id: odbc-connection-string

info:
  name: ODBC Connection String
  author: DhiyaneshDK
  severity: info
  reference:
    - https://github.com/praetorian-inc/noseyparker/blob/main/crates/noseyparker/data/default/builtin/rules/odbc.yml
  metadata:
    verified: true
    max-request: 1
  tags: odbc,exposure,tokens

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    extractors:
      - type: regex
        part: body
        regex:
          - (?i)(?:User|User\sId|UserId|Uid)\s*=\s*([^\s;]{3,100})\s*;[\ \t]*.{0,10}[\ \t]*(?:Password|Pwd)\s*=\s*([^\t\ ;]{3,100})\s*(?:[;]|$)
# digest: 4b0a00483046022100f6cc7e4f7f70cde8a03071ccd457c06d8538f0ff2f4a4268c60fe8bab3607999022100c8ba526e59b29318fead9b68ca4dbd182888c521c9cb98e0ac466fefb050e958:922c64590222798bb761d5b6d8e72950