logo

Database

Stackhawk Api Key

Description

The source code repository contains sensitive information: StackHawk API Key

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    • Matches StackHawk API Key patterns in source code and configuration files

Vulnerable code example

HAWK_API_KEY=hawk.8jTTtv4rh3pM7jvgqKUs.NxQHnbdYjHdSG7JGmojG
curl -H 'X-ApiKey: hawk.XhO3eZVrsE2NJVd67Qe8.o8c7B55BQkftl1WtwfOf' https://api.stackhawk.com/api/v1/auth/login
api_key: "hawk.77hjJ8RyxO461xZaM0PK.SXA0dwnwKPBbcJ0H1V8Y"
My StackHawk key is hawk.8jTTtv4rh3pM7jvgqKUs.NxQHnbdYjHdSG7JGmojG. Keep it safe
key=hawk.XhO3eZVrsE2NJVd67Qe8.o8c7B55BQkftl1WtwfOf.