Files
nuclei-templates/http/miscellaneous/crypto-address-detect.yaml
2025-11-26 23:02:04 +00:00

52 lines
1.5 KiB
YAML

id: crypto-address-detect
info:
name: Exposed Cryptocurrency Wallet Address
author: rxerium
severity: info
description: |
Detected Bitcoin, Monero, Ethereum, or XRP wallet addresses were identified in webpage content.
reference:
- https://bitcoin.org/
- https://xrpl.org/
- https://www.getmonero.org/
- https://en.wikipedia.org/wiki/Ethereum
metadata:
max-request: 1
verified: true
tags: crypto,bitcoin,monero,ethereum,xrp,ripple,osint,discovery
http:
- method: GET
path:
- "{{BaseURL}}"
matchers:
- name: bitcoin-address
type: dsl
dsl:
- 'regex("([13][a-km-zA-HJ-NP-Z1-9]{25,34})", body)'
- 'status_code == 200'
condition: and
- name: monero-address
type: dsl
dsl:
- 'regex("(4[0-9AB][1-9A-HJ-NP-Za-km-z]{93})", body)'
- 'status_code == 200'
condition: and
- name: ethereum-address
type: dsl
dsl:
- 'regex("(0x[a-fA-F0-9]{40})", body)'
- 'status_code == 200'
condition: and
- name: xrp-address
type: dsl
dsl:
- 'regex("(r[0-9a-zA-Z]{24,34})", body)'
- 'status_code == 200'
condition: and
# digest: 4a0a0047304502206857c41253ca93dd374601460baa13b4c8987bf84b840adfddce30c256046484022100e44b1d87b3d3fa3c70040360253ae0131004c86386f9d840d41f84a64d7a479e:922c64590222798bb761d5b6d8e72950