logo

Database

Duplocloud Api Token

Description

The source code repository contains sensitive information: DuploCloud API Token

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    • Matches DuploCloud API Token patterns in source code and configuration files

Vulnerable code example

url = "https://acme.duplocloud.net/adminproxy/GetTenantNames"
headers = {"Authorization": "Bearer AQAAANCMnd8BFdERjHoAwE_Cl-sBAAAAI6p-L57P_J4CJNXOFODxeQAAAAACAAAAAAAQZgAAAAEAACAAAADZHiDxoPuUNAMJJsUqvHxAOEOQ2tykRsGmMBIJ1i9uZAAAAAAOgAAAAAIAACAAAAB7NpQDaRH1KeUq4GTCfAYrYvjDaomoYFH2wbOJVDGPiMAAAACqbGmYj-ZYDY4kFO9vT2sXWD-SgqFHEx5T_vwDXYe00qaXd-FelF7bfqkiG7QjnkOJF_BBRVXQwzX6-4Z-1_ao8zZtVAnEgI34r_2Lp3xMDsk5_7NV52ETDewZQIth_Wk6_MuJXNAdFxTFgpt4Zf3WewuMSxgCtBcxRcWexwWTdVsNlDY3rs1GVFBzbXlFKmM2ZT34bx6nfxc3Dm5cqSdzj4eDhgPsrDA2Y3nGDUdBWgFx_nJpk8Zgx9ChZBTX73tAAAAAuxYQGvzGP-CmEe2KE7Zqopn1He2IH9Q-U2VJl33coG4Y8Zw5hwz1uOYY8lecRNSHPi0wE64wNtmH8FEIaxbQOA"}
duploctl service list \
  --host https://acme.duplocloud.net \
  --token AQAAANCMnd8BFdERjHoAwE_Cl-sBAAAAI6p-L57P_J4CJNXOFODxeQAAAAACAAAAAAAQZgAAAAEAACAAAADZHiDxoPuUNAMJJsUqvHxAOEOQ2tykRsGmMBIJ1i9uZAAAAAAOgAAAAAIAACAAAAB7NpQDaRH1KeUq4GTCfAYrYvjDaomoYFH2wbOJVDGPiMAAAACqbGmYj-ZYDY4kFO9vT2sXWD-SgqFHEx5T_vwDXYe00qaXd-FelF7bfqkiG7QjnkOJF_BBRVXQwzX6-4Z-1_ao8zZtVAnEgI34r_2Lp3xMDsk5_7NV52ETDewZQIth_Wk6_MuJXNAdFxTFgpt4Zf3WewuMSxgCtBcxRcWexwWTdVsNlDY3rs1GVFBzbXlFKmM2ZT34bx6nfxc3Dm5cqSdzj4eDhgPsrDA2Y3nGDUdBWgFx_nJpk8Zgx9ChZBTX73tAAAAAuxYQGvzGP-CmEe2KE7Zqopn1He2IH9Q-U2VJl33coG4Y8Zw5hwz1uOYY8lecRNSHPi0wE64wNtmH8FEIaxbQOA
# duplo
TOKEN=AQAAANCMnd8BFdERjHoAwE_Cl-sBAAAADi1Ma4qpyOcGJURjgqHA3wAAAAACAAAAAAADZgAAwAAAABAAAABv2CPZGqZo0BuGQADRH46HAAAAAASAAACgAAAAEAAAAFoqAe0zBu3-dFNRhuUPqUOwAAAA4ClHN1S9xW48CKag7LPkHR2h4ckHb48kkHzjg7BB2AKd7BQdZFltWCU_7xgBeZG5s5Or64BRcm6Qt6QBKXR8P3-kT_YWMX3YWt2VmB3d_oOVvJgGsBN66LpArgMVArtn4psI95Yak_7hdOJRXdsToeLY1f9-XXPbeD1zk44S1bYEp88Qdljhd7lfoYcz3WAlEHhfxhtdIKt7n0GyMY10iHGzkR0LLis-RTcKkkyG4qUUAAAAQDq0agMlMF_7_8_x48cX9-8QIjc
export DUPLO_TOKEN=AQAAANCMnd8BFdERjHoAwE_Cl-sBAAAAI6p-L57P_J4CJNXOFODxeQAAAAACAAAAAAAQZgAAAAEAACAAAADZHiDxoPuUNAMJJsUqvHxAOEOQ2tykRsGmMBIJ1i9uZAAAAAAOgAAAAAIAACAAAAB7NpQDaRH1KeUq4GTCfAYrYvjDaomoYFH2wbOJVDGPiMAAAACqbGmYj-ZYDY4kFO9vT2sXWD-SgqFHEx5T_vwDXYe00qaXd-FelF7bfqkiG7QjnkOJF_BBRVXQwzX6-4Z-1_ao8zZtVAnEgI34r_2Lp3xMDsk5_7NV52ETDewZQIth_Wk6_MuJXNAdFxTFgpt4Zf3WewuMSxgCtBcxRcWexwWTdVsNlDY3rs1GVFBzbXlFKmM2ZT34bx6nfxc3Dm5cqSdzj4eDhgPsrDA2Y3nGDUdBWgFx_nJpk8Zgx9ChZBTX73tAAAAAuxYQGvzGP-CmEe2KE7Zqopn1He2IH9Q-U2VJl33coG4Y8Zw5hwz1uOYY8lecRNSHPi0wE64wNtmH8FEIaxbQOA...