Update and rename ciphersecretkey.yaml to cipher-secret-key.yaml

patch-1
Prince Chaddha 2022-06-10 18:52:11 +05:30 committed by GitHub
parent 135a0a7e6c
commit af2e5dd153
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 23 additions and 32 deletions

View File

@ -0,0 +1,23 @@
id: cipher-secret-key
info:
name: Cipher Secret Key Exposure
author: israel comazzetto dos reis
severity: medium
tags: exposure
requests:
- method: GET
path:
- "{{BaseURL}}"
matchers-condition: and
matchers:
- type: word
part: body
words:
- "cipherSecretKey:"
- type: status
status:
- 200

View File

@ -1,32 +0,0 @@
id: CipherSecretKey
info:
name: CipherSecretKey Leaked
author: israel comazzetto dos reis
severity: medium
description: CipherSecretKey Leaked
reference:
- https://
tags: tags
requests:
- raw:
- |+
GET {{BaseURL}} HTTP/1.1
Host: {{Hostname}}
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36
Accept: */*
Accept-Encoding: gzip, deflate
Accept-Language: pt-BR,pt;q=0.9,en-US;q=0.8,en;q=0.7
Connection: close
matchers-condition: and
matchers:
- type: word
part: body
words:
- cipherSecretKey
- type: status
status:
- 200