id: amazon-mws-auth-token

info:
  name: Amazon MWS Auth Token
  author: puzzlepeaches
  severity: info
  classification:
    cwe-id: CWE-522,CWE-540
  metadata:
    max-request: 1
  tags: exposure,token,aws,amazon,auth,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    extractors:
      - type: regex
        part: body
        regex:
          - "amzn\\.mws\\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}"
# digest: 490a00463044022064ee98109d47c47696d58dacc82fbbf6ae47448817c3df02008d0acb1ab287c702203c1a8ed63ecc22e893c74ae1ea980532d3cd959b6d5791921ad741df71cb5685:922c64590222798bb761d5b6d8e72950