================================================================================Twitter
Analytics Open Redirect Vulnerability
================================================================================
================================================================================
# Credit by Asheesh Anaconda
Description
An open redirect vulnerability exists in Twitter Analytics that
could
lead to spoofing. To exploit the vulnerability, an attacker could
send a
link that has a specially crafted URL and convince the user to
click the
link.
Steps To Reproduce:
Replace the phishing url with any website
http://analytics.twitter.com/daa/0/daa_optout_actions?action_id=3&&rd=<phishing
url>
http://analytics.twitter.com/daa/0/daa_optout_actions?action_id=3&&rd=https://www.google.com
