nuclei-templates/http/exposures/tokens/mapbox/mapbox-token-disclosure.yaml

26 lines
593 B
YAML

id: mapbox-token-disclosure
info:
name: Mapbox Token Disclosure
author: Devang-Solanki
severity: medium
reference:
- https://docs.gitguardian.com/secrets-detection/detectors/specifics/mapbox_token
- https://github.com/zricethezav/gitleaks/blob/master/cmd/generate/config/rules/mapbox.go
metadata:
max-request: 1
verified: true
tags: token,exposure,mapbox,disclosure
http:
- method: GET
path:
- "{{BaseURL}}"
extractors:
- type: regex
name: mapbox-secret-token
part: body
regex:
- 'sk\.eyJ1Ijoi\w+\.[\w-]*'