WEBDIENSTE/cariddi
1
0
Fork 0
mirror of https://github.com/edoardottt/cariddi.git synced 2026-09-12 12:47:47 +02:00
Code Issues Packages Projects Releases Wiki Activity

update secret regexes

Browse Source
This commit is contained in:
edoardottt
2022-03-30 15:30:38 +02:00
parent 72e7b6b138
commit 8bf738b982
1 changed files with 34 additions and 34 deletions
Download Patch File Download Diff File Expand all files Collapse all files
scanner/secrets.go
+34 -34
View File
@@ -85,105 +85,105 @@ func GetSecretRegexes() []Secret {
{
"Facebook Secret Key",
"Facebook Secret Key",
"(?i)(facebook|fb)(.{0,20})?(?-i)['\"][0-9a-f]{32}['\"]",
`(?i)(facebook|fb)(.{0,20})?(?-i)['\"][0-9a-f]{32}['\"]`,
[]string{"facebook.com/", "facebook.svg"},
"?",
},
{
"Facebook Client ID",
"Facebook Client ID",
"(?i)(facebook|fb)(.{0,20})?['\"][0-9]{13,17}['\"]",
`(?i)(facebook|fb)(.{0,20})?['\"][0-9]{13,17}['\"]`,
[]string{"facebook.com/", "facebook.svg"},
"?",
},
{
"Cloudinary Basic Auth",
"Cloudinary Basic Auth",
"cloudinary://[0-9]{15}:[0-9A-Za-z\\-_]+@[0-9A-Za-z\\-_]+",
`cloudinary://[0-9]{15}:[0-9A-Za-z\\-_]+@[0-9A-Za-z\\-_]+`,
[]string{},
"?",
},
{
"Firebase Database",
"Firebase Database",
"([a-z0-9.-]+\\.firebaseio\\.com|[a-z0-9.-]+\\.firebaseapp\\.com)",
`([a-z0-9.-]+\.firebaseio\.com|[a-z0-9.-]+\.firebaseapp\.com)`,
[]string{},
"?",
},
{
"Twitter Secret Key",
"Twitter Secret Key",
"(?i)twitter(.{0,20})?[0-9a-z]{35,44}",
`(?i)twitter(.{0,20})?[0-9a-z]{35,44}`,
[]string{},
"?",
},
{
"Twitter Client ID",
"Twitter Client ID",
"(?i)twitter(.{0,20})?[0-9a-z]{18,25}",
`(?i)twitter(.{0,20})?[0-9a-z]{18,25}`,
[]string{},
"?",
},
{
"Github Personal Access Token",
"Github Personal Access Token",
"ghp_[0-9a-zA-Z]{36}",
`ghp_[0-9a-zA-Z]{36}`,
[]string{},
"?",
},
{
"Github OAuth Access Token",
"Github OAuth Access Token",
"gho_[0-9a-zA-Z]{36}",
`gho_[0-9a-zA-Z]{36}`,
[]string{},
"?",
},
{
"Github App Token",
"Github App Token",
"(ghu|ghs)_[0-9a-zA-Z]{36}",
`(ghu|ghs)_[0-9a-zA-Z]{36}`,
[]string{},
"?",
},
{
"Github Refresh Token",
"Github Refresh Token",
"ghr_[0-9a-zA-Z]{76}",
`ghr_[0-9a-zA-Z]{76}`,
[]string{},
"?",
},
{
"LinkedIn Client ID",
"LinkedIn Client ID",
"(?i)linkedin(.{0,20})?(?-i)[0-9a-z]{12}",
`(?i)linkedin(.{0,20})?(?-i)[0-9a-z]{12}`,
[]string{"linkedin.com/", "linkedin.svg"},
"?",
},
{
"LinkedIn Secret Key",
"LinkedIn Secret Key",
"(?i)linkedin(.{0,20})?[0-9a-z]{16}",
`(?i)linkedin(.{0,20})?[0-9a-z]{16}`,
[]string{"linkedin.com/", "linkedin.svg"},
"?",
},
{
"Slack",
"Slack",
"xox[baprs]-([0-9a-zA-Z]{10,48})?",
`xox[baprs]-([0-9a-zA-Z]{10,48})?`,
[]string{},
"?",
},
{
"Asymmetric Private Key",
"Asymmetric Private Key",
"-----BEGIN ((EC|PGP|DSA|RSA|OPENSSH) )?PRIVATE KEY( BLOCK)?-----",
`-----BEGIN ((EC|PGP|DSA|RSA|OPENSSH) )?PRIVATE KEY( BLOCK)?-----`,
[]string{},
"?",
},
{
"Google API key",
"Google API key",
"AIza[0-9A-Za-z\\-_]{35}",
`AIza[0-9A-Za-z\\-_]{35}`,
[]string{},
"?",
},
