nuclei-templates/http/exposures/tokens/generic/jwt-token.yaml

id: jwt-token

info:
  name: JWT Token Disclosure
  author: Ice3man
  severity: unknown
  tags: exposure,token,generic
  metadata:
    max-request: 1

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    extractors:
      - type: regex
        part: body
        regex:
          - 'eyJ[a-zA-Z0-9]{10,}\.eyJ[a-zA-Z0-9]{10,}\.[a-zA-Z0-9_\-]{10,}'