Skip to content

Google Places Photo API Test

ID: api-googleplacesphoto

Severity: info

Author: zzeitlin

Tags: token-spray,google,places,photo

id: api-googleplacesphoto
info:
name: Google Places Photo API Test
author: zzeitlin
severity: info
metadata:
max-request: 1
tags: token-spray,google,places,photo
self-contained: true
http:
- method: GET
path:
- "https://maps.googleapis.com/maps/api/place/photo?maxwidth=400&photoreference=CnRtAAAATLZNl354RwP_9UKbQ_5Psy40texXePv4oAlgP4qNEkdIrkyse7rPXYGd9D_Uj1rVsQdWT4oRz4QrYAJNpFX7rzqqMlZw2h2E2y5IKMUZ7ouD_SlcHxYq1yL4KbKUv3qtWgTK0A6QbGh87GB3sscrHRIQiG2RrmU_jF4tENr9wGS_YxoUSSDrYjWmrNfeEHSGSc3FyhNLlBU&key={{token}}"
matchers:
- type: status
status:
- 302
# digest: 4b0a00483046022100b43edf104f43eec1db8afd98ddc3fa4483f7bdd6539ef31fa4f794f923dbfbd9022100b57191dcfa5cdd8338f6efedd45e2e3f9bcb1e40686ed603252e655eac77d978:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/token-spray/google-placesphoto.yaml"

View on Github