id: mailchimp-access-key-value

info:
  name: Mailchimp API Value
  author: puzzlepeaches
  severity: info
  reference:
    - https://mailchimp.com/help/about-api-keys/
  metadata:
    max-request: 1
  tags: exposure,token,mailchimp,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    extractors:
      - type: regex
        part: body
        regex:
          - "[0-9a-f]{32}-us[0-9]{1,2}"
# digest: 490a0046304402201e2d2137be80a87728c9c0131932426fb36ba8edd4bdcd64843bbc1899a8891902203ade78a797c42138c0abf7659270afe5575300017ade99ec3d02ccecaa302ae8:922c64590222798bb761d5b6d8e72950