daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

more updates

patch-1
sandeep 2021-10-20 14:16:18 +05:30
parent a614391d3f
commit 4617e8fb06
63 changed files with 72 additions and 70 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
token-spray/asana.yaml
View File

@ -7,6 +7,7 @@ info:
severity: info
tags: token-spray,asana
self-contained: true
requests:
- method: GET
path:
@ -14,9 +15,8 @@ requests:
headers:
Authorization: Bearer {{token}}
self-contained: true
matchers:
- type: status
negative: true
status:
- 401
negative: true

2
token-spray/bingmaps.yaml
View File

@ -7,12 +7,12 @@ info:
severity: info
tags: token-spray,bing,maps,bingmaps
self-contained: true
requests:
- method: GET
path:
- "https://dev.virtualearth.net/REST/v1/Locations?CountryRegion=US&adminDistrict=WA&locality=Somewhere&postalCode=98001&addressLine=100%20Main%20St.&key={{token}}"
self-contained: true
matchers:
- type: word
part: body

2
token-spray/bitly.yaml
View File

@ -7,12 +7,12 @@ info:
severity: info
tags: token-spray,bitly
self-contained: true
requests:
- method: GET
path:
- "https://api-ssl.bitly.com/v3/shorten?access_token={{token}}&longUrl=https://www.google.com"
self-contained: true
matchers:
- type: word
part: body

2
token-spray/buildkite.yaml
View File

@ -7,6 +7,7 @@ info:
severity: info
tags: token-spray,buildkite
self-contained: true
requests:
- method: GET
path:
@ -14,7 +15,6 @@ requests:
headers:
Authorization: Bearer {{token}}
self-contained: true
matchers:
- type: status
status:

2
token-spray/buttercms.yaml
View File

@ -7,12 +7,12 @@ info:
severity: info
tags: token-spray,buttercms
self-contained: true
requests:
- method: GET
path:
- "https://api.buttercms.com/v2/posts/?auth_token={{token}}"
self-contained: true
matchers:
- type: status
status:

2
token-spray/calendly.yaml
View File

@ -7,6 +7,7 @@ info:
severity: info
tags: token-spray,calendly
self-contained: true
requests:
- method: GET
path:
@ -14,7 +15,6 @@ requests:
headers:
X-Token: "{{token}}"
self-contained: true
matchers:
- type: status
status:

2
token-spray/circleci.yaml
View File

@ -7,12 +7,12 @@ info:
severity: info
tags: token-spray,circle,circleci
self-contained: true
requests:
- method: GET
path:
- "https://circleci.com/api/v1.1/me?circle-token={{token}}"
self-contained: true
matchers:
- type: status
status:

2
token-spray/deviantart.yaml
View File

@ -7,13 +7,13 @@ info:
severity: info
tags: token-spray,deviantart
self-contained: true
requests:
- method: POST
path:
- "https://www.deviantart.com/api/v1/oauth2/placebo"
body: "access_token={{token}}"
self-contained: true
matchers:
- type: word
part: body

2
token-spray/dropbox.yaml
View File

@ -7,6 +7,7 @@ info:
severity: info
tags: token-spray,dropbox
self-contained: true
requests:
- method: POST
path:
@ -14,7 +15,6 @@ requests:
headers:
Authorization: Bearer {{token}}
self-contained: true
matchers:
- type: status
status:

2
token-spray/github.yaml
View File

@ -7,6 +7,7 @@ info:
severity: info
tags: token-spray,github
self-contained: true
requests:
- method: GET
path:
@ -14,7 +15,6 @@ requests:
headers:
Authorization: Basic {{base64('user:' + token)}}
self-contained: true
matchers:
- type: word
part: body

2
token-spray/google-autocomplete.yaml
View File

@ -6,12 +6,12 @@ info:
severity: info
tags: token-spray,google,autocomplete
self-contained: true
requests:
- method: GET
path:
- "https://maps.googleapis.com/maps/api/place/autocomplete/json?input=Bingh&types=%28cities%29&key={{token}}"
self-contained: true
matchers:
- type: word
part: body

