PocketPentester/vuln-lab/web/www/out.php

<?php
$target = $_GET['dest'] ?? $_GET['url'] ?? '/';
header("Location: $target", true, 302);