Collected research

Redirector's hell

Пекло редиректорів (Redirectors’ hell) - Websecurity

Looped DoS built from two URL shorteners aimed at each other: a TinyURL custom alias resolves to an ElfURL link that resolves back, so any client following either address redirects forever. Demonstrated with live tinyurl.com and elfurl.com pairs. Firefox halts with a Redirect Loop Error, IE does not, and crawlers keep both services loaded. Classed as abuse of TinyURL's custom-alias feature.

Record

Document

Пекло редиректорів (Redirectors’ hell) - Websecurity

Published by

websecurity.com.ua

Topic

Other

In the archive

• Collected in the 2008 research round

Tags

• dos
• open-redirect
• abuse-of-functionality
• case-study
• url-parsing
• owasp-a04-2021

This page is the archive's own catalogue record. The research is the work of websecurity.com.ua, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 9 August 2026.