@@ -197,28 +197,28 @@ func GetSecretRegexes() []Secret {
{
"Heroku API key",
"Heroku API key",
"(?i)heroku(.{0,20})?[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}",
`(?i)heroku(.{0,20})?[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}`,
[]string{},
"?",
},
{
"MailChimp API key",
"MailChimp API key",
"[0-9a-f]{32}-us[0-9]{1,2}",
`[0-9a-f]{32}-us[0-9]{1,2}`,
[]string{},
"?",
},
{
"Mailgun API key",
"Mailgun API key",
"key-[0-9a-zA-Z]{32}",
`key\-[0-9a-zA-Z]{32}`,
[]string{},
"?",
},
{
"Pictatic API Key",
"Pictatic API Key",
"sk_live_[0-9a-z]{32}",
`sk\_live\_[0-9a-z]{32}`,
[]string{},
"?",
},
@@ -232,7 +232,7 @@ func GetSecretRegexes() []Secret {
{
"Picatic API key",
"Picatic API key",
"sk_live_[0-9a-z]{32}",
`sk\_live\_[0-9a-z]{32}`,
[]string{},
"?",
},
@@ -246,35 +246,35 @@ func GetSecretRegexes() []Secret {
{
"Slack Webhook",
"Slack Webhook",
"https://hooks.slack.com/services/T[a-zA-Z0-9_]{8}/B[a-zA-Z0-9_]{8,12}/[a-zA-Z0-9_]{24}",
`https\:\/\/hooks\.slack\.com\/services\/T[a-zA-Z0-9_]{8}/B[a-zA-Z0-9_]{8,12}/[a-zA-Z0-9_]{24}`,
[]string{},
"?",
},
{
"Stripe API key",
"Stripe API key",
"(?i)stripe(.{0,20})?[sr]k_live_[0-9a-zA-Z]{24}",
`(?i)stripe(.{0,20})?[sr]k_live_[0-9a-zA-Z]{24}`,
[]string{},
"?",
},
{
"Square access token",
"Square access token",
`sq0atp-[0-9A-Za-z\-_]{22}`,
`sq0atp\-[0-9A-Za-z\-_]{22}`,
[]string{},
"?",
},
{
"Square OAuth secret",
"Square OAuth secret",
"sq0csp-[0-9A-Za-z\\-_]{43}",
`sq0csp\-[0-9A-Za-z\\-_]{43}`,
[]string{},
"?",
},
{
"Twilio API key",
"Twilio API key",
"(?i)twilio(.{0,20})?SK[0-9a-f]{32}",
`(?i)twilio(.{0,20})?SK[0-9a-f]{32}`,
[]string{},
"?",
},
@@ -288,51 +288,51 @@ func GetSecretRegexes() []Secret {
{
"Shopify shared secret",
"Shopify shared secret",
"shpss_[a-fA-F0-9]{32}",
`shpss\_[a-fA-F0-9]{32}`,
[]string{},
"?",
},
{
"Shopify access token",
"Shopify access token",
"shpat_[a-fA-F0-9]{32}",
`shpat\_[a-fA-F0-9]{32}`,
[]string{},
"?",
},
{
"Shopify custom app access token",
"Shopify custom app access token",
"shpca_[a-fA-F0-9]{32}",
`shpca\_[a-fA-F0-9]{32}`,
[]string{},
"?",
},
{
"Shopify private app access token",
"Shopify private app access token",
"shppa_[a-fA-F0-9]{32}",
`shppa\_[a-fA-F0-9]{32}`,
[]string{},
"?",
},
{
"PyPI upload token",
"PyPI upload token",
"pypi-AgEIcHlwaS5vcmc[A-Za-z0-9-_]{50,1000}",
`pypi\-AgEIcHlwaS5vcmc[A-Za-z0-9-_]{50,1000}`,
[]string{},
"?",
},
{
"Bugsnag API Key",
"Bugsnag API Key",
"(?i)(bs|bugsnag)(.{0,20})?[0-9a-f]{32}",
`(?i)(bs|bugsnag)(.{0,20})?[0-9a-f]{32}`,
[]string{},
"?",
},
{
"S3 Bucket",
"S3 Bucket",
`(?:[a-zA-Z0-9_-]+s3.amazonaws.com|[a-zA-Z0-9_.-]+amazonaws.com|` +
`[a-zA-Z0-9-\.\_]+\.s3\.amazonaws\.com|s3://[a-zA-Z0-9-\.\_]+|` +
`s3-[a-zA-Z0-9-\.\_\/]+|s3.amazonaws.com/[a-zA-Z0-9-\.\_]+)`,
`(?:[a-zA-Z0-9_-]+s3\.amazonaws\.com|[a-zA-Z0-9_.-]+amazonaws\.com|` +
`[a-zA-Z0-9-\.\_]+\.s3\.amazonaws\.com|s3\:\/\/[a-zA-Z0-9-\.\_]+|` +
`s3-[a-zA-Z0-9-\.\_\/]+|s3\.amazonaws\.com/[a-zA-Z0-9-\.\_]+)`,
[]string{},
"?",
},