id: discord-webhook

info:
  name: Discord Webhook Disclosure
  author: Ice3man, apapedulimu
  severity: info
  metadata:
    max-request: 1
  tags: exposure,token,discord,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    extractors:
      - type: regex
        part: body
        regex:
          - 'https://discordapp\.com/api/webhooks/[0-9]+/[A-Za-z0-9\-]+'
          - 'https://discord\.com/api/webhooks/[0-9]+/[A-Za-z0-9\-]+'
# digest: 4a0a00473045022100ad7c15a89dd8c02000bb581c56cd0c536c14c0df69edba03e9398e24c859cae30220465f7635c6d5742854d42a946e1ac8148cb8ab909ab22d5d346589889a6ad23a:922c64590222798bb761d5b6d8e72950