nuclei-templates/http/exposures/tokens/crates/crates-api-key.yaml

28 lines
748 B
YAML

id: crates-api-key
info:
name: Crates.io API Key
author: DhiyaneshDK
severity: info
reference:
- https://github.com/praetorian-inc/noseyparker/blob/main/data/default/rules/crates.io.yml
- https://crates.io/data-access
- https://github.com/rust-lang/crates.io/blob/master/src/util/token.rs
metadata:
verified: true
max-request: 1
tags: crates,token,exposure
http:
- method: GET
path:
- "{{BaseURL}}"
extractors:
- type: regex
part: body
regex:
- '\bcio[a-zA-Z0-9]{32}\b'
# digest: 4a0a0047304502207b25cfe93e4eff388705465d8380a98d141462f4f09f20468de39c023e2c9adc022100e90ed6711fa3b47d4db666244db015e7573fc9e9ba1c423ce0430a96c482eac4:922c64590222798bb761d5b6d8e72950