2
token-spray/google-customsearch.yaml
View File

@ -6,12 +6,12 @@ info:
severity: info
tags: token-spray,google,search
self-contained: true
requests:
- method: GET
path:
- "https://www.googleapis.com/customsearch/v1?cx=017576662512468239146:omuauf_lfve&q=lectures&key={{token}}"
self-contained: true
matchers:
- type: word
part: body

2
token-spray/google-directions.yaml
View File

@ -6,12 +6,12 @@ info:
severity: info
tags: token-spray,google,directions
self-contained: true
requests:
- method: GET
path:
- "https://maps.googleapis.com/maps/api/directions/json?origin=Disneyland&destination=Universal+Studios+Hollywood4&key={{token}}"
self-contained: true
matchers:
- type: word
part: body

2
token-spray/google-elevation.yaml
View File

@ -6,12 +6,12 @@ info:
severity: info
tags: token-spray,google,elevation
self-contained: true
requests:
- method: GET
path:
- "https://maps.googleapis.com/maps/api/elevation/json?locations=39.7391536,-104.9847034&key={{token}}"
self-contained: true
matchers:
- type: word
part: body

2
token-spray/google-fcm.yaml
View File

@ -6,6 +6,7 @@ info:
severity: info
tags: token-spray,google,fcm,firebase,cloud,messaging
self-contained: true
requests:
- method: POST
path:
@ -15,7 +16,6 @@ requests:
Authorization: key={{token}}
Content-Type: application/json
self-contained: true
matchers:
- type: status
status:

2
token-spray/google-findplacefromtext.yaml
View File

@ -6,12 +6,12 @@ info:
severity: info
tags: token-spray,google,find,text
self-contained: true
requests:
- method: GET
path:
- "https://maps.googleapis.com/maps/api/place/findplacefromtext/json?input=Museum%20of%20Contemporary%20Art%20Australia&inputtype=textquery&fields=photos,formatted_address,name,rating,opening_hours,geometry&key={{token}}"
self-contained: true
matchers:
- type: word
part: body

2
token-spray/google-gedistancematrix.yaml
View File

@ -6,12 +6,12 @@ info:
severity: info
tags: token-spray,google,distance,matrix
self-contained: true
requests:
- method: GET
path:
- "https://maps.googleapis.com/maps/api/distancematrix/json?units=imperial&origins=40.6655101,-73.89188969999998&destinations=40.6905615%2C-73.9976592%7C40.6905615%2C-73.9976592%7C40.6905615%2C-73.9976592%7C40.6905615%2C-73.9976592%7C40.6905615%2C-73.9976592%7C40.6905615%2C-73.9976592%7C40.659569%2C-73.933783%7C40.729029%2C-73.851524%7C40.6860072%2C-73.6334271%7C40.598566%2C-73.7527626%7C40.659569%2C-73.933783%7C40.729029%2C-73.851524%7C40.6860072%2C-73.6334271%7C40.598566%2C-73.7527626&key={{token}}"
self-contained: true
matchers:
- type: word
part: body

2
token-spray/google-geocode.yaml
View File

@ -6,12 +6,12 @@ info:
severity: info
tags: token-spray,google,geocode
self-contained: true
requests:
- method: GET
path:
- "https://maps.googleapis.com/maps/api/geocode/json?latlng=40,30&key={{token}}"
self-contained: true
matchers:
- type: word
part: body

9
token-spray/google-geolocation.yaml
View File

@ -6,20 +6,21 @@ info:
severity: info
tags: token-spray,google,geolocation
self-contained: true
requests:
- method: GET
path:
- "https://www.googleapis.com/geolocation/v1/geolocate?key={{token}}"
matchers-condition: and
self-contained: true
matchers-condition: and
matchers:
- type: word
part: body
negative: true
words:
- 'error'
negative: true
- type: status
negative: true
status:
- 404
negative: true

2
token-spray/google-mapsembed.yaml
View File

@ -6,12 +6,12 @@ info:
severity: info
tags: token-spray,google,maps,embed
self-contained: true
requests:
- method: GET
path:
- "https://www.google.com/maps/embed/v1/place?q=Seattle&key={{token}}"
self-contained: true
matchers:
- type: status
status:

