Rocket.Chat Open Redirect

1 pointzeepzeep0 comments

Just saw this, it is so obviously an open redirect, sadly it's JS based not 301...

https://go.rocket.chat/invite?host=ycombinator.com&path=/submit

Check do same next time, then click open web application.

This is 100% just to collect user IPs and server domains.