nuclei-templates/http/token-spray/api-flickr.yaml

30 lines
704 B
YAML

id: api-flickr
info:
name: Flickr API Test
author: geeknik
severity: info
reference:
- https://www.flickr.com/services/developer/api/
metadata:
max-request: 1
tags: token-spray,flickr
self-contained: true
http:
- method: GET
path:
- "https://www.flickr.com/services/rest/?method=flickr.tags.getHotList&api_key={{token}}"
matchers:
- type: word
part: body
words:
- 'secret'
- 'owner'
- 'username'
condition: and
# digest: 490a0046304402202d715a913703652b0eaa9bb0a7012440ff4343fefb182ecc351249af98cf9889022058751ef3d6d67063e1230302ee7fd5320037ad0e69a629db5699b790a5b169fd:922c64590222798bb761d5b6d8e72950