24 lines
620 B
YAML
24 lines
620 B
YAML
id: wechat-corpsecret-key
|
|
|
|
info:
|
|
name: Enterprise WeChat Corpsecret Key
|
|
author: N0el4kls
|
|
severity: info
|
|
reference:
|
|
- https://xz.aliyun.com/t/11092
|
|
metadata:
|
|
verified: true
|
|
max-request: 1
|
|
tags: wechat,exposure,tencent
|
|
|
|
http:
|
|
- method: GET
|
|
path:
|
|
- "{{BaseURL}}"
|
|
|
|
extractors:
|
|
- type: regex
|
|
part: body
|
|
regex:
|
|
- (?i)corpsecret\s*[:=]\s*["']?([a-z0-9\-]+)["']?
|
|
# digest: 4a0a00473045022100aef8483cbb936450af46573a3a83ca4f68539195274b15135643b579204a56fa02201c49a697c63fc9043f34278dcf93009b455fa061d5d32b424fdd3c4a5d26fa56:922c64590222798bb761d5b6d8e72950 |