targets / zebra.com / findings

Findings: zebra.com

API endpoints and secrets extracted from JavaScript files via jsluice, TruffleHog, and regex.

40
endpoints
0
secrets
0
src maps
2
sensitive
0
dom sinks
0
graphql
35
jsluice
5
regex
0
high conf
11
domains
0
guids

sensitive patterns (2)

debug_flag o.src = "https://storage.googleapis.com/rscec/ec/" + e + (r ? "-rsdev" : "") + ".js", 066gp.rav.zebra.com L176 
                r = "true" === window.localStorage.getItem("rsecdev"), (o = document.createElement(
                    "script")).type = "text/javascript", o.async = !0,
                o.src = "https://storage.googleapis.com/rscec/ec/" + e + (r ? "-rsdev" : "") + ".js",
                o.onload = function() {
                    C("%cEventcode loaded for token: " + e + (r ? " (DEV)" : " (PROD)"),
https://stripes.zebra.com/site.js
debug_flag "https://storage.googleapis.com/ringside/config/" + t + "-b1.js", !0), 066gp.rav.zebra.com L187 
                n = new XMLHttpRequest;
            n.open("GET",
                    "https://storage.googleapis.com/ringside/config/" + t + "-b1.js", !0),
                n.onload = function(e) {
                    4 === n.readyState && (200 === n.status ? (z = !0, v = JSON.parse(
https://stripes.zebra.com/site.js

extracted domains (11)

platform.cloud.coveo.com 066gp.rav.zebra.com
zebra.service-now.com 066gp.rav.zebra.com
storage.googleapis.com 066gp.rav.zebra.com
www-cs-students.stanford.edu 066gp.rav.zebra.com
kjur.github.com 066gp.rav.zebra.com
kjur.github.io 066gp.rav.zebra.com
popper.js.org 066gp.rav.zebra.com
core.wcm.components.commons.site 066gp.rav.zebra.com
acrobatservices.adobe.com 066gp.rav.zebra.com
www-cs-students.stanford.edu 066gp.rav.zebra.com
hm.baidu.com 066gp.rav.zebra.com
platform.cloud.coveo.com zebra.service-now.com storage.googleapis.com www-cs-students.stanford.edu kjur.github.com kjur.github.io popper.js.org core.wcm.components.commons.site acrobatservices.adobe.com www-cs-students.stanford.edu hm.baidu.com

api endpoints (40)

