Secrets Patterns (Rules)
ID: secrets-patterns-rules
Severity: info
Author: dwisiswant0
Tags: global-matchers,exposure,token,key,api,secret,password,generic
Description
Section titled “Description”YAML Source
Section titled “YAML Source”id: secrets-patterns-rules
info: name: Secrets Patterns (Rules) author: dwisiswant0 reference: - https://github.com/mazen160/secrets-patterns-db # db/rules-stable.yml (151eaf659f3bcac3f81161808765eaa91045f2c7) severity: info tags: global-matchers,exposure,token,key,api,secret,password,generic
http: - global-matchers: true extractors: - type: regex name: aws_api_key regex: - AKIA[0-9A-Z]{16} part: body - type: regex name: aws_arn regex: - arn:aws:[a-z0-9-]+:[a-z]{2}-[a-z]+-[0-9]+:[0-9]+:.+ part: body - type: regex name: aws_access_key_id_value regex: - (A3T[A-Z0-9]|AKIA|AGPA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16} part: body - type: regex name: aws_appsync_graphql_key regex: - da2-[a-z0-9]{26} part: body - type: regex name: aws_mws_key regex: - >- amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12} part: body - type: regex name: aws_rds regex: - '[0-9a-z._-]+.rds.amazonaws.com' part: body - type: regex name: aws_s3_bucket regex: - s3://[0-9a-z._/-]+ part: body - type: regex name: aws_cred_file_info regex: - (aws_access_key_id|aws_secret_access_key) part: body - type: regex name: abbysale regex: - (?:abbysale).{0,40}\b([a-z0-9A-Z]{40})\b part: body - type: regex name: abstract regex: - (?:abstract).{0,40}\b([0-9a-z]{32})\b part: body - type: regex name: abuseipdb regex: - (?:abuseipdb).{0,40}\b([a-z0-9]{80})\b part: body - type: regex name: accuweather regex: - (?:accuweather).{0,40}([a-z0-9A-Z\%]{35})\b part: body - type: regex name: adafruitio regex: - \b(aio\_[a-zA-Z0-9]{28})\b part: body - type: regex name: adobeio_1 regex: - (?:adobe).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: adzuna_1 regex: - (?:adzuna).{0,40}\b([a-z0-9]{8})\b part: body - type: regex name: adzuna_2 regex: - (?:adzuna).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: aeroworkflow_1 regex: - (?:aeroworkflow).{0,40}\b([0-9]{1,})\b part: body - type: regex name: aeroworkflow_2 regex: - (?:aeroworkflow).{0,40}\b([a-zA-Z0-9^!]{20})\b part: body - type: regex name: agora regex: - (?:agora).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: airbrakeprojectkey_1 regex: - (?:airbrake).{0,40}\b([0-9]{6})\b part: body - type: regex name: airbrakeprojectkey_2 regex: - (?:airbrake).{0,40}\b([a-zA-Z-0-9]{32})\b part: body - type: regex name: airbrakeuserkey regex: - (?:airbrake).{0,40}\b([a-zA-Z-0-9]{40})\b part: body - type: regex name: airship regex: - (?:airship).{0,40}\b([0-9Aa-zA-Z]{91})\b part: body - type: regex name: airvisual regex: - (?:airvisual).{0,40}\b([a-z0-9-]{36})\b part: body - type: regex name: alconost regex: - (?:alconost).{0,40}\b([0-9Aa-z]{32})\b part: body - type: regex name: alegra_1 regex: - (?:alegra).{0,40}\b([a-z0-9-]{20})\b part: body - type: regex name: alegra_2 regex: - (?:alegra).{0,40}\b([a-zA-Z0-9.-@]{25,30})\b part: body - type: regex name: aletheiaapi regex: - (?:aletheiaapi).{0,40}\b([A-Z0-9]{32})\b part: body - type: regex name: alibaba_2 regex: - \b(LTAI[a-zA-Z0-9]{17,21})[\"' ;\s]* part: body - type: regex name: alienvault regex: - (?:alienvault).