logo

Database

Paymob Api Key

Description

The source code repository contains sensitive information: Paymob API Key

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    • Matches Paymob API Key patterns in source code and configuration files

Vulnerable code example

PAYMOB_API_KEY=ZXlKaGJHY2lPaUpJVXpVeE1pSXNJblI1Y0NJNklrcFhWQ0o5LmV5SmpiR0Z6Y3lJNklrMWxjbU5vWVc1MElpd2ljSEp2Wm1sc1pWOXdheUk2TkRRNE5UQXhMQ0p1WVcxbElqb2lhVzVwZEdsaGJDSjkuYzg2ejdGenpXQTczWkVtcUJDWEhuTEVkNWlGTWM3R0l4Zk9jbERYT0ZNRW8zcUhMY0Y2dW9HSUFvU2F1VGV6akltRUVNeC0yY0Nwb0RsbVJIaDlCSGc=
{"api_key": "ZXlKaGJHY2lPaUpJVXpVeE1pSXNJblI1Y0NJNklrcFhWQ0o5LmV5SmpiR0Z6Y3lJNklrMWxjbU5vWVc1MElpd2ljSEp2Wm1sc1pWOXdheUk2TVRVeE1ESXNJbTVoYldVaU9pSnBibWwwYVdGc0luMC5JVTFSN29zWnZXWHhnaGp4QkRONXl6bDdvbHVZY1V3cWJSeEZoTnVWek1vc1lsUi1vOXVIYm5uQVd5Qi1nQjIxeVotSDgwOHBoaHlYdXMtOHBISFhidw=="}
curl -X POST https://accept.paymob.com/api/auth/tokens \
  -H 'Content-Type: application/json' \
  -d '{"api_key": "ZXlKaGJHY2lPaUpJVXpVeE1pSXNJblI1Y0NJNklrcFhWQ0o5LmV5SmpiR0Z6Y3lJNklrMWxjbU5vWVc1MElpd2ljSEp2Wm1sc1pWOXdheUk2TWpFeU5UTTVMQ0p1WVcxbElqb2lhVzVwZEdsaGJDSjkuSnVONlBhVlZZVFdkTWc5c040TjVDQVZXR1RPQWhjRkMzbm12VWRqNE1PNnVfV1dwOVR4bHYtM3dyaEd1cF9ScDdBZ21hSWNxdzM4OTZiYlMtSGVuVHc="}'
# Paymob Accept
API_KEY = "ZXlKaGJHY2lPaUpJVXpVeE1pSXNJblI1Y0NJNklrcFhWQ0o5LmV5SmpiR0Z6Y3lJNklrMWxjbU5vWVc1MElpd2ljSEp2Wm1sc1pWOXdheUk2TmpNMU9UY3dMQ0p1WVcxbElqb2lhVzVwZEdsaGJDSjkuZWNTODd1UzZPMWd5ejlNUk5zdlNhNHdGNWZSNmN0LWJjUGxoZDdSc0hFaUVVU2lCZjRvaHFSUUU2QnZCcUJ6a2tkV2U1RTVXUm01Q0pMYmdJM2ZfbWc="
'paymob' => [...