id: sportybet-api

info:
  name: SportyBet / BetKing Admin or API Token - Exposure
  author: Lloydcoder
  severity: info
  description: |
    Detected exposed internal tokens and administrative endpoints belonging to online betting platforms.
  tags: exposure,betting,sportybet,betking,token

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    matchers-condition: and
    matchers:
      - type: regex
        part: body
        regex:
          - "Bearer\\s+[A-Za-z0-9_-]{50,}\\.[A-Za-z0-9_-]{50,}\\.[A-Za-z0-9_-]{50,}"
          - "token[\"']?\\s*[:=]\\s*[\"']?eyJ[A-Za-z0-9_-]{100,}[\"']?"

      - type: word
        part: body
        words:
          - "sportybet"
          - "betking"
          - "bet9ja"
        condition: or
        case-insensitive: true
# digest: 490a0046304402200c17c9fc0b1681634ffe53244146d7c5fa84d0f1a18e899aa380c3deba85786502207f644ccf4722d0a0bc70ba2c78f85f0f99e4a491255304cf4fa46bf7c3b9fb4b:922c64590222798bb761d5b6d8e72950