id: zoho-webhook-token
info:
name: Zoho Webhook Disclosure
author: Ice3man
severity: info
tags: exposure,token,zoho
metadata:
max-request: 1
http:
- method: GET
path:
- "{{BaseURL}}"
extractors:
- type: regex
part: body
regex:
- 'https://creator\.zoho\.com/api/[A-Za-z0-9/\-_\.]+\?authtoken=[A-Za-z0-9]+'
