logo

Database

Censys Personal Access Token

Description

The source code repository contains sensitive information: Censys Personal Access Token

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    • Matches Censys Personal Access Token patterns in source code and configuration files

Vulnerable code example

CENSYS_PAT=censys_BO8KIyES_BCcMVKVI8vMP3d6zYf6KrU5b
curl -H 'Authorization: Bearer censys_NbCiEdvH_VDUF1gLMJUV4JkxoYS2Gr9Oi' https://api.platform.censys.io/v3/accounts/users/credits
sdk = SDK(personal_access_token="censys_WcotWZ8Z_EUgQ9GRGKQtsHz5FnmZMb99p")
token: censys_lunEkpoyII_NsImqtVIFoNVDIllWyNOR37IFSfX