nuclei-templates/token-spray/api-debounce.yaml

id: api-debounce

info:
  name: DeBounce API Test
  author: 0ri2N
  severity: info
  reference:
    - https://developers.debounce.io/reference/api-key-authentication
    - https://debounce.io
  tags: debounce,token-spray

self-contained: true
requests:
  - method: GET
    path:
      - "https://api.debounce.io/v1/?api={{token}}&email=test@interact.sh"

    matchers:
      - type: word
        part: body
        words:
          - '"balance":'
          - '"success":'
          - '"debounce":'
        condition: and
feat(token-spray): debounce api test 2022-05-18 18:23:57 +00:00			`id: api-debounce`

			`info:`
fix name typo 2022-05-18 18:25:47 +00:00			`name: DeBounce API Test`
feat(token-spray): debounce api test 2022-05-18 18:23:57 +00:00			`author: 0ri2N`
			`severity: info`
			`reference:`
Update api-debounce.yaml 2022-05-19 19:28:24 +00:00			`- https://developers.debounce.io/reference/api-key-authentication`
feat(token-spray): debounce api test 2022-05-18 18:23:57 +00:00			`- https://debounce.io`
Update api-debounce.yaml 2022-05-19 19:28:24 +00:00			`tags: debounce,token-spray`
feat(token-spray): debounce api test 2022-05-18 18:23:57 +00:00
			`self-contained: true`
			`requests:`
			`- method: GET`
			`path:`
Fixed possible FPs in open redirect templates (#4544) * Fixed possible FPs in open redirect templates We have replaced example.com with interact.sh since few domains redirect to example.com, which results in FP results. * updated example domain Co-authored-by: sandeep <sandeep@projectdiscovery.io> 2022-06-06 10:40:15 +00:00			`- "https://api.debounce.io/v1/?api={{token}}&email=test@interact.sh"`
feat(token-spray): debounce api test 2022-05-18 18:23:57 +00:00
			`matchers:`
			`- type: word`
			`part: body`
			`words:`
			`- '"balance":'`
			`- '"success":'`
			`- '"debounce":'`
			`condition: and`