GET
/content/servlet/marketing/cookie-consent-i18n.i18n.json
0.8
jsluice
full url: /content/servlet/marketing/cookie-consent-i18n.i18n.json
method: GET
subdomain: 066gp.rav.zebra.com
confidence: 0.8
detected by: jsluice (AST parsing)
discovered: 6 hours, 56 minutes ago
try: curl -sk "https://066gp.rav.zebra.com/content/servlet/marketing/cookie-consent-i18n.i18n.json"
GET
popper.js
0.8
jsluice
full url: popper.js
method: GET
subdomain: 066gp.rav.zebra.com
confidence: 0.8
detected by: jsluice (AST parsing)
discovered: 6 hours, 56 minutes ago
try: curl -sk "https://066gp.rav.zebra.compopper.js"
GET
https://www.zebra.com/etc.clientlibs/zebra-web/clientlibs/clientlib-cookie-consent-cdn
0.8
jsluice
full url: https://www.zebra.com/etc.clientlibs/zebra-web/clientlibs/clientlib-cookie-consent-cdn
method: GET
subdomain: 066gp.rav.zebra.com
confidence: 0.8
detected by: jsluice (AST parsing)
discovered: 6 hours, 56 minutes ago
try: curl -sk "https://066gp.rav.zebra.comhttps://www.zebra.com/etc.clientlibs/zebra-web/clientlibs/clientlib-cookie-consent-cdn"
GET
-b1.js
0.8
jsluice
full url: -b1.js
method: GET
subdomain: 066gp.rav.zebra.com
confidence: 0.8
detected by: jsluice (AST parsing)
discovered: 6 hours, 57 minutes ago
try: curl -sk "https://066gp.rav.zebra.com-b1.js"
GET
https://storage.googleapis.com/ringside/config/EXPR-b1.js
0.8
jsluice
full url: https://storage.googleapis.com/ringside/config/EXPR-b1.js
method: GET
subdomain: 066gp.rav.zebra.com
confidence: 0.8
detected by: jsluice (AST parsing)
discovered: 6 hours, 57 minutes ago
try: curl -sk "https://066gp.rav.zebra.comhttps://storage.googleapis.com/ringside/config/EXPR-b1.js"
GET
https://storage.googleapis.com/rscec/ec/
0.8
jsluice
full url: https://storage.googleapis.com/rscec/ec/
method: GET
subdomain: 066gp.rav.zebra.com
confidence: 0.8
detected by: jsluice (AST parsing)
discovered: 6 hours, 57 minutes ago
try: curl -sk "https://066gp.rav.zebra.comhttps://storage.googleapis.com/rscec/ec/"
GET
https://storage.googleapis.com/rscec/ec/EXPREXPR.js
0.8
jsluice
full url: https://storage.googleapis.com/rscec/ec/EXPREXPR.js
method: GET
subdomain: 066gp.rav.zebra.com
confidence: 0.8
detected by: jsluice (AST parsing)
discovered: 6 hours, 57 minutes ago
try: curl -sk "https://066gp.rav.zebra.comhttps://storage.googleapis.com/rscec/ec/EXPREXPR.js"
GET
https://acrobatservices.adobe.com/view-sdk/viewer.js
0.8
jsluice
full url: https://acrobatservices.adobe.com/view-sdk/viewer.js
method: GET
subdomain: 066gp.rav.zebra.com
confidence: 0.8
detected by: jsluice (AST parsing)
discovered: 6 hours, 57 minutes ago
try: curl -sk "https://066gp.rav.zebra.comhttps://acrobatservices.adobe.com/view-sdk/viewer.js"
GET
/la/es/
0.8
jsluice
full url: /la/es/
method: GET
subdomain: 066gp.rav.zebra.com
confidence: 0.8
detected by: jsluice (AST parsing)
discovered: 6 hours, 57 minutes ago
try: curl -sk "https://066gp.rav.zebra.com/la/es/"
GET
/us/en/
0.8
jsluice
full url: /us/en/
method: GET
subdomain: 066gp.rav.zebra.com
confidence: 0.8
detected by: jsluice (AST parsing)
discovered: 6 hours, 57 minutes ago
try: curl -sk "https://066gp.rav.zebra.com/us/en/"
GET
https://platform.cloud.coveo.com
0.8
jsluice
full url: https://platform.cloud.coveo.com
method: GET
subdomain: 066gp.rav.zebra.com
confidence: 0.8
detected by: jsluice (AST parsing)
