id: razorpay-clientid-disclosure info: name: Razorpay Client ID Disclosure author: Devang-Solanki severity: high reference: - https://github.com/streaak/keyhacks#Razorpay-keys - https://docs.gitguardian.com/secrets-detection/detectors/specifics/razorpay_apikey tags: exposure,token,razorpay requests: - method: GET path: - "{{BaseURL}}" extractors: - type: regex part: body regex: - "rzp_(live|test)_.{14}"