nuclei-templates/http/token-spray/api-monday.yaml

37 lines
967 B
YAML

id: api-monday
info:
name: Monday API Test
author: daffainfo
severity: info
description: Programmatically access and update data inside a monday.com account
reference:
- https://api.developer.monday.com/docs
- https://github.com/daffainfo/all-about-apikey/tree/main/monday
metadata:
max-request: 1
tags: token-spray,monday
self-contained: true
http:
- raw:
- |
POST https://api.monday.com/v2 HTTP/1.1
Host: api.monday.com
Authorization: {{token}}
Content-Type: application/json
{"query": "query { me { is_guest created_at name id}}"}
matchers:
- type: word
part: body
words:
- '"me"'
- '"name"'
- '"account_id"'
condition: and
# digest: 4b0a00483046022100fecab9ebd8eaad24f05d6b7475b2383f3f088324f3a32899cfe6ae32e4dfb536022100d440bebd6717e33c5ee3d388f67e27db8bebb40f9883513e9d95029c7d710e0d:922c64590222798bb761d5b6d8e72950