nuclei-templates/http/exposures/tokens/artifactory/artifactory-api-password.yaml

23 lines
554 B
YAML
Executable File

id: artifactory-api-password
info:
name: Artifactory Password Disclosure
author: Ice3man
severity: info
metadata:
max-request: 1
tags: exposure,token,artifactory
http:
- method: GET
path:
- "{{BaseURL}}"
extractors:
- type: regex
part: body
regex:
- '(?:\s|=|:|"|^)AP[\dABCDEF][a-zA-Z0-9]{8,}'
# digest: 4a0a00473045022100850e4f400026353e0fe365bba8a6a0e3449fbb32998c1503e79f9e18d860eea602207653ba1b87690663ebbce8b9a83f16b3c1092f58c669cd15d395c6753b11d901:922c64590222798bb761d5b6d8e72950