Merge pull request #4548 from z3xddd/master

Create ciphersecretkey.yaml and apimsecretkey.yaml

exposures/tokens/azure/azure-apim-secretkey.yaml

@@ -0,0 +1,24 @@
+id: azure-apim-secretkey
+
+info:
+  name: Azure - APIM Secret Key
+  author: israel comazzetto dos reis
+  severity: info
+  description: Azure APIM Secret Key
+  tags: azure,apim,microsoft,exposure
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}"
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        part: body
+        words:
+          - '"Ocp-Apim-Subscription-Key":'
+
+      - type: status
+        status:
+          - 200

exposures/tokens/nextjs/cipher-secret-key.yaml

@@ -0,0 +1,23 @@
+id: cipher-secret-key
+
+info:
+  name: Cipher Secret Key Exposure
+  author: israel comazzetto dos reis
+  severity: info
+  tags: exposure
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}"
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        part: body
+        words:
+          - "cipherSecretKey:"
+
+      - type: status
+        status:
+          - 200