From 9286f2174d412e0e0ee6b639f3ee1b8e8fd3a277 Mon Sep 17 00:00:00 2001 From: Dhiyaneshwaran Date: Sun, 30 Apr 2023 13:53:37 +0530 Subject: [PATCH] Create postman-key.yaml --- .../exposures/tokens/postman/postman-key.yaml | 23 +++++++++++++++++++ 1 file changed, 23 insertions(+) create mode 100644 http/exposures/tokens/postman/postman-key.yaml diff --git a/http/exposures/tokens/postman/postman-key.yaml b/http/exposures/tokens/postman/postman-key.yaml new file mode 100644 index 0000000000..b08b34b056 --- /dev/null +++ b/http/exposures/tokens/postman/postman-key.yaml @@ -0,0 +1,23 @@ +id: postman-key + +info: + name: Postman API Key + author: DhiyaneshDK + severity: info + reference: + - https://github.com/praetorian-inc/noseyparker/blob/main/crates/noseyparker/data/default/rules/postman.yml + - https://learning.postman.com/docs/developer/intro-api/ + metadata: + verified: "true" + tags: postman,keys,token,api,exposure + +http: + - method: GET + path + - "{{BaseURL}}" + + extractors: + - type: regex + part: body + regex: + - '\b(PMAK-[a-zA-Z0-9]{24}-[a-zA-Z0-9]{34})\b'