Merge pull request #9867 from N0el4kLs/wechat-exposure-2

Create wechat-secret-key.yaml
patch-2
pussycat0x 2024-05-28 20:13:03 +05:30 committed by GitHub
commit 903a5daaa5
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 23 additions and 0 deletions

View File

@ -0,0 +1,23 @@
id: wechat-corpsecret-key
info:
name: Enterprise WeChat Corpsecret Key
author: N0el4kls
severity: info
reference:
- https://xz.aliyun.com/t/11092
metadata:
verified: true
max-request: 1
tags: wechat,exposure,tencent
http:
- method: GET
path:
- "{{BaseURL}}"
extractors:
- type: regex
part: body
regex:
- (?i)corpsecret\s*[:=]\s*["']?([a-z0-9\-]+)["']?