{0,40}\b([a-z0-9]{64})\b part: body - type: regex name: allsports regex: - (?:allsports).{0,40}\b([0-9a-z]{64})\b part: body - type: regex name: amadeus_1 regex: - (?:amadeus).{0,40}\b([0-9A-Za-z]{32})\b part: body - type: regex name: amadeus_2 regex: - (?:amadeus).{0,40}\b([0-9A-Za-z]{16})\b part: body - type: regex name: ambee regex: - (?:ambee).{0,40}\b([0-9a-f]{64})\b part: body - type: regex name: amplitudeapikey regex: - (?:amplitude).{0,40}\b([a-f0-9]{32}) part: body - type: regex name: apacta regex: - (?:apacta).{0,40}\b([a-z0-9-]{36})\b part: body - type: regex name: api2cart regex: - (?:api2cart).{0,40}\b([0-9a-f]{32})\b part: body - type: regex name: apideck_1 regex: - \b(sk_live_[a-z0-9A-Z-]{93})\b part: body - type: regex name: apideck_2 regex: - (?:apideck).{0,40}\b([a-z0-9A-Z]{40})\b part: body - type: regex name: apiflash_1 regex: - (?:apiflash).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: apiflash_2 regex: - (?:apiflash).{0,40}\b([a-zA-Z0-9\S]{21,30})\b part: body - type: regex name: apifonica regex: - >- (?:apifonica).{0,40}\b([0-9a-z]{11}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{12})\b part: body - type: regex name: apify regex: - \b(apify\_api\_[a-zA-Z-0-9]{36})\b part: body - type: regex name: apimatic_1 regex: - (?:apimatic).{0,40}\b([a-z0-9-\S]{8,32})\b part: body - type: regex name: apimatic_2 regex: - >- (?:apimatic).{0,40}\b([a-zA-Z0-9]{3,20}@[a-zA-Z0-9]{2,12}.[a-zA-Z0-9]{2,5})\b part: body - type: regex name: apiscience regex: - (?:apiscience).{0,40}\b([a-bA-Z0-9\S]{22})\b part: body - type: regex name: apollo regex: - (?:apollo).{0,40}\b([a-zA-Z0-9]{22})\b part: body - type: regex name: appcues_1 regex: - (?:appcues).{0,40}\b([0-9]{5})\b part: body - type: regex name: appcues_2 regex: - (?:appcues).{0,40}\b([a-z0-9-]{36})\b part: body - type: regex name: appcues_3 regex: - (?:appcues).{0,40}\b([a-z0-9-]{39})\b part: body - type: regex name: appfollow regex: - (?:appfollow).{0,40}\b([0-9A-Za-z]{20})\b part: body - type: regex name: appsynergy regex: - (?:appsynergy).{0,40}\b([a-z0-9]{64})\b part: body - type: regex name: apptivo_1 regex: - (?:apptivo).{0,40}\b([a-z0-9-]{36})\b part: body - type: regex name: apptivo_2 regex: - (?:apptivo).{0,40}\b([a-zA-Z0-9-]{32})\b part: body - type: regex name: artifactory_2 regex: - \b([A-Za-z0-9](?:[A-Za-z0-9\-]{0,61}[A-Za-z0-9])\.jfrog\.io) part: body - type: regex name: artsy_1 regex: - (?:artsy).{0,40}\b([0-9a-zA-Z]{20})\b part: body - type: regex name: artsy_2 regex: - (?:artsy).{0,40}\b([0-9a-zA-Z]{32})\b part: body - type: regex name: asanaoauth regex: - (?:asana).{0,40}\b([a-z\/:0-9]{51})\b part: body - type: regex name: asanapersonalaccesstoken regex: - (?:asana).{0,40}\b([0-9]{1,}\/[0-9]{16,}:[A-Za-z0-9]{32,})\b part: body - type: regex name: assemblyai regex: - (?:assemblyai).{0,40}\b([0-9a-z]{32})\b part: body - type: regex name: asymmetric_private_key regex: - '-----BEGIN ((EC|PGP|DSA|RSA|OPENSSH) )?PRIVATE KEY( BLOCK)?-----' part: body - type: regex name: audd regex: - (?:audd).{0,40}\b([a-z0-9-]{32})\b part: body - type: regex name: auth0managementapitoken regex: - (?:auth0).{0,40}\b(ey[a-zA-Z0-9._-]+)\b part: body - type: regex name: autodesk_1 regex: - (?:autodesk).{0,40}\b([0-9A-Za-z]{32})\b part: body - type: regex name: autodesk_2 regex: - (?:autodesk).