id: zoho-webhook-token
info:
name: Zoho Webhook Disclosure
author: Ice3man
severity: info
metadata:
max-request: 1
tags: exposure,token,zoho
http:
- method: GET
path:
- "{{BaseURL}}"
extractors:
- type: regex
part: body
regex:
- 'https://creator\.zoho\.com/api/[A-Za-z0-9/\-_\.]+\?authtoken=[A-Za-z0-9]+'
# digest: 490a0046304402201d16cd7598f919216af5d3a94ecfedadac3e055ca4d65d33633b8652af5f26da022008cbf1ad2c43b7dbb7af3a2f3ca2854ff3c959d40c26edad703203eda40e5b6c:922c64590222798bb761d5b6d8e72950