id: sendgrid-env

info:
  name: SendGrid Env File Exposure
  author: DhiyaneshDk
  severity: medium
  description: SendGrid file is exposed containing environment variables.
  classification:
    cpe: cpe:2.3:a:sendgrid:sendgrid:*:*:*:*:wordpress:*:*:*
  metadata:
    verified: true
    max-request: 1
    vendor: sendgrid
    product: sendgrid
    shodan-query: html:"sendgrid.env"
  tags: exposure,sendgrid,key,api,files

http:
  - method: GET
    path:
      - "{{BaseURL}}/sendgrid.env"

    matchers-condition: and
    matchers:
      - type: regex
        part: body
        regex:
          - 'SG\.[a-zA-Z0-9-_]{22}\.[a-zA-Z0-9_-]{43}'

      - type: status
        status:
          - 429
        negative: true
# digest: 490a0046304402203c4282d20b3e2c88e1cc5928e4ec082e2f946f04c158034e2d3703b5b28c0450022030dda09ed61e54bb4076b0a185e318df4812743f97f3304a9ec980fdd9b9a6a2:922c64590222798bb761d5b6d8e72950