Skip to content

Heroku API Key

ID: heroku-key

Severity: info

Author: DhiyaneshDK

Tags: file,keys,heroku,token

id: heroku-key
info:
name: Heroku API Key
author: DhiyaneshDK
severity: info
reference:
- https://github.com/praetorian-inc/noseyparker/blob/main/data/default/rules/heroku.yml
- https://devcenter.heroku.com/articles/authentication
metadata:
verified: true
tags: file,keys,heroku,token
file:
- extensions:
- all
extractors:
- type: regex
part: body
regex:
- '(?i)heroku.{0,20}key.{0,20}\b([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\b'
# digest: 4b0a00483046022100c1e2dde5ee4069589c2fd6c561d0233db0950686434c514a5f4a0bb32e7a25c9022100de2ce13fe01089b37663f6f67ad3d288b41dce4512d2b92629059d564a6958bd:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "file/keys/heroku-key.yaml"

View on Github