Collected research

Exploitable Redirects on the Web: Identification, Prevalence, and Defense

Craig A. Shue, Andrew J. Kalafut and Minaxi Gupta · usenix.org

A WOOT '08 measurement of open redirects: heuristics identify redirect links, and which of them carry the destination in the URL, without contacting the destination. Across 2.5 million pages the authors found 557,646 redirects, 161,142 simple ones, and 79% (128,058) fully open. Proposes server-side signing and a browser-side detector for clients.

Record

Researcher

Craig A. Shue, Andrew J. Kalafut and Minaxi Gupta

Published by

usenix.org

Format

Whitepaper

Topic

Other

In the archive

• Collected in the 2008 research round

Tags

• open-redirect
• measurement-study
• large-scale-scan
• phishing
• url-parsing
• mitigation
• owasp-a04-2021

This page is the archive's own catalogue record. The research is the work of Craig A. Shue, Andrew J. Kalafut and Minaxi Gupta, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 11 August 2026.