id: artifactory-api-password

info:
  name: Artifactory Password Disclosure
  author: Ice3man
  severity: info
  tags: exposure,token,artifactory

requests:
  - method: GET
    path:
      - "{{BaseURL}}"

    extractors:
      - type: regex
        part: body
        regex:
          - '(?:\s|=|:|"|^)AP[\dABCDEF][a-zA-Z0-9]{8,}'