id: google-oauth-access-key
info:
name: Google OAuth Access Key Disclosure
author: Ice3man
severity: info
tags: exposure,token,google
requests:
- method: GET
path:
- "{{BaseURL}}"
extractors:
- type: regex
part: body
regex:
- 'ya29\.[0-9A-Za-z\-_]+'