nuclei-templates/http/exposures/tokens/artifactory/artifactory-api-password.yaml

20 lines
358 B
YAML
Executable File

id: artifactory-api-password
info:
name: Artifactory Password Disclosure
author: Ice3man
severity: info
tags: exposure,token,artifactory
metadata:
max-request: 1
http:
- method: GET
path:
- "{{BaseURL}}"
extractors:
- type: regex
part: body
regex:
- '(?:\s|=|:|"|^)AP[\dABCDEF][a-zA-Z0-9]{8,}'