nuclei-templates/http/exposures/tokens/jenkins/jenkins-crumb-token.yaml

26 lines
622 B
YAML

id: jenkins-crumb-token
info:
name: Jenkins Token or Crumb
author: DhiyaneshDK
severity: info
reference:
- https://github.com/praetorian-inc/noseyparker/blob/main/data/default/rules/jenkins.yml
- https://www.jenkins.io/blog/2018/07/02/new-api-token-system/
- https://www.jenkins.io/doc/book/security/csrf-protection/
metadata:
verified: true
max-request: 1
tags: jenkins,crumb,token,exposure
http:
- method: GET
path:
- "{{BaseURL}}"
extractors:
- type: regex
part: body
regex:
- '(?i)jenkins.{0,10}(?:crumb)?.{0,10}\b([0-9a-f]{32,36})\b'