feat(secrets): add 5

[LloydCoder]

Adds high-signal templates for detecting leaked credentials from major Nigerian payment and betting platforms in http/secrets/:

• Paystack live/test secret keys (tinlance-paystack-secret-exposure.yaml)
• Flutterwave (Rave) secret keys (tinlance-flutterwave-secret-exposure.yaml)
• Remita merchant IDs + API keys (tinlance-remita-credentials-exposure.yaml)
• Interswitch Webpay MAC keys (tinlance-interswitch-webpay-exposure.yaml)
• SportyBet/BetKing admin tokens (tinlance-sportybet-api-exposure.yaml)

All written/tested by @LloydCoder (Tinlance). Follows TEMPLATE-CREATION-GUIDE.md. No FPs expected due to multi-matchers. Verified with nuclei -validate.

Thanks to ProjectDiscovery! 🇳🇬 #newtemplate

[LloydCoder]

All lint + CI fixed and green! @ritikchaddha
@DhiyaneshGeek
— templates are ready whenever you are
After Semgrep merge, this would be merge #2. Thank you!

[neo-by-projectdiscovery-dev]

Neo - Nuclei Template Review

No security issues found

Highlights

• Adds detection for Paystack, Flutterwave, Remita, Interswitch, and SportyBet credentials
• Templates target Nigerian fintech and betting platforms
• Uses multi-matcher approach to reduce false positives

Hardening Notes

• All regex patterns should use bounded quantifiers (e.g., {50,200} instead of {50,}) to prevent ReDoS attacks
• Consider using atomic groups (?>...) or possessive quantifiers {n,m}+ if the regex engine supports them
• Run nuclei -validate on all templates before submission to catch syntax errors
• The Paystack template has unbounded {50,} quantifier - consider bounding to {50,100} for consistency

_{Comment @neo help for available commands. · Open in Neo}

[LloydCoder]

Thank you so much @ritikchaddha @DhiyaneshGeek @projectdiscovery team!
Honored to have these Nigerian fintech detectors merged.
Happy to help with any follow-ups or more templates.
Let's keep securing the African digital space together! 🇳🇬🙌