24 lines
776 B
YAML
24 lines
776 B
YAML
id: odbc-connection-string
|
|
|
|
info:
|
|
name: ODBC Connection String
|
|
author: DhiyaneshDK
|
|
severity: info
|
|
reference:
|
|
- https://github.com/praetorian-inc/noseyparker/blob/main/crates/noseyparker/data/default/builtin/rules/odbc.yml
|
|
metadata:
|
|
verified: true
|
|
max-request: 1
|
|
tags: odbc,exposure,tokens
|
|
|
|
http:
|
|
- method: GET
|
|
path:
|
|
- "{{BaseURL}}"
|
|
|
|
extractors:
|
|
- type: regex
|
|
part: body
|
|
regex:
|
|
- (?i)(?:User|User\sId|UserId|Uid)\s*=\s*([^\s;]{3,100})\s*;[\ \t]*.{0,10}[\ \t]*(?:Password|Pwd)\s*=\s*([^\t\ ;]{3,100})\s*(?:[;]|$)
|
|
# digest: 4a0a0047304502202bd1f509fa61f04c63db005fa3675d5d8c644cc086a050bc2aa1063944d094de022100b4a675a93582fe5abece6cb96cc2abb496205658b14cca6ecc0a91d99e780e1f:922c64590222798bb761d5b6d8e72950 |