discovered: 6 hours, 57 minutes ago
try: curl -sk "https://066gp.rav.zebra.comhttps://platform.cloud.coveo.com"
GET
https://zebra.service-now.com/pwd/passwd_reset.do
0.8
jsluice
full url: https://zebra.service-now.com/pwd/passwd_reset.do
method: GET
subdomain: 066gp.rav.zebra.com
confidence: 0.8
detected by: jsluice (AST parsing)
discovered: 6 hours, 57 minutes ago
try: curl -sk "https://066gp.rav.zebra.comhttps://zebra.service-now.com/pwd/passwd_reset.do"
GET
idp/startSSO.ping?PartnerSpId=zebra&
0.8
jsluice
full url: idp/startSSO.ping?PartnerSpId=zebra&
method: GET
subdomain: 066gp.rav.zebra.com
confidence: 0.8
detected by: jsluice (AST parsing)
discovered: 6 hours, 57 minutes ago
try: curl -sk "https://066gp.rav.zebra.comidp/startSSO.ping?PartnerSpId=zebra&"
GET
idp/startSSO.ping?PartnerSpId=zebra&pageinfo=changepassword&
0.8
jsluice
full url: idp/startSSO.ping?PartnerSpId=zebra&pageinfo=changepassword&
method: GET
subdomain: 066gp.rav.zebra.com
confidence: 0.8
detected by: jsluice (AST parsing)
discovered: 6 hours, 57 minutes ago
try: curl -sk "https://066gp.rav.zebra.comidp/startSSO.ping?PartnerSpId=zebra&pageinfo=changepassword&"
GET
/products/referral
0.8
jsluice
full url: /products/referral
method: GET
subdomain: 066gp.rav.zebra.com
confidence: 0.8
detected by: jsluice (AST parsing)
discovered: 6 hours, 57 minutes ago
try: curl -sk "https://066gp.rav.zebra.com/products/referral"
GET
/content/servlet/reflexis/currentuserdetails
0.8
jsluice
full url: /content/servlet/reflexis/currentuserdetails
method: GET
subdomain: 066gp.rav.zebra.com
confidence: 0.8
detected by: jsluice (AST parsing)
discovered: 6 hours, 57 minutes ago
try: curl -sk "https://066gp.rav.zebra.com/content/servlet/reflexis/currentuserdetails"
GET
https://hm.baidu.com/hm.js?71f1f6e4ac21487a8e080ce755aeebb6
0.8
jsluice
full url: https://hm.baidu.com/hm.js?71f1f6e4ac21487a8e080ce755aeebb6
method: GET
subdomain: 066gp.rav.zebra.com
confidence: 0.8
detected by: jsluice (AST parsing)
discovered: 6 hours, 57 minutes ago
try: curl -sk "https://066gp.rav.zebra.comhttps://hm.baidu.com/hm.js?71f1f6e4ac21487a8e080ce755aeebb6"
GET
www.zebra.cn/cn/zh.html
0.8
jsluice
full url: www.zebra.cn/cn/zh.html
method: GET
subdomain: 066gp.rav.zebra.com
confidence: 0.8
detected by: jsluice (AST parsing)
discovered: 6 hours, 57 minutes ago
try: curl -sk "https://066gp.rav.zebra.comwww.zebra.cn/cn/zh.html"
GET
/content/experience-fragments
0.8
jsluice
full url: /content/experience-fragments
method: GET
subdomain: 066gp.rav.zebra.com
confidence: 0.8
detected by: jsluice (AST parsing)
discovered: 6 hours, 57 minutes ago
try: curl -sk "https://066gp.rav.zebra.com/content/experience-fragments"
GET
/libs/granite/csrf/token.json
0.8
jsluice
full url: /libs/granite/csrf/token.json
method: GET
subdomain: 066gp.rav.zebra.com
confidence: 0.8
detected by: jsluice (AST parsing)
discovered: 6 hours, 57 minutes ago
try: curl -sk "https://066gp.rav.zebra.com/libs/granite/csrf/token.json"
GET
/rum-standalone.js
0.8
jsluice
full url: /rum-standalone.js
method: GET
subdomain: 066gp.rav.zebra.com
confidence: 0.8
detected by: jsluice (AST parsing)
discovered: 6 hours, 57 minutes ago
try: curl -sk "https://066gp.rav.zebra.com/rum-standalone.js"
GET
https://www.zebra.com/tr/tr/userreg/register.html?
0.8
jsluice
