id: google-api-key

info:
  name: Google API Key
  author: Swissky
  severity: info
  reference:
    - https://cloud.google.com/docs/authentication/api-keys#securing
    - https://support.google.com/googleapi/answer/6310037
  metadata:
    max-request: 2
  tags: exposure,token,google

http:
  - method: GET
    path:
      - "{{BaseURL}}"
      - "{{BaseURL}}/hopfully404"

    extractors:
      - type: regex
        part: body
        regex:
          - "AIza[0-9A-Za-z\\-_]{35}"
# digest: 4a0a00473045022100fb2d5b531acc51a349180b53a20ca897f6c664014da96bb6f3ebee76bfba2b090220303f0fe122689fbef304f1e0a3b68a93ccb8c1aca0b61dc80988b23c9f8efaac:922c64590222798bb761d5b6d8e72950