nuclei-templates/exposures/tokens/sonarqube/sonarqube-token.yaml

id: sonarqube-token

info:
  name: SonarQube Token Disclosure
  author: Ice3man
  severity: info
  tags: exposure,token

requests:
  - method: GET
    path:
      - "{{BaseURL}}"
    extractors:
      - type: regex
        part: body
        regex:
          - "sonar.{0,50}(?:\"|'|`)?[0-9a-f]{40}(?:\"|'|`)?"