id: braintree-access-token

info:
  name: PayPal Braintree Access Token Disclosure
  author: Ice3man
  severity: info
  classification:
    cwe-id: CWE-522,CWE-540
  metadata:
    max-request: 1
  tags: exposure,token,paypal,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    extractors:
      - type: regex
        part: body
        regex:
          - 'access_token\$production\$[0-9a-z]{16}\$[0-9a-f]{32}'
# digest: 4b0a00483046022100805adb533efd4b70b8426491f3862e6ddab605b504af396d4fd7a5099eae0231022100d10680cde6af5af5da875527cd11108b8ee8e69397bc5b2e41d358cf8c20fac7:922c64590222798bb761d5b6d8e72950