2
token-spray/google-mapsembedadvanced.yaml
View File

@ -6,12 +6,12 @@ info:
severity: info
tags: token-spray,google,maps,embed
self-contained: true
requests:
- method: GET
path:
- "https://www.google.com/maps/embed/v1/search?q=record+stores+in+Seattle&key={{token}}"
self-contained: true
matchers:
- type: status
status:

2
token-spray/google-nearbysearch.yaml
View File

@ -6,12 +6,12 @@ info:
severity: info
tags: token-spray,google,search,nearby
self-contained: true
requests:
- method: GET
path:
- "https://maps.googleapis.com/maps/api/place/nearbysearch/json?location=-33.8670522,151.1957362&radius=100&types=food&name=harbour&key={{token}}"
self-contained: true
matchers:
- type: word
part: body

2
token-spray/google-nearestroads.yaml
View File

@ -6,12 +6,12 @@ info:
severity: info
tags: token-spray,google,roads
self-contained: true
requests:
- method: GET
path:
- "https://roads.googleapis.com/v1/nearestRoads?points=60.170880,24.942795|60.170879,24.942796|60.170877,24.942796&key={{token}}"
self-contained: true
matchers:
- type: word
part: body

2
token-spray/google-placedetails.yaml
View File

@ -6,12 +6,12 @@ info:
severity: info
tags: token-spray,google,place,details
self-contained: true
requests:
- method: GET
path:
- "https://maps.googleapis.com/maps/api/place/details/json?place_id=ChIJN1t_tDeuEmsRUsoyG83frY4&fields=name,rating,formatted_phone_number&key={{token}}"
self-contained: true
matchers:
- type: word
part: body

2
token-spray/google-placesphoto.yaml
View File

@ -6,12 +6,12 @@ info:
severity: info
tags: token-spray,google,places,photo
self-contained: true
requests:
- method: GET
path:
- "https://maps.googleapis.com/maps/api/place/photo?maxwidth=400&photoreference=CnRtAAAATLZNl354RwP_9UKbQ_5Psy40texXePv4oAlgP4qNEkdIrkyse7rPXYGd9D_Uj1rVsQdWT4oRz4QrYAJNpFX7rzqqMlZw2h2E2y5IKMUZ7ouD_SlcHxYq1yL4KbKUv3qtWgTK0A6QbGh87GB3sscrHRIQiG2RrmU_jF4tENr9wGS_YxoUSSDrYjWmrNfeEHSGSc3FyhNLlBU&key={{token}}"
self-contained: true
matchers:
- type: status
status:

2
token-spray/google-playablelocations.yaml
View File

@ -6,12 +6,12 @@ info:
severity: info
tags: token-spray,google,playable,locations
self-contained: true
requests:
- method: GET
path:
- "https://playablelocations.googleapis.com/v3:samplePlayableLocations?key={{token}}"
self-contained: true
matchers:
- type: word
part: body

2
token-spray/google-routetotraveled.yaml
View File

@ -6,12 +6,12 @@ info:
severity: info
tags: token-spray,google,route
self-contained: true
requests:
- method: GET
path:
- "https://roads.googleapis.com/v1/snapToRoads?path=-35.27801,149.12958|-35.28032,149.12907&interpolate=true&key={{token}}"
self-contained: true
matchers:
- type: word
part: body

2
token-spray/google-speedlimit.yaml
View File

@ -6,12 +6,12 @@ info:
severity: info
tags: token-spray,google,speed,limit
self-contained: true
requests:
- method: GET
path:
- "https://roads.googleapis.com/v1/speedLimits?path=38.75807927603043,-9.03741754643809&key={{token}}"
self-contained: true
matchers:
- type: word
part: body

2
token-spray/google-staticmaps.yaml
View File

@ -6,12 +6,12 @@ info:
severity: info
tags: token-spray,google,maps
self-contained: true
requests:
- method: GET
path:
- "https://maps.googleapis.com/maps/api/staticmap?center=45%2C10&zoom=7&size=400x400&key={{token}}"
self-contained: true
matchers:
- type: status
status:

2
token-spray/google-streetview.yaml
View File

@ -6,12 +6,12 @@ info:
severity: info
tags: token-spray,google,streetview
self-contained: true
requests:
- method: GET
path:
- "https://maps.googleapis.com/maps/api/streetview?size=400x400&location=40.720032,-73.988354&fov=90&heading=235&pitch=10&key={{token}}"
self-contained: true
matchers:
- type: status
status:

2
token-spray/google-timezone.yaml
View File

@ -6,12 +6,12 @@ info:
severity: info
tags: token-spray,google,timezone
self-contained: true
requests:
- method: GET
path:
- "https://maps.googleapis.com/maps/api/timezone/json?location=39.6034810,-119.6822510&timestamp=1331161200&key={{token}}"
self-contained: true
matchers:
- type: word
part: body

4
token-spray/googlet-extsearchplaces.yaml
View File

@ -6,15 +6,15 @@ info:
severity: info
tags: token-spray,google,search,places,text
self-contained: true
requests:
- method: GET
path:
- "https://maps.googleapis.com/maps/api/place/textsearch/json?query=restaurants+in+Sydney&key={{token}}"
self-contained: true
matchers:
- type: word
part: body
negative: true
words:
- 'error_message'
negative: true

4
token-spray/heroku.yaml
View File

@ -7,6 +7,7 @@ info:
severity: info
tags: token-spray,heroku
self-contained: true
requests:
- method: POST
path:
@ -15,12 +16,11 @@ requests:
Accept: application/vnd.heroku+json; version=3
Authorization: Bearer {{token}}
self-contained: true
matchers:
- type: status
condition: or
status:
- 200
- 201
- 202
- 206
condition: or

2
token-spray/hubspot.yaml
View File

@ -7,13 +7,13 @@ info:
severity: info
tags: token-spray,hubspot
self-contained: true
requests:
- method: GET
path:
- "https://api.hubapi.com/owners/v2/owners?hapikey={{token}}"
- "https://api.hubapi.com/contacts/v1/lists/all/contacts/all?hapikey={{token}}"
self-contained: true
matchers:
- type: word
part: body

2
token-spray/instagram.yaml
View File

@ -7,12 +7,12 @@ info:
severity: info
tags: token-spray,instagram,graph
self-contained: true
requests:
- method: GET
path:
- "https://graph.facebook.com/v8.0/me/accounts?access_token={{token}}"
self-contained: true
matchers:
- type: status
status:

2
token-spray/ipstack.yaml
View File

@ -7,12 +7,12 @@ info:
severity: info
tags: token-spray,ipstack
self-contained: true
requests:
- method: GET
path:
- "https://api.ipstack.com/8.8.8.8?access_key={{token}}"
self-contained: true
matchers:
- type: word
part: body

2
token-spray/iterable.yaml
View File

@ -7,6 +7,7 @@ info:
severity: info
tags: token-spray,iterable
self-contained: true
requests:
- method: GET
path:
@ -14,7 +15,6 @@ requests:
headers:
Api_Key: "{{token}}"
self-contained: true
matchers:
- type: word
part: body

2
token-spray/jumpcloud.yaml
View File

@ -7,6 +7,7 @@ info:
severity: info
tags: token-spray,jumpcloud
self-contained: true
requests:
- method: GET
path:
@ -14,7 +15,6 @@ requests:
headers:
X-Api-Key: "{{token}}"
self-contained: true
matchers:
- type: word
part: body

2
token-spray/lokalise.yaml
View File

@ -7,6 +7,7 @@ info:
severity: info
tags: token-spray,lokalise
self-contained: true
requests:
- method: GET
path:
@ -14,7 +15,6 @@ requests:
headers:
X-Api-Token: "{{token}}"
self-contained: true
matchers:
- type: status
status:

2
token-spray/loqate.yaml
View File

@ -7,12 +7,12 @@ info:
severity: info
tags: token-spray,loqate
self-contained: true
requests:
- method: GET
path:
- "api.addressy.com/Capture/Interactive/Find/v1.00/json3.ws?Key={{token}}&Countries=US,CA&Language=en&Limit=5&Text=BHAR"
self-contained: true
matchers:
- type: word
part: body

2
token-spray/mailchimp.yaml
View File

@ -7,6 +7,7 @@ info:
severity: info
tags: token-spray,mailchimp
self-contained: true
network:
- inputs:
- data: "AUTH PLAIN {{base64(hex_decode('00')+'apikey'+hex_decode('00')+token)}}\r\n"
@ -14,7 +15,6 @@ network:
host:
- "tls://smtp.mandrillapp.com:465"
self-contained: true
matchers:
- type: word
words:

