id: openai-admin-api-key

info:
  name: OpenAI Admin API Key Detection
  author: Chemo850
  severity: info
  reference:
    - https://help.openai.com/en/articles/9687866-admin-and-audit-logs-api-for-the-api-platform#h_1e5960a287
  metadata:
    verified: true
    max-request: 1
  tags: openai,exposure,tokens,vuln,ai

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    extractors:
      - type: regex
        part: body
        regex:
          - sk-admin-[A-Za-z0-9_-]{58}T3BlbkFJ[A-Za-z0-9_-]{58}
# digest: 4b0a00483046022100fb952f64fcfb92413b86e740b8858f9f2b026bfdbb3c6e4c05e06421d561ddf1022100902cdea2ab7ac6b3c4d5e68c900a93b70dcd8a4df768d533fc583dff8b4cc61d:922c64590222798bb761d5b6d8e72950