patch-1
bauthard 2020-07-26 01:35:02 +05:30
parent 567dd35b03
commit 94d99ba353
6 changed files with 7 additions and 44 deletions

View File

@ -6,18 +6,12 @@ info:
severity: medium severity: medium
requests: requests:
- method: GET
path:
- "{{BaseURL}}"
- extractors: - extractors:
- part: body - part: body
regex: regex:
- "amzn\\.mws\\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}" - "amzn\\.mws\\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}"
type: regex type: regex
matchers-condition: and
matchers:
- part: body
regex:
- "amzn\\.mws\\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}"
type: regex
method: GET
path:
- "{{BaseURL}}"

View File

@ -3,19 +3,13 @@ id: aws-access-key-value
info: info:
name: AWS Access Key ID Value name: AWS Access Key ID Value
author: Swissky author: Swissky
severity: medium severity: info
requests: requests:
- method: GET - method: GET
path: path:
- "{{BaseURL}}" - "{{BaseURL}}"
matchers-condition: and
matchers:
- type: regex
part: body
regex:
- "(A3T[A-Z0-9]|AKIA|AGPA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}"
extractors: extractors:
- type: regex - type: regex
part: body part: body

View File

@ -10,12 +10,6 @@ requests:
path: path:
- "{{BaseURL}}" - "{{BaseURL}}"
matchers-condition: and
matchers:
- type: regex
part: body
regex:
- "AIza[0-9A-Za-z\\-_]{35}"
extractors: extractors:
- type: regex - type: regex
part: body part: body

View File

@ -13,12 +13,6 @@ requests:
path: path:
- "{{BaseURL}}" - "{{BaseURL}}"
matchers-condition: and
matchers:
- type: regex
part: body
regex:
- "(ftp|ftps|http|https)://[0-9A-Za-z\\-_%]+(:|@)"
extractors: extractors:
- type: regex - type: regex
part: body part: body

View File

@ -10,12 +10,6 @@ requests:
path: path:
- "{{BaseURL}}" - "{{BaseURL}}"
matchers-condition: and
matchers:
- type: regex
part: body
regex:
- "[0-9a-f]{32}-us[0-9]{1,2}"
extractors: extractors:
- type: regex - type: regex
part: body part: body

View File

@ -13,16 +13,9 @@ requests:
path: path:
- "{{BaseURL}}" - "{{BaseURL}}"
matchers-condition: and extractors:
matchers:
- type: regex - type: regex
part: body part: body
regex: regex:
- "xoxp-[0-9A-Za-z\\-]{72}" # Person - "xoxp-[0-9A-Za-z\\-]{72}" # Person
- "xoxb-[0-9A-Za-z\\-]{51}" # Bot - "xoxb-[0-9A-Za-z\\-]{51}" # Bot
extractors:
- type: regex
part: body
regex:
- "xoxp-[0-9A-Za-z\\-]{72}"
- "xoxb-[0-9A-Za-z\\-]{51}"