GitHub - Vulker111/JS-SCAN

Branches Tags

Name		Name	Last commit message	Last commit date
Latest commit History 57 Commits
swagger-xss		swagger-xss
access-log.yaml		access-log.yaml
accueil-wampserver.yaml		accueil-wampserver.yaml
adafruit-api-key.yaml		adafruit-api-key.yaml
adobe-client-id.yaml		adobe-client-id.yaml
adobe-oauth-secret.yaml		adobe-oauth-secret.yaml
age-public-key.yaml		age-public-key.yaml
age-secret-key.yaml		age-secret-key.yaml
airflow-configuration-exposure.yaml		airflow-configuration-exposure.yaml
airtable-api-key.yaml		airtable-api-key.yaml
algolia-api-key.yaml		algolia-api-key.yaml
alibaba-accesskey-id.yaml		alibaba-accesskey-id.yaml
alibaba-canal-info-leak.yaml		alibaba-canal-info-leak.yaml
alibaba-secretkey-id.yaml		alibaba-secretkey-id.yaml
all_nuclei.yaml		all_nuclei.yaml
amazon-docker-config.yaml		amazon-docker-config.yaml
amazon-mws-auth-token.yaml		amazon-mws-auth-token.yaml
amazon-sns-topic.yaml		amazon-sns-topic.yaml
ansible-config-disclosure.yaml		ansible-config-disclosure.yaml
apache-config.yaml		apache-config.yaml
apache-ozone-conf.yaml		apache-ozone-conf.yaml
apache-pinot-config.yaml		apache-pinot-config.yaml
appspec-yml-disclosure.yaml		appspec-yml-disclosure.yaml
appveyor-configuration-file.yaml		appveyor-configuration-file.yaml
artifactory-api-password.yaml		artifactory-api-password.yaml
artifactory-api-token.yaml		artifactory-api-token.yaml
asana-client-id.yaml		asana-client-id.yaml
asana-client-secret.yaml		asana-client-secret.yaml
aspnet-soap-webservices-asmx.yaml		aspnet-soap-webservices-asmx.yaml
atlassian-token.yaml		atlassian-token.yaml
aws-access-key-value.yaml		aws-access-key-value.yaml
aws-access-secret-key.yaml		aws-access-secret-key.yaml
aws-account-id.yaml		aws-account-id.yaml
aws-api-key.yaml		aws-api-key.yaml
aws-config.yaml		aws-config.yaml
aws-credentials.yaml		aws-credentials.yaml
aws-session-token.yaml		aws-session-token.yaml
awstats-config.yaml		awstats-config.yaml
awstats-script.yaml		awstats-script.yaml
axiom-digitalocean-key-exposure.yaml		axiom-digitalocean-key-exposure.yaml
azure-apim-secretkey.yaml		azure-apim-secretkey.yaml
azure-connection.yaml		azure-connection.yaml
azure-domain-tenant.yaml		azure-domain-tenant.yaml
babel-config-exposure.yaml		babel-config-exposure.yaml
badarg-log.yaml		badarg-log.yaml
beamer-token.yaml		beamer-token.yaml
behat-config.yaml		behat-config.yaml
bitbucket-clientid.yaml		bitbucket-clientid.yaml
bitbucket-clientsecret.yaml		bitbucket-clientsecret.yaml
bitly-secret-key.yaml		bitly-secret-key.yaml
bittrex-accesskey.yaml		bittrex-accesskey.yaml
bittrex-secretkey.yaml		bittrex-secretkey.yaml
blazor-boot.yaml		blazor-boot.yaml
braintree-access-token.yaml		braintree-access-token.yaml
cakephp-config.yaml		cakephp-config.yaml
cgi-printenv.yaml		cgi-printenv.yaml
cipher-secret-key.yaml		cipher-secret-key.yaml
circleci-config.yaml		circleci-config.yaml
circleci-ssh-config.yaml		circleci-ssh-config.yaml
cisco-network-config.yaml		cisco-network-config.yaml
clockwork-php-page.yaml		clockwork-php-page.yaml
clojars-token.yaml		clojars-token.yaml
cloudinary-credentials.yaml		cloudinary-credentials.yaml
codeception-config.yaml		codeception-config.yaml
codeclimate-token.yaml		codeclimate-token.yaml
codecov-accesstoken.yaml		codecov-accesstoken.yaml
codeigniter-env.yaml		codeigniter-env.yaml
coinbase-accesstoken.yaml		coinbase-accesstoken.yaml
collibra-properties.yaml		collibra-properties.yaml
composer-config.yaml		composer-config.yaml
config-json.yaml		config-json.yaml
config-properties.yaml		config-properties.yaml
config-rb.yaml		config-rb.yaml
configuration-listing.yaml		configuration-listing.yaml
confluent-accesstoken.yaml		confluent-accesstoken.yaml
confluent-secretkey.yaml		confluent-secretkey.yaml
contentful-token.yaml		contentful-token.yaml
coremail-config-disclosure.yaml		coremail-config-disclosure.yaml
couchbase-buckets-api.yaml		couchbase-buckets-api.yaml
crates-api-key.yaml		crates-api-key.yaml
credentials-disclosure.yaml		credentials-disclosure.yaml
cypress-web-config.yaml		cypress-web-config.yaml
darkstat-detect.yaml		darkstat-detect.yaml
databricks-token.yaml		databricks-token.yaml
datadog-accesstoken.yaml		datadog-accesstoken.yaml
dbeaver-credentials.yaml		dbeaver-credentials.yaml
debug-vars.yaml		debug-vars.yaml
dependency-track-api.yaml		dependency-track-api.yaml
deployment-ini.yaml		deployment-ini.yaml
detect-drone-config.yaml		detect-drone-config.yaml
development-logs.yaml		development-logs.yaml
digital-ocean-personal-token.yaml		digital-ocean-personal-token.yaml
digitalocean-app-token.yaml		digitalocean-app-token.yaml
digitalocean-refresh.yaml		digitalocean-refresh.yaml
discord-clientid.yaml		discord-clientid.yaml
discord-clientsecret.yaml		discord-clientsecret.yaml
discord-token.yaml		discord-token.yaml
discord-webhook.yaml		discord-webhook.yaml
django-debug-exposure.yaml		django-debug-exposure.yaml
django-variables-exposed.yaml		django-variables-exposed.yaml

Repository files navigation

id: newrelic-license-key-non

info:
  name: New Relic License Key (non-suffixed)
  author: DhiyaneshDK
  severity: info
  reference:
    - https://github.com/praetorian-inc/noseyparker/blob/main/crates/noseyparker/data/default/builtin/rules/newrelic.yml
    - https://docs.newrelic.com/docs/apis/intro-apis/new-relic-api-keys
    - https://docs.newrelic.com/docs/apis/intro-apis/new-relic-api-keys/#license-key
  metadata:
    verified: true
    max-request: 1
  tags: newrelic,exposure,tokens

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    extractors:
      - type: regex
        part: body
        regex:
          - (?i)associated\ with\ your\ New\ Relic\ account\.\s+license_key:\s*([a-f0-9]{40})\b
# digest: 4a0a00473045022100c9868f17ea11a2c47367f43ad7a380f9c3b746a161378185edfe4886d93e2d7202202664618ab5327aa9a02e9cac60f33228b8056f6d4fc300698b91cfa82c7bb606:922c64590222798bb761d5b6d8e72950