2
token-spray/mailgun.yaml
View File

@ -7,6 +7,7 @@ info:
severity: info
tags: token-spray,mailgun
self-contained: true
requests:
- method: GET
path:
@ -14,7 +15,6 @@ requests:
headers:
Authorization: Basic {{base64('api:' + token)}}
self-contained: true
matchers:
- type: status
status:

2
token-spray/mapbox.yaml
View File

@ -7,12 +7,12 @@ info:
severity: info
tags: token-spray,mapbox
self-contained: true
requests:
- method: GET
path:
- "https://api.mapbox.com/geocoding/v5/mapbox.places/Los%20Angeles.json?access_token={{token}}"
self-contained: true
matchers:
- type: status
status:

2
token-spray/nerdgraph.yaml
View File

@ -7,6 +7,7 @@ info:
severity: info
tags: token-spray,newrelic,nerdgraph
self-contained: true
requests:
- method: POST
path:
@ -16,7 +17,6 @@ requests:
API-Key: "{{token}}"
body: "{ \"query\": \"{ requestContext { userId apiKey }}\" }"
self-contained: true
matchers:
- type: word
part: body

2
token-spray/npm.yaml
View File

@ -7,6 +7,7 @@ info:
severity: info
tags: token-spray,node,npm,package,manager
self-contained: true
requests:
- method: GET
path:
@ -14,7 +15,6 @@ requests:
headers:
Authorization: Bearer {{token}}
self-contained: true
matchers:
- type: status
status:

2
token-spray/openweather.yaml
View File

@ -7,12 +7,12 @@ info:
severity: info
tags: token-spray,weather,openweather
self-contained: true
requests:
- method: GET
path:
- "https://api.openweathermap.org/data/2.5/weather?q=Chicago&appid={{token}}"
self-contained: true
matchers:
- type: status
status:

2
token-spray/pagerduty.yaml
View File

@ -7,6 +7,7 @@ info:
severity: info
tags: token-spray,pagerduty
self-contained: true
requests:
- method: GET
path:
@ -15,7 +16,6 @@ requests:
Accept: application/vnd.pagerduty+json;version=2
Authorization: Token token={{token}}
self-contained: true
matchers:
- type: status
status:

2
token-spray/pendo.yaml
View File

@ -7,6 +7,7 @@ info:
severity: info
tags: token-spray,pendo
self-contained: true
requests:
- method: GET
path:
@ -16,7 +17,6 @@ requests:
Content-Type: application/json
X-Pendo-Integration-Key: "{{token}}"
self-contained: true
matchers:
- type: status
status:

2
token-spray/pivotaltracker.yaml
View File

@ -7,6 +7,7 @@ info:
severity: info
tags: token-spray,pivotaltracker
self-contained: true
requests:
- method: GET
path:
@ -14,7 +15,6 @@ requests:
headers:
X-TrackerToken: "{{token}}"
self-contained: true
matchers:
- type: word
part: body

2
token-spray/postmark.yaml
View File

@ -7,6 +7,7 @@ info:
severity: info
tags: token-spray,postmark
self-contained: true
requests:
- method: GET
path:
@ -15,7 +16,6 @@ requests:
Accept: application/json
X-Postmark-Server-Token: "{{token}}"
self-contained: true
matchers:
- type: status
status:

2
token-spray/sendgrid.yaml
View File

@ -7,6 +7,7 @@ info:
severity: info
tags: token-spray,sendgrid
self-contained: true
network:
- inputs:
- data: "ehlo\r\n"
@ -16,7 +17,6 @@ network:
host:
- "tls://smtp.sendgrid.net:465"
self-contained: true
matchers:
- type: word
words:

2
token-spray/slack.yaml
View File

@ -7,6 +7,7 @@ info:
severity: info
tags: token-spray,slack
self-contained: true
requests:
- method: POST
path:
@ -14,7 +15,6 @@ requests:
headers:
Authorization: Bearer {{token}}
self-contained: true
matchers:
- type: word
part: body