full url: https://www.zebra.com/tr/tr/userreg/register.html?
method: GET
subdomain: 066gp.rav.zebra.com
confidence: 0.8
detected by: jsluice (AST parsing)
discovered: 6 hours, 57 minutes ago
try: curl -sk "https://066gp.rav.zebra.comhttps://www.zebra.com/tr/tr/userreg/register.html?"
GET
https://www.zebra.com/la/es/userreg/register.html?
0.8
jsluice
full url: https://www.zebra.com/la/es/userreg/register.html?
method: GET
subdomain: 066gp.rav.zebra.com
confidence: 0.8
detected by: jsluice (AST parsing)
discovered: 6 hours, 57 minutes ago
try: curl -sk "https://066gp.rav.zebra.comhttps://www.zebra.com/la/es/userreg/register.html?"
GET
https://www.zebra.com/es/es/userreg/register.html?
0.8
jsluice
full url: https://www.zebra.com/es/es/userreg/register.html?
method: GET
subdomain: 066gp.rav.zebra.com
confidence: 0.8
detected by: jsluice (AST parsing)
discovered: 6 hours, 57 minutes ago
try: curl -sk "https://066gp.rav.zebra.comhttps://www.zebra.com/es/es/userreg/register.html?"
GET
https://www.zebra.com/br/pt/userreg/register.html?
0.8
jsluice
full url: https://www.zebra.com/br/pt/userreg/register.html?
method: GET
subdomain: 066gp.rav.zebra.com
confidence: 0.8
detected by: jsluice (AST parsing)
discovered: 6 hours, 57 minutes ago
try: curl -sk "https://066gp.rav.zebra.comhttps://www.zebra.com/br/pt/userreg/register.html?"
GET
https://www.zebra.com/pl/pl/userreg/register.html?
0.8
jsluice
full url: https://www.zebra.com/pl/pl/userreg/register.html?
method: GET
subdomain: 066gp.rav.zebra.com
confidence: 0.8
detected by: jsluice (AST parsing)
discovered: 6 hours, 57 minutes ago
try: curl -sk "https://066gp.rav.zebra.comhttps://www.zebra.com/pl/pl/userreg/register.html?"
GET
https://www.zebra.com/kr/ko/userreg/register.html?
0.8
jsluice
full url: https://www.zebra.com/kr/ko/userreg/register.html?
method: GET
subdomain: 066gp.rav.zebra.com
confidence: 0.8
detected by: jsluice (AST parsing)
discovered: 6 hours, 57 minutes ago
try: curl -sk "https://066gp.rav.zebra.comhttps://www.zebra.com/kr/ko/userreg/register.html?"
GET
https://www.zebra.com/jp/ja/userreg/register.html?
0.8
jsluice
full url: https://www.zebra.com/jp/ja/userreg/register.html?
method: GET
subdomain: 066gp.rav.zebra.com
confidence: 0.8
detected by: jsluice (AST parsing)
discovered: 6 hours, 57 minutes ago
try: curl -sk "https://066gp.rav.zebra.comhttps://www.zebra.com/jp/ja/userreg/register.html?"
GET
https://www.zebra.com/it/it/userreg/register.html?
0.8
jsluice
full url: https://www.zebra.com/it/it/userreg/register.html?
method: GET
subdomain: 066gp.rav.zebra.com
confidence: 0.8
detected by: jsluice (AST parsing)
discovered: 6 hours, 57 minutes ago
try: curl -sk "https://066gp.rav.zebra.comhttps://www.zebra.com/it/it/userreg/register.html?"
GET
https://www.zebra.com/fr/fr/userreg/register.html?
0.8
jsluice
full url: https://www.zebra.com/fr/fr/userreg/register.html?
method: GET
subdomain: 066gp.rav.zebra.com
confidence: 0.8
detected by: jsluice (AST parsing)
discovered: 6 hours, 57 minutes ago
try: curl -sk "https://066gp.rav.zebra.comhttps://www.zebra.com/fr/fr/userreg/register.html?"
GET
https://www.zebra.com/gb/en/userreg/register.html?
0.8
jsluice
full url: https://www.zebra.com/gb/en/userreg/register.html?
method: GET
subdomain: 066gp.rav.zebra.com
confidence: 0.8
detected by: jsluice (AST parsing)
