id: sendgrid-env

info:
  name: SendGrid Env File Exposure
  author: DhiyaneshDk
  severity: medium
  metadata:
    verified: true
    max-request: 1
    shodan-query: html:"sendgrid.env"
  tags: exposure,sendgrid,key,api,files

http:
  - method: GET
    path:
      - "{{BaseURL}}/sendgrid.env"

    extractors:
      - type: regex
        part: body
        regex:
          - 'SG\.[a-zA-Z0-9-_]{22}\.[a-zA-Z0-9_-]{43}'

# digest: 4a0a00473045022046abef454fb8b636e3fe739928339fc587faf03f1751b77222f0a2792de400ee022100f46805467a0fd97469cde6c091ec4d54d469a71b46b38eb37914f61e45912910:922c64590222798bb761d5b6d8e72950