{0,40}\b([0-9A-Za-z]{16})\b part: body - type: regex name: autoklose regex: - (?:autoklose).{0,40}\b([a-zA-Z0-9-]{32})\b part: body - type: regex name: autopilot regex: - (?:autopilot).{0,40}\b([0-9a-f]{32})\b part: body - type: regex name: avazapersonalaccesstoken regex: - (?:avaza).{0,40}\b([0-9]+-[0-9a-f]{40})\b part: body - type: regex name: aviationstack regex: - (?:aviationstack).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: aws_1 regex: - \b((?:AKIA|ABIA|ACCA|ASIA)[0-9A-Z]{16})\b part: body - type: regex name: axonaut regex: - (?:axonaut).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: aylien_1 regex: - (?:aylien).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: aylien_2 regex: - (?:aylien).{0,40}\b([a-z0-9]{8})\b part: body - type: regex name: ayrshare regex: - >- (?:ayrshare).{0,40}\b([A-Z]{7}-[A-Z0-9]{7}-[A-Z0-9]{7}-[A-Z0-9]{7})\b part: body - type: regex name: bannerbear regex: - (?:bannerbear).{0,40}\b([0-9a-zA-Z]{22}tt)\b part: body - type: regex name: baremetrics regex: - (?:baremetrics).{0,40}\b([a-zA-Z0-9_]{25})\b part: body - type: regex name: baseapiio regex: - >- (?:baseapi|base-api).{0,40}\b([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\b part: body - type: regex name: beamer regex: - (?:beamer).{0,40}\b([a-zA-Z0-9_+/]{45}=) part: body - type: regex name: beebole regex: - (?:beebole).{0,40}\b([0-9a-z]{40})\b part: body - type: regex name: besttime regex: - (?:besttime).{0,40}\b([0-9A-Za-z_]{36})\b part: body - type: regex name: billomat_1 regex: - (?:billomat).{0,40}\b([0-9a-z]{1,})\b part: body - type: regex name: billomat_2 regex: - (?:billomat).{0,40}\b([0-9a-z]{32})\b part: body - type: regex name: bitbar regex: - (?:bitbar).{0,40}\b([0-9a-z]{32})\b part: body - type: regex name: bitcoinaverage regex: - (?:bitcoinaverage).{0,40}\b([a-zA-Z0-9]{43})\b part: body - type: regex name: bitfinex regex: - (?:bitfinex).{0,40}\b([A-Za-z0-9_-]{43})\b part: body - type: regex name: bitly_secret_key regex: - R_[0-9a-f]{32} part: body - type: regex name: bitlyaccesstoken regex: - (?:bitly).{0,40}\b([a-zA-Z-0-9]{40})\b part: body - type: regex name: bitmex_1 regex: - (?:bitmex).{0,40}([ \r\n]{1}[0-9a-zA-Z\-\_]{24}[ \r\n]{1}) part: body - type: regex name: bitmex_2 regex: - (?:bitmex).{0,40}([ \r\n]{1}[0-9a-zA-Z\-\_]{48}[ \r\n]{1}) part: body - type: regex name: blablabus regex: - (?:blablabus).{0,40}\b([0-9A-Za-z]{22})\b part: body - type: regex name: blazemeter regex: - >- (?:blazemeter|runscope).{0,40}\b([0-9a-z]{8}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{12})\b part: body - type: regex name: blitapp regex: - (?:blitapp).{0,40}\b([a-zA-Z0-9_-]{39})\b part: body - type: regex name: bombbomb regex: - (?:bombbomb).{0,40}\b([a-zA-Z0-9-._]{704})\b part: body - type: regex name: boostnote regex: - (?:boostnote).{0,40}\b([0-9a-f]{64})\b part: body - type: regex name: borgbase regex: - (?:borgbase).{0,40}\b([a-zA-Z0-9/_.-]{148,152})\b part: body - type: regex name: braintree_api_key regex: - access_token$production$[0-9a-z]{16}$[0-9a-f]{32} part: body - type: regex name: brandfetch regex: - (?:brandfetch).{0,40}\b([0-9A-Za-z]{40})\b part: body - type: regex name: browshot regex: - (?:browshot).{0,40}\b([a-zA-Z-0-9]{28})\b part: body - type: regex name: buddyns regex: - (?:buddyns).{0,40}\b([0-9a-z]{40})\b part: body - type: regex name: bugherd regex: - (?:bugherd).