logo

Database

Paymob Secret Key

Description

The source code repository contains sensitive information: Paymob Secret Key

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    • Matches Paymob Secret Key patterns in source code and configuration files

Vulnerable code example

PAYMOB_SECRET_KEY=egy_sk_test_f2fe9e730c54b8636b58c54e8eae5c5d991ab69beb07e4d79e9036bdffdbf1c0
PAYMOB_SECRET_KEY=egy_sk_live_0f656c8bcdb1bb8784f393795f83a8df5301f3942ec03d1180356da000e5783d
PAYMOB_PUBLIC_KEY=egy_pk_live_P9Zj2PaTa7qafMs9EZm9UDE3tXbrdxL5
curl -X POST https://accept.paymob.com/v1/intention/ \
  -H 'Authorization: Token egy_sk_test_00a9487af62b62b7da63eedc99fd3cc5def1945698fc4ff05a2d5969d94bd5d7' \
  -H 'Content-Type: application/json'
# paymob oman
PAYMOB_SECRET_KEY=sk_test_d0f8a75c21ac763742391b28982f0fb6a91d349f04fc0608d2356e3a8fbd956d...