id: jwt-token

info:
  name: JWT Token Disclosure
  author: Ice3man
  severity: unknown
  metadata:
    max-request: 1
  tags: exposure,token,generic

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    extractors:
      - type: regex
        part: body
        regex:
          - 'eyJ[a-zA-Z0-9]{10,}\.eyJ[a-zA-Z0-9]{10,}\.[a-zA-Z0-9_\-]{10,}'

# digest: 4b0a004830460221008baff70bdad0aab1fa5268cebae1b9a3689ed519a28b27fea4808128331191ee022100f7261c0a9b531903ab9c3fc69eb93943874995279b02338a89b7624d378d4063:922c64590222798bb761d5b6d8e72950