{0,40}\b([0-9a-z]{22})\b part: body - type: regex name: bugsnag regex: - >- (?:bugsnag).{0,40}\b([0-9a-z]{8}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{12})\b part: body - type: regex name: buildkite regex: - (?:buildkite).{0,40}\b([a-z0-9]{40})\b part: body - type: regex name: bulbul regex: - (?:bulbul).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: buttercms regex: - (?:buttercms).{0,40}\b([a-z0-9]{40})\b part: body - type: regex name: caflou regex: - (?:caflou).{0,40}\b([a-bA-Z0-9\S]{155})\b part: body - type: regex name: calendarific regex: - (?:calendarific).{0,40}\b([a-z0-9]{40})\b part: body - type: regex name: calendlyapikey regex: - >- (?:calendly).{0,40}\b([a-zA-Z-0-9]{20}.[a-zA-Z-0-9]{171}.[a-zA-Z-0-9_]{43})\b part: body - type: regex name: calorieninja regex: - (?:calorieninja).{0,40}\b([0-9A-Za-z]{40})\b part: body - type: regex name: campayn regex: - (?:campayn).{0,40}\b([a-z0-9]{64})\b part: body - type: regex name: cannyio regex: - >- (?:canny).{0,40}\b([a-z0-9]{8}-[a-z0-9]{4}-[a-z0-9]{4}-[0-9]{4}-[a-z0-9]{12})\b part: body - type: regex name: capsulecrm regex: - (?:capsulecrm).{0,40}\b([a-zA-Z0-9-._+=]{64})\b part: body - type: regex name: captaindata_1 regex: - >- (?:captaindata).{0,40}\b([0-9a-f]{8}\-[0-9a-f]{4}\-[0-9a-f]{4}\-[0-9a-f]{4}\-[0-9a-f]{12})\b part: body - type: regex name: captaindata_2 regex: - (?:captaindata).{0,40}\b([0-9a-f]{64})\b part: body - type: regex name: carboninterface regex: - (?:carboninterface).{0,40}\b([a-zA-Z0-9]{21})\b part: body - type: regex name: cashboard_1 regex: - >- (?:cashboard).{0,40}\b([0-9A-Z]{3}-[0-9A-Z]{3}-[0-9A-Z]{3}-[0-9A-Z]{3})\b part: body - type: regex name: cashboard_2 regex: - (?:cashboard).{0,40}\b([0-9a-z]{1,})\b part: body - type: regex name: caspio_1 regex: - (?:caspio).{0,40}\b([a-z0-9]{8})\b part: body - type: regex name: caspio_2 regex: - (?:caspio).{0,40}\b([a-z0-9]{50})\b part: body - type: regex name: censys_1 regex: - (?:censys).{0,40}\b([a-zA-Z0-9]{32})\b part: body - type: regex name: censys_2 regex: - (?:censys).{0,40}\b([a-z0-9-]{36})\b part: body - type: regex name: centralstationcrm regex: - (?:centralstation).{0,40}\b([a-z0-9]{30})\b part: body - type: regex name: cexio_1 regex: - (?:cexio|cex.io).{0,40}\b([a-z]{2}[0-9]{9})\b part: body - type: regex name: cexio_2 regex: - (?:cexio|cex.io).{0,40}\b([0-9A-Za-z]{24,27})\b part: body - type: regex name: chatbot regex: - (?:chatbot).{0,40}\b([a-zA-Z0-9_]{32})\b part: body - type: regex name: chatfule regex: - (?:chatfuel).{0,40}\b([a-zA-Z0-9]{128})\b part: body - type: regex name: checio regex: - (?:checio).{0,40}\b(pk_[a-z0-9]{45})\b part: body - type: regex name: checklyhq regex: - (?:checklyhq).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: checkout_1 regex: - >- (?:checkout).{0,40}\b((sk_|sk_test_)[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})\b part: body - type: regex name: checkout_2 regex: - (?:checkout).{0,40}\b(cus_[0-9a-zA-Z]{26})\b part: body - type: regex name: checkvist_1 regex: - (?:checkvist).{0,40}\b([\w\.-]+@[\w-]+\.[\w\.-]{2,5})\b part: body - type: regex name: checkvist_2 regex: - (?:checkvist).{0,40}\b([0-9a-zA-Z]{14})\b part: body - type: regex name: cicero regex: - (?:cicero).{0,40}\b([0-9a-z]{40})\b part: body - type: regex name: clearbit regex: - (?:clearbit).