nuclei-templates/http/token-spray/api-gitlab.yaml

31 lines
716 B
YAML

id: api-gitlab
info:
name: Gitlab API Test
author: Adam Crosser
severity: info
reference:
- https://docs.gitlab.com/ee/api/personal_access_tokens.html
metadata:
max-request: 1
tags: token-spray,gitlab
self-contained: true
http:
- method: GET
path:
- "https://gitlab.com/api/v4/personal_access_tokens"
headers:
PRIVATE-TOKEN: "{{token}}"
matchers:
- type: word
part: body
words:
- '"id":'
- '"created_at":'
condition: and
# digest: 4a0a00473045022018e1d08da7b95bd30fe3380bf4314f6ea6c51c6885fe6e8c30838de488d446b8022100d1806cb0d3f05c93ba34ce2ff0796ad4bd0c2d4ea6a40962b628d43ac829abea:922c64590222798bb761d5b6d8e72950