logo

Database

Godaddy Personal Access Token

Description

The source code repository contains sensitive information: GoDaddy Personal Access Token

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    • Matches GoDaddy Personal Access Token patterns in source code and configuration files

Vulnerable code example

export GODADDY_PAT="gd_pat_ujPeIxdGcBefB0hoO8Kz-c2sjht0lLOxJednRBuLDtY_5c8d94a2"
GODADDY_TOKEN=gd_pat_SpKH4Us-hAWjFcQWK4uSMLD18EQdSP_0syQbDkhdXip_244cb3ef
curl -H "Authorization: Bearer gd_pat_z3fCJ403rAw49jlooFLqaAxK8SGNRd5X3ZzzgOdenkv_589ab36c" https://api.godaddy.com/v3/domains/check-availability?domain=example.com
headers = {"Authorization": "Bearer gd_pat_dajgxb3Njqwxh2_DEfgvq1kb8HjIbH-3SqxkXIXvoZ__ce3a27a5"}