id: zoho-webhook-token

info:
  name: Zoho Webhook Disclosure
  author: Ice3man
  severity: info
  tags: exposure,token,zoho
  metadata:
    max-request: 1

http:
  - method: GET
    path:
      - "{{BaseURL}}"
    extractors:
      - type: regex
        part: body
        regex:
          - 'https://creator\.zoho\.com/api/[A-Za-z0-9/\-_\.]+\?authtoken=[A-Za-z0-9]+'