nuclei-templates/exposures/tokens/slack/slack-bot-token.yaml

id: slack-bot-token

info:
  name: Slack access token
  author: nadino
  severity: info
  tags: exposure,token,slack

requests:
  - method: GET
    path:
      - "{{BaseURL}}"

    extractors:
      - type: regex
        part: body
        regex:
          - "xoxb-[0-9A-Za-z\\-]{51}"
More tokens and keys :rocket: 2021-04-08 15:45:49 +00:00			`id: slack-bot-token`
refactor: Description field uniformization * info field reorder * reference values refactored to list * added new lines after the id and before the protocols * removed extra new lines * split really long descriptions to multiple lines (part 1) * other minor fixes 2022-04-22 10:38:41 +00:00
HTTP username and password Detect urls like https://username:password@vulnerable.com and https://apitoken@vulnerable.com 2020-05-07 10:09:09 +00:00			`info:`
More tokens and keys :rocket: 2021-04-08 15:45:49 +00:00			`name: Slack access token`
HTTP username and password Detect urls like https://username:password@vulnerable.com and https://apitoken@vulnerable.com 2020-05-07 10:09:09 +00:00			`author: nadino`
severity updates 2020-09-20 12:57:43 +00:00			`severity: info`
Moving tokens under exposures with tags support 2021-04-13 13:48:02 +00:00			`tags: exposure,token,slack`
refactor: Description field uniformization * info field reorder * reference values refactored to list * added new lines after the id and before the protocols * removed extra new lines * split really long descriptions to multiple lines (part 1) * other minor fixes 2022-04-22 10:38:41 +00:00
HTTP username and password Detect urls like https://username:password@vulnerable.com and https://apitoken@vulnerable.com 2020-05-07 10:09:09 +00:00			`requests:`
			`- method: GET`
			`path:`
Preparing for request clustering 2021-01-13 07:31:46 +00:00			`- "{{BaseURL}}"`
temp fix for extractors 2020-07-30 08:16:37 +00:00
HTTP username and password Detect urls like https://username:password@vulnerable.com and https://apitoken@vulnerable.com 2020-05-07 10:09:09 +00:00			`extractors:`
			`- type: regex`
			`part: body`
			`regex:`
More tokens and keys :rocket: 2021-04-08 15:45:49 +00:00			`- "xoxb-[0-9A-Za-z\\-]{51}"`