{0,40}\b([0-9a-z_]{35})\b part: body - type: regex name: clickhelp_1 regex: - \b([0-9A-Za-z]{3,20}.try.clickhelp.co)\b part: body - type: regex name: clickhelp_2 regex: - (?:clickhelp).{0,40}\b([0-9A-Za-z]{24})\b part: body - type: regex name: clicksendsms_2 regex: - >- (?:sms).{0,40}\b([a-zA-Z0-9]{3,20}@[a-zA-Z0-9]{2,12}.[a-zA-Z0-9]{2,5})\b part: body - type: regex name: clickuppersonaltoken regex: - (?:clickup).{0,40}\b(pk_[0-9]{8}_[0-9A-Z]{32})\b part: body - type: regex name: cliengo regex: - >- (?:cliengo).{0,40}\b([0-9a-f]{8}\-[0-9a-f]{4}\-[0-9a-f]{4}\-[0-9a-f]{4}\-[0-9a-f]{12})\b part: body - type: regex name: clinchpad regex: - (?:clinchpad).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: clockify regex: - (?:clockify).{0,40}\b([a-zA-Z0-9]{48})\b part: body - type: regex name: clockworksms_1 regex: - (?:clockwork|textanywhere).{0,40}\b([0-9a-zA-Z]{24})\b part: body - type: regex name: clockworksms_2 regex: - (?:clockwork|textanywhere).{0,40}\b([0-9]{5})\b part: body - type: regex name: closecrm regex: - \b(api_[a-z0-9A-Z.]{45})\b part: body - type: regex name: cloudelements_1 regex: - (?:cloudelements).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: cloudelements_2 regex: - (?:cloudelements).{0,40}\b([a-zA-Z0-9]{43})\b part: body - type: regex name: cloudflarecakey regex: - (?:cloudflare).{0,40}\b(v[A-Za-z0-9._-]{173,})\b part: body - type: regex name: cloudimage regex: - (?:cloudimage).{0,40}\b([a-z0-9_]{30})\b part: body - type: regex name: cloudinary_credentials regex: - cloudinary://[0-9]+:[A-Za-z0-9\-_\.]+@[A-Za-z0-9\-_\.]+ part: body - type: regex name: cloudmersive regex: - (?:cloudmersive).{0,40}\b([a-z0-9-]{36})\b part: body - type: regex name: cloudplan regex: - (?:cloudplan).{0,40}\b([A-Z0-9-]{32})\b part: body - type: regex name: cloverly regex: - (?:cloverly).{0,40}\b([a-z0-9:_]{28})\b part: body - type: regex name: cloze_1 regex: - (?:cloze).{0,40}\b([0-9a-f]{32})\b part: body - type: regex name: cloze_2 regex: - (?:cloze).{0,40}\b([\w\.-]+@[\w-]+\.[\w\.-]{2,5})\b part: body - type: regex name: clustdoc regex: - (?:clustdoc).{0,40}\b([0-9a-zA-Z]{60})\b part: body - type: regex name: codacy regex: - (?:codacy).{0,40}\b([0-9A-Za-z]{20})\b part: body - type: regex name: coinapi regex: - (?:coinapi).{0,40}\b([A-Z0-9-]{36})\b part: body - type: regex name: coinbase regex: - (?:coinbase).{0,40}\b([a-zA-Z-0-9]{64})\b part: body - type: regex name: coinlayer regex: - (?:coinlayer).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: coinlib regex: - (?:coinlib).{0,40}\b([a-z0-9]{16})\b part: body - type: regex name: column regex: - (?:column).{0,40}\b((?:test|live)_[a-zA-Z0-9]{27})\b part: body - type: regex name: commercejs regex: - (?:commercejs).{0,40}\b([a-z0-9_]{48})\b part: body - type: regex name: commodities regex: - (?:commodities).{0,40}\b([a-zA-Z0-9]{60})\b part: body - type: regex name: companyhub_1 regex: - (?:companyhub).{0,40}\b([0-9a-zA-Z]{20})\b part: body - type: regex name: companyhub_2 regex: - (?:companyhub).{0,40}\b([a-zA-Z0-9$%^=-]{4,32})\b part: body - type: regex name: confluent_1 regex: - (?:confluent).{0,40}\b([a-zA-Z-0-9]{16})\b part: body - type: regex name: confluent_2 regex: - (?:confluent).{0,40}\b([a-zA-Z-0-9]{64})\b part: body - type: regex name: convertkit regex: - (?:convertkit).