Files
nuclei-templates/http/token-spray/api-npm.yaml
2024-12-01 13:57:55 +00:00

28 lines
665 B
YAML

id: api-npm
info:
name: NPM API Test
author: zzeitlin
severity: info
reference:
- https://docs.npmjs.com/creating-and-viewing-access-tokens
metadata:
max-request: 1
tags: token-spray,node,npm
self-contained: true
http:
- method: GET
path:
- "https://registry.npmjs.org/-/whoami"
headers:
Authorization: Bearer {{token}}
matchers:
- type: status
status:
- 401
- 403
negative: true
# digest: 4a0a004730450220748257827ac8f8fb8b238341dd211c8a4cf76055ffa1922b3a98b3be5c3ca863022100e1104a0cb700ac9e442191af987d71c5bef5a03a8c9b9f5df74a89dcf8dfe485:922c64590222798bb761d5b6d8e72950