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.stroople.com\/"},{"@type":"ListItem","position":2,"name":"Open Redirect Attacks"}]},{"@type":"WebSite","@id":"https:\/\/www.stroople.com\/#website","url":"https:\/\/www.stroople.com\/","name":"Stroople","description":"Expertise en cybers\u00e9curit\u00e9","publisher":{"@id":"https:\/\/www.stroople.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.stroople.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fr-FR"},{"@type":"Organization","@id":"https:\/\/www.stroople.com\/#organization","name":"Stroople Cybers\u00e9curit\u00e9","alternateName":"Stroople","url":"https:\/\/www.stroople.com\/","logo":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/www.stroople.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.stroople.com\/wp-content\/uploads\/2026\/05\/Logo-Stroople-responsive.png","contentUrl":"https:\/\/www.stroople.com\/wp-content\/uploads\/2026\/05\/Logo-Stroople-responsive.png","width":1000,"height":1000,"caption":"Stroople Cybersecurity"},"image":{"@id":"https:\/\/www.stroople.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/Stroople1","https:\/\/www.linkedin.com\/company\/stroople\/","https:\/\/www.youtube.com\/channel\/UC_kTnaswN04kjIrHU0Pi_qg"]},{"@type":"Person","@id":"https:\/\/www.stroople.com\/#\/schema\/person\/a1eb93cbbffe1681999993af123a6d44","name":"STROOPLEADMINISTRATEUR","image":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/secure.gravatar.com\/avatar\/cf565399cf069755c53f17b9c363d364247d5ad1c1bc3bc3ff3b9ff928b80411?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/cf565399cf069755c53f17b9c363d364247d5ad1c1bc3bc3ff3b9ff928b80411?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/cf565399cf069755c53f17b9c363d364247d5ad1c1bc3bc3ff3b9ff928b80411?s=96&d=mm&r=g","caption":"STROOPLEADMINISTRATOR"},"sameAs":["https:\/\/stroople.com"]}]}},"_links":{"self":[{"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/posts\/15955","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/comments?post=15955"}],"version-history":[{"count":0,"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/posts\/15955\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/media\/15959"}],"wp:attachment":[{"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/media?parent=15955"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/categories?post=15955"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/tags?post=15955"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}