nuclei-templates/http/exposures/tokens/square/square-oauth-secret-token.yaml

23 lines
466 B
YAML

id: square-oauth-secret-token
info:
name: Square OAuth Secret
author: DhiyaneshDK
severity: info
reference:
- https://github.com/praetorian-inc/noseyparker/blob/main/data/default/rules/square.yml
metadata:
max-request: 1
verified: true
tags: square,token,exposure,oauth
http:
- method: GET
path:
- "{{BaseURL}}"
extractors:
- type: regex
part: body
regex:
- '(?i)\b(sq0csp-[a-z0-9_-]{43})\b'