Amplitude Secret Key
Description
The source code repository contains sensitive information: Amplitude Secret Key
Detection Strategy
• Matches Amplitude Secret Key patterns in source code and configuration files
Vulnerable code example
AMPLITUDE_API_KEY=3f9c2a7e1d4b8f6a0e5c9d2b7a4f1e8c
AMPLITUDE_SECRET_KEY=b8e41f7a2c9d5e3b6a0f8c1d4e7b2a9f
amplitude_secret_key: "6d2f9b4e8a1c7f3e0b5d9a2c6e8f1b4d"
AMPLITUDE_SECRET=e7a3c9f1b5d8e2a6c0f4b9d3e7a1c5f8
amplitude_client = Amplitude(api_key='3f9c2a7e1d4b8f6a0e5c9d2b7a4f1e8c', secret_key='b8e41f7a2c9d5e3b6a0f8c1d4e7b2a9f')
curl -u '3f9c2a7e1d4b8f6a0e5c9d2b7a4f1e8c:b8e41f7a2c9d5e3b6a0f8c1d4e7b2a9f' 'https://amplitude.com/api/2/export?start=20220101T00&end=20220101T01'
curl --user=3f9c2a7e1d4b8f6a0e5c9d2b7a4f1e8c:b8e41f7a2c9d5e3b6a0f8c1d4e7b2a9f https://amplitude.com/api/2/taxonomy/category
'amplitude' => ['api_key' => '3f9c2a7e1d4b8f6a0e5c9d2b7a4f1e8c', 'secret' => 'c4f8a2e6b0d9f3a7e1c5b8d2f6a0e4c9'],Free trial
Search for vulnerabilities in your apps for free with Fluid Attacks' automated security testing! Start your 21-day free trial and discover the benefits of the Continuous Hacking Essential plan. If you prefer the Advanced plan, which includes the expertise of Fluid Attacks' pentesting team, fill out this contact form.