remita-credentials: Remita Merchant ID & API Key - Exposure

id: remita-credentials

info:
  name: Remita Merchant ID & API Key - Exposure
  author: Lloydcoder
  severity: low
  description: |
    Detected exposed Remita merchant IDs, API keys, and secret hashes in application source code, configuration files, or publicly accessible assets.
  reference:
    - https://api.remita.net/
  tags: exposure,remita,fintech,tinlance,lloydcoder,token

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    redirects: true

    matchers-condition: and
    matchers:
      - type: regex
        regex:
          - "merchantId[\"']?\\s*[:=]\\s*[\"']?\\d{10,}[\"']?"

      - type: word
        words:
          - "remita"
          - "merchantId"
          - "publicKey"
        condition: or
        case-insensitive: true
# digest: 4b0a004830460221009ce4eac9cf5f509753f5f6292a384e5b9fc6f2004e1fa5104b3af559ad3d7f54022100dd953986a7f7384c8a577c21941116d131b3e6d86e488f7c357cc7f04d497601:922c64590222798bb761d5b6d8e72950

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.