nuclei-templates/http/token-spray/api-dbt.yaml

id: api-dbt

info:
  name: dbt Cloud API - Test
  author: dwisiswant0
  severity: info
  description: dbt Cloud API test was conducted.
  reference:
    - https://docs.getdbt.com/docs/introduction
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
    max-request: 1
  tags: token-spray,dbt

self-contained: true

http:
  - method: GET
    path:
      - "https://cloud.getdbt.com/api/v2/accounts/"

    headers:
      Content-Type: application/json
      Authorization: Token {{token}}
    matchers:
      - type: word
        part: body
        words:
          - "Invalid token"
          - "Authentication credentials were not provided."
        condition: or
        negative: true

# digest: 4b0a00483046022100c6d9d46a6748067d30d5eac61baf84db06bdd5d2c20f81eebe45d88632c24436022100b6acad72a60126e38544bc5e1ec88a391fbc36c314ae3ef933ed1d4ef2c39a6a:922c64590222798bb761d5b6d8e72950