nuclei-templates/http/osint/user-enumeration/duolingo.yaml

35 lines
878 B
YAML

id: duolingo
info:
name: Duolingo User Name Information - Detect
author: dwisiswant0
severity: info
description: Duolingo user name information check was conducted.
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
cvss-score: 0
cwe-id: CWE-200
metadata:
max-request: 1
tags: osint,osint-hobby,duolingo
self-contained: true
http:
- method: GET
path:
- "https://www.duolingo.com/2017-06-30/users?username={{user}}&_=1628308619574"
matchers-condition: and
matchers:
- type: status
status:
- 200
- type: word
part: body
words:
- "joinedClassroomIds"
# digest: 4a0a00473045022100f6cf5b14ab31336a129da74dd5c5ee8fe8aa594ff85ac13edccd240696e84ef8022052da90c1c2c0d003b3de8431988d1b6f272b40a788c28ecf39c617915fc102dd:922c64590222798bb761d5b6d8e72950