{0,40}\b([a-z0-9A-Z_]{22})\b part: body - type: regex name: convier regex: - (?:convier).{0,40}\b([0-9]{2}\|[a-zA-Z0-9]{40})\b part: body - type: regex name: copper_2 regex: - (?:copper).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: countrylayer regex: - (?:countrylayer).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: courier regex: - (?:courier).{0,40}\b(pk\_[a-zA-Z0-9]{1,}\_[a-zA-Z0-9]{28})\b part: body - type: regex name: coveralls regex: - (?:coveralls).{0,40}\b([a-zA-Z0-9-]{37})\b part: body - type: regex name: crowdin regex: - (?:crowdin).{0,40}\b([0-9A-Za-z]{80})\b part: body - type: regex name: cryptocompare regex: - (?:cryptocompare).{0,40}\b([a-z-0-9]{64})\b part: body - type: regex name: currencycloud_1 regex: - (?:currencycloud).{0,40}\b([0-9a-z]{64})\b part: body - type: regex name: currencyfreaks regex: - (?:currencyfreaks).{0,40}\b([0-9a-z]{32})\b part: body - type: regex name: currencylayer regex: - (?:currencylayer).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: currencyscoop regex: - (?:currencyscoop).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: currentsapi regex: - (?:currentsapi).{0,40}\b([a-zA-Z0-9\S]{48})\b part: body - type: regex name: customerguru_1 regex: - (?:guru).{0,40}\b([a-z0-9A-Z]{50})\b part: body - type: regex name: customerguru_2 regex: - (?:guru).{0,40}\b([a-z0-9A-Z]{30})\b part: body - type: regex name: d7network regex: - (?:d7network).{0,40}\b([a-zA-Z0-9\W\S]{23}\=) part: body - type: regex name: dailyco regex: - (?:daily).{0,40}\b([0-9a-f]{64})\b part: body - type: regex name: dandelion regex: - (?:dandelion).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: databricks regex: - dapi[a-f0-9]{32}\b part: body - type: regex name: datafire regex: - (?:datafire).{0,40}\b([a-z0-9\S]{175,190})\b part: body - type: regex name: datagov regex: - (?:data.gov).{0,40}\b([a-zA-Z0-9]{40})\b part: body - type: regex name: deepai regex: - (?:deepai).{0,40}\b([a-z0-9-]{36})\b part: body - type: regex name: deepgram regex: - (?:deepgram).{0,40}\b([0-9a-z]{40})\b part: body - type: regex name: delighted regex: - (?:delighted).{0,40}\b([a-z0-9A-Z]{32})\b part: body - type: regex name: deputy_1 regex: - \b([0-9a-z]{1,}.as.deputy.com)\b part: body - type: regex name: deputy_2 regex: - (?:deputy).{0,40}\b([0-9a-z]{32})\b part: body - type: regex name: detectlanguage regex: - (?:detectlanguage).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: dfuse regex: - \b(web\_[0-9a-z]{32})\b part: body - type: regex name: diffbot regex: - (?:diffbot).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: digitaloceantoken regex: - (?:digitalocean).{0,40}\b([A-Za-z0-9_-]{64})\b part: body - type: regex name: discord_webhook regex: - https://discordapp\.com/api/webhooks/[0-9]+/[A-Za-z0-9\-]+ part: body - type: regex name: discordbottoken_1 regex: - >- (?:discord).{0,40}\b([A-Za-z0-9_-]{24}\.[A-Za-z0-9_-]{6}\.[A-Za-z0-9_-]{27})\b part: body - type: regex name: discordbottoken_2 regex: - (?:discord).{0,40}\b([0-9]{17})\b part: body - type: regex name: discordwebhook regex: - (https:\/\/discord.com\/api\/webhooks\/[0-9]{18}\/[0-9a-zA-Z-]{68}) part: body - type: regex name: ditto regex: - >- (?:ditto).{0,40}\b([a-z0-9]{8}\-[a-z0-9]{4}\-[a-z0-9]{4}\-[a-z0-9]{4}\-[a-z0-9]{12}\.[a-z0-9]{40})\b part: body - type: regex name: dnscheck_1 regex: - (?:dnscheck).