id: artifactory-api-token

info:
  name: Artifactory API Token Disclosure
  author: Ice3man
  severity: info
  reference:
    - https://jfrog.com/help/r/jfrog-rest-apis/introduction-to-the-artifactory-rest-apis
  metadata:
    max-request: 1
  tags: exposure,token,artifactory,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    extractors:
      - type: regex
        part: body
        regex:
          - '(?:\s|=|:|"|^)AKC[a-zA-Z0-9]{10,}'
# digest: 490a00463044022063f82f5cddaea6d6037ac9f1922d1f0fe9766343e01000264985963fbceff0960220125ec971dc53a70f2e6a53db95a4436975f2211fc599de6c9a43f71722944a1b:922c64590222798bb761d5b6d8e72950