logo

Database

Surveymonkey Access Token

Description

The source code repository contains sensitive information: SurveyMonkey Access Token

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    • Matches SurveyMonkey Access Token patterns in source code and configuration files

Vulnerable code example

# surveymonkey export
python export.py --access-token=Dxi3aG5fJNcyTCUkphG7LXyVgsRUAfrnrZm44dyFbB6hMhL5mafIbfF6AzOfLlM9dJMjr--hT8pNcxRLXfw3LCz-KbZvBnCufOgYbXZFTpVBo9zx3xQk1qd.l8-Madny
# surveymonkey
SM_ACCESS_TOKEN=Dxi3aG5fJNcyTCUkphG7LXyVgsRUAfrnrZm44dyFbB6hMhL5mafIbfF6AzOfLlM9dJMjr--hT8pNcxRLXfw3LCz-KbZvBnCufOgYbXZFTpVBo9zx3xQk1qd.l8-Madny
SurveyMonkey API Key: Dxi3aG5fJNcyTCUkphG7LXyVgsRUAfrnrZm44dyFbB6hMhL5mafIbfF6AzOfLlM9dJMjr--hT8pNcxRLXfw3LCz-KbZvBnCufOgYbXZFTpVBo9zx3xQk1qd.l8-Madny
# surveymonkey client
self.access_token = "Dxi3aG5fJNcyTCUkphG7LXyVgsRUAfrnrZm44dyFbB6hMhL5mafIbfF6AzOfLlM9dJMjr--hT8pNcxRLXfw3LCz-KbZvBnCufOgYbXZFTpVBo9zx3xQk1qd.l8-Madny"
SURVEYMONKEY_ACCESS_TOKEN=Dxi3aG5fJNcyTCUkphG7LXyVgsRUAfrnrZm44dyFbB6hMhL5mafIbfF6AzOfLlM9dJMjr--hT8pNcxRLXfw3LCz-KbZvBnCufOgYbXZFTpVBo9zx3xQk1qd.l8-Madny...