discovered: 6 hours, 57 minutes ago
try: curl -sk "https://066gp.rav.zebra.comhttps://www.zebra.com/gb/en/userreg/register.html?"
GET
https://www.zebra.com/ap/en/userreg/register.html?
0.8
jsluice
full url: https://www.zebra.com/ap/en/userreg/register.html?
method: GET
subdomain: 066gp.rav.zebra.com
confidence: 0.8
detected by: jsluice (AST parsing)
discovered: 6 hours, 57 minutes ago
try: curl -sk "https://066gp.rav.zebra.comhttps://www.zebra.com/ap/en/userreg/register.html?"
GET
https://www.zebra.com/de/de/userreg/register.html?
0.8
jsluice
full url: https://www.zebra.com/de/de/userreg/register.html?
method: GET
subdomain: 066gp.rav.zebra.com
confidence: 0.8
detected by: jsluice (AST parsing)
discovered: 6 hours, 57 minutes ago
try: curl -sk "https://066gp.rav.zebra.comhttps://www.zebra.com/de/de/userreg/register.html?"
GET
https://www.zebra.com/us/en/userreg/register.html?
0.8
jsluice
full url: https://www.zebra.com/us/en/userreg/register.html?
method: GET
subdomain: 066gp.rav.zebra.com
confidence: 0.8
detected by: jsluice (AST parsing)
discovered: 6 hours, 57 minutes ago
try: curl -sk "https://066gp.rav.zebra.comhttps://www.zebra.com/us/en/userreg/register.html?"
GET
https://www.zebra.com/cn/zh/userreg/register.html?
0.8
jsluice
full url: https://www.zebra.com/cn/zh/userreg/register.html?
method: GET
subdomain: 066gp.rav.zebra.com
confidence: 0.8
detected by: jsluice (AST parsing)
discovered: 6 hours, 57 minutes ago
try: curl -sk "https://066gp.rav.zebra.comhttps://www.zebra.com/cn/zh/userreg/register.html?"
GET
${e}/${this.config.locale}
0.8
regex
full url: ${e}/${this.config.locale}
method: GET
subdomain: 066gp.rav.zebra.com
confidence: 0.75
detected by: regex pattern
discovered: 6 hours, 56 minutes ago
try: curl -sk "https://066gp.rav.zebra.com${e}/${this.config.locale}"
GET
https://storage.googleapis.com/ringside/config/
0.8
regex
full url: https://storage.googleapis.com/ringside/config/
method: GET
subdomain: 066gp.rav.zebra.com
confidence: 0.75
detected by: regex pattern
discovered: 6 hours, 57 minutes ago
try: curl -sk "https://066gp.rav.zebra.comhttps://storage.googleapis.com/ringside/config/"
GET
/content/servlet/reflexis/reflexisUserTiles?catalogPath=/content/saas/us/en/jcr:content/root/container/background/catalogtiles_copy
0.8
regex
full url: /content/servlet/reflexis/reflexisUserTiles?catalogPath=/content/saas/us/en/jcr:content/root/container/background/catalogtiles_copy
method: GET
subdomain: 066gp.rav.zebra.com
confidence: 0.75
detected by: regex pattern
discovered: 6 hours, 57 minutes ago
try: curl -sk "https://066gp.rav.zebra.com/content/servlet/reflexis/reflexisUserTiles?catalogPath=/content/saas/us/en/jcr:content/root/container/background/catalogtiles_copy"
GET
${r}/rest/organizations/${e}/pages/${t}
0.8
regex
full url: ${r}/rest/organizations/${e}/pages/${t}
method: GET
subdomain: 066gp.rav.zebra.com
confidence: 0.75
detected by: regex pattern
discovered: 6 hours, 57 minutes ago
try: curl -sk "https://066gp.rav.zebra.com${r}/rest/organizations/${e}/pages/${t}"
GET
/content/servlet/reflexis/logout
0.8
regex
full url: /content/servlet/reflexis/logout
method: GET
subdomain: 066gp.rav.zebra.com
confidence: 0.75
detected by: regex pattern
discovered: 6 hours, 57 minutes ago
try: curl -sk "https://066gp.rav.zebra.com/content/servlet/reflexis/logout"