27 lines
849 B
YAML
27 lines
849 B
YAML
id: mapbox-token-disclosure
|
|
|
|
info:
|
|
name: Mapbox Token Disclosure
|
|
author: Devang-Solanki
|
|
severity: medium
|
|
description: Mapbox secret token is exposed to external users.
|
|
reference:
|
|
- https://docs.gitguardian.com/secrets-detection/detectors/specifics/mapbox_token
|
|
- https://github.com/zricethezav/gitleaks/blob/master/cmd/generate/config/rules/mapbox.go
|
|
metadata:
|
|
verified: true
|
|
max-request: 1
|
|
tags: token,exposure,mapbox,disclosure
|
|
|
|
http:
|
|
- method: GET
|
|
path:
|
|
- "{{BaseURL}}"
|
|
|
|
extractors:
|
|
- type: regex
|
|
name: mapbox-secret-token
|
|
part: body
|
|
regex:
|
|
- 'sk\.eyJ1Ijoi\w+\.[\w-]*'
|
|
# digest: 490a0046304402202130f47c3a7ae00539c0c9361e16a262701adb95680ac7c8040458c236dc1c9302205a3499d6a73c3a5916ce6114479d863b4c8678c9fdf417eda549efbbf8215325:922c64590222798bb761d5b6d8e72950 |