Dominique RIGHETTO 2021-07-05 19:58:44 +02:00 committed by GitHub
parent f50149b528
commit cd23603f54
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 19 additions and 0 deletions

View File

@ -0,0 +1,19 @@
id: oauth2-detect
info:
name: OAuth 2.0 Authorization Server Detection Template
author: righettod
severity: info
description: Try to detect OAuth 2.0 Authorization Server via the "oauth/token" endpoint
tags: tech,oauth
requests:
- method: POST
path:
- "{{BaseURL}}/oauth/token"
body: "grant_type=authorization_code&client_id=xxx&redirect_uri=https%3A%2F%2Fprojectdiscovery.io&code=xxx&client_secret=xxx"
matchers:
- type: status
status:
- 401