id: sauce-token

info:
  name: Sauce Token
  author: DhiyaneshDK
  severity: info
  reference:
    - https://github.com/praetorian-inc/noseyparker/blob/main/crates/noseyparker/data/default/builtin/rules/sauce.yml
    - https://docs.saucelabs.com/dev/api/
  classification:
    cwe-id: CWE-522,CWE-540
  metadata:
    verified: true
    max-request: 1
  tags: sauce,token,exposure,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    extractors:
      - type: regex
        part: body
        regex:
          - '(?i)sauce.{0,50}\b([a-f0-9-]{36})\b'
# digest: 4a0a00473045022100bd84b6620e24e602c2e5127201c1ddad9a58d573f17c11b4fce9b5071d459f9f022052f2cb5a9417e7169b1affa3df3f2c8ca250a61f24a7a15e1926e666a6e8ac01:922c64590222798bb761d5b6d8e72950