id: sendgrid-env

info:
  name: SendGrid Env File Exposure
  author: DhiyaneshDk
  severity: medium
  metadata:
    verified: true
    shodan-query: html:"sendgrid.env"
  tags: exposure,sendgrid,key,api,files

requests:
  - method: GET
    path:
      - "{{BaseURL}}/sendgrid.env"

    extractors:
      - type: regex
        part: body
        regex:
          - 'SG\.[a-zA-Z0-9-_]{22}\.[a-zA-Z0-9_-]{43}'