Add detection template for OAUTH2
See https://auth0.com/docs/protocols/protocol-oauth2#token-endpointpatch-1
parent
f50149b528
commit
cd23603f54
|
@ -0,0 +1,19 @@
|
|||
id: oauth2-detect
|
||||
|
||||
info:
|
||||
name: OAuth 2.0 Authorization Server Detection Template
|
||||
author: righettod
|
||||
severity: info
|
||||
description: Try to detect OAuth 2.0 Authorization Server via the "oauth/token" endpoint
|
||||
tags: tech,oauth
|
||||
|
||||
requests:
|
||||
- method: POST
|
||||
path:
|
||||
- "{{BaseURL}}/oauth/token"
|
||||
body: "grant_type=authorization_code&client_id=xxx&redirect_uri=https%3A%2F%2Fprojectdiscovery.io&code=xxx&client_secret=xxx"
|
||||
|
||||
matchers:
|
||||
- type: status
|
||||
status:
|
||||
- 401
|
Loading…
Reference in New Issue