jwt-token: JWT Token Disclosure

id: jwt-token

info:
  name: JWT Token Disclosure
  author: Ice3man
  severity: unknown
  metadata:
    max-request: 1
  tags: exposure,token,generic,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    extractors:
      - type: regex
        part: body
        regex:
          - 'eyJ[a-zA-Z0-9]{10,}\.eyJ[a-zA-Z0-9]{10,}\.[a-zA-Z0-9_\-]{10,}'
# digest: 4a0a0047304502201f71fbdc4874e4eb5198e4937d1ca04268180574e638145ce9b8bffb3dadeb86022100cc8128b01e3c4d0ce97716821687256572c866dca8307a1073e9fce76de7c670:922c64590222798bb761d5b6d8e72950