2
token-spray/sonarcloud.yaml
View File

@ -7,6 +7,7 @@ info:
severity: info
tags: token-spray,sonarcloud
self-contained: true
requests:
- method: GET
path:
@ -14,7 +15,6 @@ requests:
headers:
Authorization: Basic {{base64(token + ':')}}
self-contained: true
matchers:
- type: word
part: body

2
token-spray/spotify.yaml
View File

@ -7,6 +7,7 @@ info:
severity: info
tags: token-spray,spotify
self-contained: true
requests:
- method: GET
path:
@ -14,7 +15,6 @@ requests:
headers:
Authorization: Bearer {{token}}
self-contained: true
matchers:
- type: status
status:

2
token-spray/square.yaml
View File

@ -7,6 +7,7 @@ info:
severity: info
tags: token-spray,square
self-contained: true
requests:
- method: GET
path:
@ -16,7 +17,6 @@ requests:
Content-Type: application/json
Authorization: Bearer {{token}}
self-contained: true
matchers:
- type: word
part: body

2
token-spray/stripe.yaml
View File

@ -7,6 +7,7 @@ info:
severity: info
tags: token-spray,stripe
self-contained: true
requests:
- method: GET
path:
@ -14,7 +15,6 @@ requests:
headers:
Authorization: Basic {{base64(token + ':')}}
self-contained: true
matchers:
- type: status
status:

2
token-spray/tinypng.yaml
View File

@ -7,6 +7,7 @@ info:
severity: info
tags: token-spray,tinypng
self-contained: true
requests:
- method: POST
path:
@ -14,7 +15,6 @@ requests:
headers:
Authorization: Basic {{base64('api:' + token)}}
self-contained: true
matchers:
- type: word
part: header

2
token-spray/travisci.yaml
View File

@ -7,6 +7,7 @@ info:
severity: info
tags: token-spray,travis
self-contained: true
requests:
- method: GET
path:
@ -15,7 +16,6 @@ requests:
Travis-API-Version: 3
Authorization: token {{token}}
self-contained: true
matchers:
- type: status
status:

2
token-spray/twitter.yaml
View File

@ -7,6 +7,7 @@ info:
severity: info
tags: token-spray,twitter
self-contained: true
requests:
- method: GET
path:
@ -14,7 +15,6 @@ requests:
headers:
Authorization: Bearer {{token}}
self-contained: true
matchers:
- type: word
part: body

2
token-spray/visualstudio.yaml
View File

@ -7,6 +7,7 @@ info:
severity: info
tags: token-spray,visualstudio,microsoft
self-contained: true
requests:
- method: GET
path:
@ -15,7 +16,6 @@ requests:
Content-Type: application/json
X-Api-Token: "{{token}}"
self-contained: true
matchers:
- type: word
part: body

2
token-spray/wakatime.yaml
View File

@ -7,12 +7,12 @@ info:
severity: info
tags: token-spray,wakatime
self-contained: true
requests:
- method: GET
path:
- "https://wakatime.com/api/v1/users/current/projects/?api_key={{token}}"
self-contained: true
matchers:
- type: status
status:

2
token-spray/weglot.yaml
View File

@ -7,6 +7,7 @@ info:
severity: info
tags: token-spray,weglot
self-contained: true
requests:
- method: POST
path:
@ -15,7 +16,6 @@ requests:
Content-Type: application/json
body: "{\"l_from\":\"en\",\"l_to\":\"fr\",\"request_url\":\"https://www.website.com/\",\"words\":[{\"w\":\"This is a blue car\",\"t\":1},{\"w\":\"This is a black car\",\"t\":1}]}"
self-contained: true
matchers:
- type: word
part: body

5
token-spray/youtube.yaml
View File

@ -7,18 +7,19 @@ info:
severity: info
tags: token-spray,youtube
self-contained: true
requests:
- method: GET
path:
- "https://www.googleapis.com/youtube/v3/activities?part=contentDetails&maxResults=25&channelId=UC-lHJZR3Gqxm24_Vd_AJ5Yw&key={{token}}"
matchers-condition: or
self-contained: true
matchers-condition: or
matchers:
- type: word
part: body
words:
- 'quotaExceeded'
- type: status
status:
- 200