sendgrid-env: SendGrid Env File Exposure

id: sendgrid-env

info:
  name: SendGrid Env File Exposure
  author: DhiyaneshDk
  severity: medium
  description: SendGrid file is exposed containing environment variables.
  classification:
    cpe: cpe:2.3:a:sendgrid:sendgrid:*:*:*:*:wordpress:*:*:*
  metadata:
    verified: true
    max-request: 1
    vendor: sendgrid
    product: sendgrid
    shodan-query: html:"sendgrid.env"
  tags: exposure,sendgrid,key,api,files,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}/sendgrid.env"

    matchers-condition: and
    matchers:
      - type: regex
        part: body
        regex:
          - 'SG\.[a-zA-Z0-9-_]{22}\.[a-zA-Z0-9_-]{43}'

      - type: status
        status:
          - 429
        negative: true
# digest: 490a00463044022036cc80e7d4c95b13513271ed60e4f3c99703a106aed68c57fb5d8b5c3ed23da10220285eef9376da83e5bee96bd8fcd04cadce21e305d82bebfcc977b402fbc5bd3d:922c64590222798bb761d5b6d8e72950