Google api

[thecyberneh]

What is Found dalfox Google api?

[hahwul]

Hi @thecyberneh
Dalfox basically also has passive detection based on regular expressions.
I think A value suitable for the Google api pattern was detected and appeared.

dalfox/pkg/scanning/grep.go

Line 41 in 97c9a57

"dalfox-google-api": "AIza[0-9A-Za-z-_]{35}",

Since it is marked as [G] in PoC, it can be distinguished from XSS.
If you don't want to see it, you can exclude it in the following way.

with --skip-grepping flag

$ dalfox url http://testphp.vulnweb.com/listproducts.php --skip-grepping

[ChillVibesMushroom]

so you're saying that they found a value that matches the google api pattern @hahwul I'm currently scanning a site for work