Skip to content

TinyPNG API Test

ID: api-tinypng

Severity: info

Author: zzeitlin

Tags: token-spray,tinypng

id: api-tinypng
info:
name: TinyPNG API Test
author: zzeitlin
severity: info
reference:
- https://tinypng.com/developers
metadata:
max-request: 1
tags: token-spray,tinypng
self-contained: true
http:
- method: POST
path:
- "https://api.tinify.com/shrink"
headers:
Authorization: Basic {{base64('api:' + token)}}
matchers:
- type: word
part: header
words:
- 'Compression-Count'
- 'compression-count'
condition: or
# digest: 4a0a0047304502207362eb20ee2b06a66429952f2585e8a94361aedc76ab761cb5c3e8ec3b39144f022100a37d24a893862ab0334ee691908d9e247c4c59a6ae244b4de25f533a74397166:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/token-spray/api-tinypng.yaml"

View on Github