Commit Graph

135 Commits (0b66508bb7c78b59c006c302bb0a92c2b8075601)

Author SHA1 Message Date
Ritik Chaddha c3d203cea2
Merge pull request #6853 from projectdiscovery/token-exposure
Token Exposure (40 New Templates)
2023-03-11 00:19:13 +05:30
Dhiyaneshwaran 0b34b0ac31 Fix duplicate ID issue , added adobe template 2023-03-07 16:03:59 +05:30
Dhiyaneshwaran 6c4aadba14 Create age-public-key.yaml 2023-03-07 15:11:57 +05:30
Dhiyaneshwaran 94ebcb0b67 Added New Token Templates 2023-03-07 15:10:29 +05:30
zy9ard3 f6800dee12
Update mapbox-token-disclosure.yaml
removed extractor for mapbox public token since public token was made intentionally for public and have no impact
2023-03-04 15:47:25 +05:30
Prince Chaddha 9a54dceef4
Merge pull request #6737 from sduc/patch-1
credentials-disclosure: regex accessToken
2023-03-02 17:06:55 +05:30
Prince Chaddha 918fbdaa63
fixed lint 2023-03-02 16:22:45 +05:30
Prince Chaddha 86bd415f28
updated regex 2023-03-02 16:16:05 +05:30
Dhiyaneshwaran b206a1f764
Update razorpay-clientid-disclosure.yaml 2023-02-16 18:01:38 +05:30
Dhiyaneshwaran 88a62d599f
fix 2023-02-16 17:56:34 +05:30
Dhiyaneshwaran 3a988f898c
Update and rename mapbox-token.yaml to mapbox-token-disclosure.yaml 2023-02-16 17:56:07 +05:30
pussycat0x 4a0d7bc891
minor -update 2023-02-16 16:42:52 +05:30
pussycat0x 3ae1ea3a9d
severity -update 2023-02-16 16:26:39 +05:30
pussycat0x 548cdb767d
reference, name -update 2023-02-16 16:23:15 +05:30
pussycat0x 413f06deb3
reference, name and extractors - update 2023-02-16 16:05:02 +05:30
pussycat0x fc6cfd2e58
regex & tags -update 2023-02-16 15:10:54 +05:30
Prince Chaddha 98d6e2ac8a
Delete fcm-api-token.yaml 2023-02-16 01:45:40 +08:00
Prince Chaddha 8caa753c91
updated the file name 2023-02-15 02:50:22 +08:00
Dhiyaneshwaran 8116922c03
fix-lint 2023-02-15 00:15:32 +05:30
Devang Solanki a7a1c861af Added secret detectors for FCM API keys, mapbox API keys, razorpay client id, zapier webhooks 2023-02-13 22:16:43 +05:30
sduc b355925956
error 2023-02-13 16:38:59 +01:00
sduc d5f2d1b9e2
credentials-disclosure: regex accessToken
regex matching accessToken matches on `"accessToken":null` which is a false positive.
This PR attempts to resolve this by explicitly asking the regex to not match null.
2023-02-13 10:35:31 +01:00
Devang Solanki 67a6742f7d Error Correction 2023-02-12 21:00:22 +05:30
Devang Solanki 7634ef7153 Added Razorpay-client-id, Zapier webhook, mapbox, fcm api keys 2023-02-12 18:42:05 +05:30
Dhiyaneshwaran 73b49d356f
aws-access-secret-key 2023-01-18 03:42:26 +05:30
Dhiyaneshwaran c8db688307
fix-template 2023-01-13 12:20:52 +05:30
Arman c1ea26550f
Create aws-secret-key.yaml 2023-01-10 12:39:48 -05:00
Prince Chaddha 059524ce16
Delete zeplin-access-token.yaml 2022-12-29 13:47:25 +05:30
Prince Chaddha 1f7b175cbf
Deleted due to FPs 2022-12-29 13:45:50 +05:30
Dhiyaneshwaran 7a078b680a
Merge pull request #4118 from ritikchaddha/patch-27
Exposure Tokens
2022-12-23 14:59:30 +05:30
Ritik Chaddha 5cefcb14e2
Delete zipcodeapi-token.yaml 2022-12-22 11:41:23 +05:30
Ritik Chaddha 8764bc6d05
Delete zonkafeedback-api-token.yaml 2022-12-22 11:41:04 +05:30
Ritik Chaddha 626c2da9d8
Update zerobounce-api-token.yaml 2022-12-22 11:33:01 +05:30
Ritik Chaddha 0c1dd5604e
Update zenserp-api-key.yaml 2022-12-22 11:31:15 +05:30
Ritik Chaddha f3f0c9073a
Update zenscrape-api-key.yaml 2022-12-22 11:29:08 +05:30
Ritik Chaddha d311e42b23
Update zeplin-access-token.yaml 2022-12-22 02:41:53 +05:30
geeknik 6ff45ea0a0
Update credentials-disclosure.yaml
https://regex101.com/r/L8AgnX/1
2022-12-06 13:24:27 +00:00
Prince Chaddha 5822201574
Create loqate-api-key.yaml 2022-10-17 21:43:04 +05:30
Sandeep Singh 712264db7e
Using "host-redirects" instead of "redirects" to avoid scanning 3rd party / out of scope hosts. (#5491) 2022-10-08 02:57:25 +05:30
Prince Chaddha 5abac7e487
Merge pull request #5389 from projectdiscovery/fp-fix-1
False Positives because of weak matchers
2022-09-16 16:40:09 +05:30
Prince Chaddha aa067ca9a8
Delete gitlab-recovery-code.yaml 2022-09-16 16:39:33 +05:30
Prince Chaddha 0480100ad8
Delete github-recovery-code.yaml 2022-09-16 16:39:16 +05:30
Prince Chaddha 3a3d9d7897
Delete discord-backup-code.yaml 2022-09-16 16:37:32 +05:30
Prince Chaddha 4d72ce52cd
Merge pull request #3124 from geeknik/patch-42
checks for github and gitlab recovery codes and discord backup codes
2022-09-15 18:51:43 +05:30
Prince Chaddha cf7ae3c7cb
Update gitlab-recovery-code.yaml 2022-09-15 15:31:04 +05:30
Prince Chaddha 2f64aaeb9e
Update github-recovery-code.yaml 2022-09-15 15:31:02 +05:30
Prince Chaddha 6bdd45f7e5
Update discord-backup-code.yaml 2022-09-15 15:30:58 +05:30
Dhiyaneshwaran fa949c5aeb
Update gitlab-recovery-code.yaml 2022-09-14 13:32:48 +05:30
Dhiyaneshwaran 9015194526
Update discord-backup-code.yaml 2022-09-14 13:30:52 +05:30
Dhiyaneshwaran 81e6a99626
Update github-recovery-code.yaml 2022-09-14 13:28:35 +05:30