Percy Token
Description
The source code repository contains sensitive information: Percy Token
Detection Strategy
• Matches Percy Token patterns in source code and configuration files
Vulnerable code example
fetch("https://percy.io/api/v1/tokens/details", {
headers: { Authorization: "Token web_5c1d8e3a9f2b7460d1e8c3a5f9b2d7e4a6c0f3b8d5e2a9c7f1b4d6e8a3c5f0b2" }
})
export PERCY_TOKEN=web_7fc6a5c921fa31e7edefaaf6a2c2ed899a148f8d3a276bcd6668237caaefcb51
PERCY_TOKEN="auto_df20a078a2574c6bc40d83fa5e800d267948da3663e551994a7da6a3853ad26b"
PERCY_TOKEN: app_9124aa4a51a9527a97bc1cc7842e0384028706fbba15749781ebace388a8d87c
ENV PERCY_TOKEN ss_24c0029e8e557574766770dab0349c29f73dcedb9b16d770ffe3990557e676c4
process.env.PERCY_TOKEN = 'vmw_45d9ed99f3669cc886d5c2e35e49f2317c7e3eaef2ec97ba370aa2e29942f73c';...Free trial
Search for vulnerabilities in your apps for free with Fluid Attacks' automated security testing! Start your 21-day free trial and discover the benefits of the Continuous Hacking Essential plan. If you prefer the Advanced plan, which includes the expertise of Fluid Attacks' pentesting team, fill out this contact form.