Orion Open Redirect Hunter

Orion Open Redirect Hunter automates manual tests for Open Redirect (Unvalidated Redirects/Forwards) in web apps.

It injects benign, controlled payloads pointing to example.com and never follows redirects. Instead, it observes:

HTTP 3xx Location headers

HTML meta refresh tags

JavaScript redirects (location.href, location.assign, location.replace)

If a redirect to the canary destination is detected, the tool flags the URL as vulnerable and records clear evidence.