26 lines
817 B
YAML
26 lines
817 B
YAML
id: okta-api-token
|
|
|
|
info:
|
|
name: Okta API Token
|
|
author: DhiyaneshDK
|
|
severity: info
|
|
reference:
|
|
- https://github.com/praetorian-inc/noseyparker/blob/main/crates/noseyparker/data/default/builtin/rules/okta.yml
|
|
- https://devforum.okta.com/t/api-token-length/5519
|
|
- https://developer.okta.com/docs/guides/create-an-api-token/main/
|
|
metadata:
|
|
verified: true
|
|
max-request: 1
|
|
tags: okta,exposure,tokens
|
|
|
|
http:
|
|
- method: GET
|
|
path:
|
|
- "{{BaseURL}}"
|
|
|
|
extractors:
|
|
- type: regex
|
|
part: body
|
|
regex:
|
|
- (?i)(?s)(?:okta|ssws).{0,40}\b(00[a-z0-9_-]{39}[a-z0-9_])\b
|
|
# digest: 4b0a00483046022100fd7b67f0e20ec6b017f62bb5f34a0752f0f356f84c8023404f4debd3d51b88fe022100bb88ca3a39c3be7c9491b09249077d5f21841ba50f806c263871d352504053cf:922c64590222798bb761d5b6d8e72950 |