2021-10-01 18:20:23 +00:00
id : axiom-digitalocean-key-exposure
info :
name : DigitalOcean key exposure via Axiom
author : geeknik
severity : critical
2021-10-04 16:39:12 +00:00
description : Axiom is a dynamic infrastructure framework to efficiently work with multi-cloud environments, build and deploy repeatable infrastructure focussed on offensive and defensive security.
reference : https://github.com/pry0cc/axiom
2021-10-01 18:20:23 +00:00
tags : axiom,digitalocean,key,exposure
requests :
- method : GET
path :
- "{{BaseURL}}/.axiom/accounts/do.json"
matchers-condition : and
matchers :
2021-10-01 18:22:35 +00:00
- type : status
status :
- 200
2021-10-01 23:11:32 +00:00
2021-10-01 18:20:23 +00:00
- type : word
words :
2021-10-04 16:39:12 +00:00
- '"do_key"'
- '"region"'
- '"provider"'
2021-10-01 18:20:23 +00:00
condition : and
2021-10-01 23:11:32 +00:00
2021-10-01 18:20:23 +00:00
extractors :
- type : regex
part : body
regex :
- '\"do_key\"\: .*'
