logo

Database

Sslmate Api Key

Description

The source code repository contains sensitive information: SSLMate API Key

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    • Matches SSLMate API Key patterns in source code and configuration files

Vulnerable code example

SSLMATE_API_KEY=k2868152_e75s5phbzliwqngnwlrzkj4r4u
sslmate_api_key: "k5430416_l5wsqn4n4ruhgdqzr6q7uxqnao"
CERTSPOTTER_API_KEY=k2785970_2772w6cyaa6nknzrxy3xdxwrpr
CT_SEARCH_API_KEY=k4536282_finpu5fd3sury2os4mg4pm3qsi
# Cert Spotter
curl -H "Authorization: Bearer k730504_h3dcqaglm3ubbb4lprh2v72e4v" https://api.certspotter.com/v1/issuances?domain=example.com
curl https://sslmate.com/api/v2/certs/example.com \
  -u k243424_lohfevv7xnedt3ujswbgzs26e6:...