nuclei-templates/exposures/tokens/gitlab/gitlab-personal-token.yaml

23 lines
530 B
YAML

id: gitlab-personal-token
info:
name: GitLab Personal Access Token
author: DhiyaneshDK
severity: info
reference:
- https://github.com/praetorian-inc/noseyparker/blob/main/data/default/rules/gitlab.yml
- https://docs.gitlab.com/ee/user/profile/personal_access_tokens.html
metadata:
verified: "true"
tags: gitlab,token,exposure
requests:
- method: GET
path:
- "{{BaseURL}}"
extractors:
- type: regex
part: body
regex:
- '\b(glpat-[0-9a-zA-Z_-]{20})(?:\b|$)'