---
id: 9334
title: "Token Spray - Introduction to self-contained template"
source_domain: projectdiscovery.io
source_url: "https://projectdiscovery.io/blog/nuclei-v2-5-3-release"
published_at: "2021-10-22T18:00:15Z"
tags: ["bug-bounty"]
phying_url: "https://phying.com/item/9334"
lang: en
---

# Token Spray - Introduction to self-contained template

## Summary

We search for secret leaks in a variety of places including GitHub, JS files, HTTP replies, source code, and other places. Once we've identified these keys, the next question is: what service does this key belong to, and is it valid? Answers to those questions determines the severity of the revealed token. Found a hardcoded client ID and client secret in some frontend. Now what? — jub0bs (@jub0bs) October 3, 2021 Keyhacks is a great project that provides valid examples of API requests fo

## Intelligence Metadata

- **Sources:** projectdiscovery.io
- **Published:** 2021-10-22T18:00:15Z
- **Original:** https://projectdiscovery.io/blog/nuclei-v2-5-3-release
- **Phying News:** https://phying.com/item/9334