nuclei-templates/http/token-spray/api-google-drive.yaml

id: api-google-drive

info:
  name: Google Drive API Test
  author: geeknik
  severity: info
  reference:
    - https://developers.google.com/drive/api/guides/about-sdk
  metadata:
    max-request: 1
  tags: token-spray,google,drive,intrusive

self-contained: true

http:
  - raw:
      - |
        GET https://www.googleapis.com/drive/v3/files/{{randstr}}.txt/%3fkey={{token}}&supportsAllDrives=true HTTP/1.1
        Referer: {{referer}}
        Content-Type:application/json

    matchers:
      - type: word
        part: body
        words:
          - 'File not found: {{randstr}}.txt.'

# digest: 4b0a00483046022100f3d2e430755236cb5354472588b85c1caa009551fffb628d51c8321a8c900fd3022100c756303eff99e074d92d5f4b223322b94572b1515b741fee9473fa14cc0984ef:922c64590222798bb761d5b6d8e72950
Update and rename google-drive.yaml to api-google-drive.yaml 2022-05-27 04:35:41 +00:00			`id: api-google-drive`
Create google-drive.yaml 2022-05-26 12:35:59 +00:00
			`info:`
			`name: Google Drive API Test`
			`author: geeknik`
			`severity: info`
			`reference:`
			`- https://developers.google.com/drive/api/guides/about-sdk`
Added max request counter of each template 2023-04-28 08:11:21 +00:00			`metadata:`
			`max-request: 1`
templateman update 2023-10-14 11:27:55 +00:00			`tags: token-spray,google,drive,intrusive`
Create google-drive.yaml 2022-05-26 12:35:59 +00:00
			`self-contained: true`
templateman update 2023-10-14 11:27:55 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com> 2023-04-27 04:28:59 +00:00			`http:`
Create google-drive.yaml 2022-05-26 12:35:59 +00:00			`- raw:`
			`- \|`
			`GET https://www.googleapis.com/drive/v3/files/{{randstr}}.txt/%3fkey={{token}}&supportsAllDrives=true HTTP/1.1`
Update api-google-drive.yaml (#4520) This template is meant to be used like so: `nuclei -t token-spray/api-google-drive.yaml -var token=google_api_key -var referer=https://www.hostname_where_google_api_key_was_found.com` The way the template was edited to include `Referer: {{BaseURL}}` won't work because it adds `Referer: www.googleapis.com` which results in an ipRefererBlocked error from Google. If you can't define the referer, this template is useless and should be deleted. So please accept this change back to my original vision of this template. Thank you. 2022-06-01 19:04:52 +00:00			`Referer: {{referer}}`
Create google-drive.yaml 2022-05-26 12:35:59 +00:00			`Content-Type:application/json`

			`matchers:`
			`- type: word`
			`part: body`
			`words:`
			`- 'File not found: {{randstr}}.txt.'`
TemplateMan Update [Fri Oct 20 11:41:12 UTC 2023] :robot: 2023-10-20 11:41:13 +00:00
			`# digest: 4b0a00483046022100f3d2e430755236cb5354472588b85c1caa009551fffb628d51c8321a8c900fd3022100c756303eff99e074d92d5f4b223322b94572b1515b741fee9473fa14cc0984ef:922c64590222798bb761d5b6d8e72950`