Steps to perform URL redirection:
Select a website you want to attack.
Spider that website by right-clicking on the website in the target section of burp suite.
After the spider process is completed, sort list of website wrt parameters.
Once you find webpages, look for common parameter mentioned below.
Send that specific Web Page to the repeater and change that parameter to "XYZ.com".
Click go and render output to check if the page is redirected or not.
Example:
(1) www.xyz.com/dest=login.html | | (send to the repeater) | | change "dest=login.html" to "dest=xyz.com"(where xyz can be anything) and click go
If the page is redirected, you can successfully claim that vulnerability.
Common Parameter List:
dest
redirect
navigation
reference
port
host
feed
page
return
callback
domain
validate
show
view
window
url
path
uri
