nuclei-templates/http/osint/user-enumeration/duolingo.yaml

35 lines
878 B
YAML
Raw Normal View History

2023-02-20 18:42:46 +00:00
id: duolingo
info:
2023-03-17 14:32:27 +00:00
name: Duolingo User Name Information - Detect
2023-02-20 18:42:46 +00:00
author: dwisiswant0
severity: info
2023-10-14 11:27:55 +00:00
description: Duolingo user name information check was conducted.
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
2023-10-14 11:27:55 +00:00
cvss-score: 0
cwe-id: CWE-200
metadata:
max-request: 1
2023-10-14 11:27:55 +00:00
tags: osint,osint-hobby,duolingo
2023-02-20 18:42:46 +00:00
self-contained: true
2023-10-14 11:27:55 +00:00
http:
2023-02-20 18:42:46 +00:00
- method: GET
path:
- "https://www.duolingo.com/2017-06-30/users?username={{user}}&_=1628308619574"
matchers-condition: and
matchers:
- type: status
status:
- 200
- type: word
part: body
words:
- "joinedClassroomIds"
# digest: 4a0a00473045022100f6cf5b14ab31336a129da74dd5c5ee8fe8aa594ff85ac13edccd240696e84ef8022052da90c1c2c0d003b3de8431988d1b6f272b40a788c28ecf39c617915fc102dd:922c64590222798bb761d5b6d8e72950