mirror of
https://github.com/projectdiscovery/nuclei-templates.git
synced 2026-02-16 23:53:28 +08:00
901777921c
This template is meant to be used like so: `nuclei -t token-spray/api-google-drive.yaml -var token=google_api_key -var referer=https://www.hostname_where_google_api_key_was_found.com` The way the template was edited to include `Referer: {{BaseURL}}` won't work because it adds `Referer: www.googleapis.com` which results in an ipRefererBlocked error from Google. If you can't define the referer, this template is useless and should be deleted. So please accept this change back to my original vision of this template. Thank you.
24 lines
554 B
YAML
24 lines
554 B
YAML
id: api-google-drive
|
|
|
|
info:
|
|
name: Google Drive API Test
|
|
author: geeknik
|
|
severity: info
|
|
reference:
|
|
- https://developers.google.com/drive/api/guides/about-sdk
|
|
tags: token-spray,google,drive
|
|
|
|
self-contained: true
|
|
requests:
|
|
- raw:
|
|
- |
|
|
GET https://www.googleapis.com/drive/v3/files/{{randstr}}.txt/%3fkey={{token}}&supportsAllDrives=true HTTP/1.1
|
|
Referer: {{referer}}
|
|
Content-Type:application/json
|
|
|
|
matchers:
|
|
- type: word
|
|
part: body
|
|
words:
|
|
- 'File not found: {{randstr}}.txt.'
|