{0,40}\b([a-z0-9A-Z-]{36})\b part: body - type: regex name: dnscheck_2 regex: - (?:dnscheck).{0,40}\b([a-z0-9A-Z]{32})\b part: body - type: regex name: documo regex: - \b(ey[a-zA-Z0-9]{34}.ey[a-zA-Z0-9]{154}.[a-zA-Z0-9_-]{43})\b part: body - type: regex name: doppler regex: - \b(dp\.pt\.[a-zA-Z0-9]{43})\b part: body - type: regex name: dotmailer_1 regex: - (?:dotmailer).{0,40}\b(apiuser-[a-z0-9]{12}@apiconnector.com)\b part: body - type: regex name: dotmailer_2 regex: - (?:dotmailer).{0,40}\b([a-zA-Z0-9\S]{8,24})\b part: body - type: regex name: dovico regex: - (?:dovico).{0,40}\b([0-9a-z]{32}\.[0-9a-z]{1,}\b) part: body - type: regex name: dronahq regex: - (?:dronahq).{0,40}\b([a-z0-9]{50})\b part: body - type: regex name: droneci regex: - (?:droneci).{0,40}\b([a-zA-Z0-9]{32})\b part: body - type: regex name: dropbox regex: - \b(sl\.[A-Za-z0-9\-\_]{130,140})\b part: body - type: regex name: dwolla regex: - (?:dwolla).{0,40}\b([a-zA-Z-0-9]{50})\b part: body - type: regex name: dynalist regex: - (?:dynalist).{0,40}\b([a-zA-Z0-9-_]{128})\b part: body - type: regex name: dynatrace_token regex: - dt0[a-zA-Z]{1}[0-9]{2}\.[A-Z0-9]{24}\.[A-Z0-9]{64} part: body - type: regex name: dyspatch regex: - (?:dyspatch).{0,40}\b([A-Z0-9]{52})\b part: body - type: regex name: ec regex: - '-----BEGIN EC PRIVATE KEY-----' part: body - type: regex name: eagleeyenetworks_1 regex: - >- (?:eagleeyenetworks).{0,40}\b([a-zA-Z0-9]{3,20}@[a-zA-Z0-9]{2,12}.[a-zA-Z0-9]{2,5})\b part: body - type: regex name: eagleeyenetworks_2 regex: - (?:eagleeyenetworks).{0,40}\b([a-zA-Z0-9]{15})\b part: body - type: regex name: easyinsight_1 regex: - (?:easyinsight|easy-insight).{0,40}\b([a-zA-Z0-9]{20})\b part: body - type: regex name: easyinsight_2 regex: - (?:easyinsight|easy-insight).{0,40}\b([0-9Aa-zA-Z]{20})\b part: body - type: regex name: edamam_1 regex: - (?:edamam).{0,40}\b([0-9a-z]{32})\b part: body - type: regex name: edamam_2 regex: - (?:edamam).{0,40}\b([0-9a-z]{8})\b part: body - type: regex name: edenai regex: - >- (?:edenai).{0,40}\b([a-zA-Z0-9]{36}.[a-zA-Z0-9]{92}.[a-zA-Z0-9_]{43})\b part: body - type: regex name: eightxeight_2 regex: - (?:8x8).{0,40}\b([a-zA-Z0-9]{43})\b part: body - type: regex name: elasticemail regex: - (?:elastic).{0,40}\b([A-Za-z0-9_-]{96})\b part: body - type: regex name: enablex_1 regex: - (?:enablex).{0,40}\b([a-zA-Z0-9]{36})\b part: body - type: regex name: enablex_2 regex: - (?:enablex).{0,40}\b([a-z0-9]{24})\b part: body - type: regex name: enigma regex: - (?:enigma).{0,40}\b([a-zA-Z0-9]{40})\b part: body - type: regex name: ethplorer regex: - (?:ethplorer).{0,40}\b([a-z0-9A-Z-]{22})\b part: body - type: regex name: everhour regex: - >- (?:everhour).{0,40}\b([0-9Aa-f]{4}-[0-9a-f]{4}-[0-9a-f]{6}-[0-9a-f]{6}-[0-9a-f]{8})\b part: body - type: regex name: exchangerateapi regex: - (?:exchangerate).{0,40}\b([a-z0-9]{24})\b part: body - type: regex name: exchangeratesapi regex: - (?:exchangerates).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: facebook_access_token regex: - EAACEdEose0cBA[0-9A-Za-z]+ part: body - type: regex name: faceplusplus regex: - (?:faceplusplus).{0,40}\b([0-9a-zA-Z_-]{32})\b part: body - type: regex name: fakejson regex: - (?:fakejson).{0,40}\b([a-zA-Z0-9]{22})\b part: body - type: regex name: fastforex regex: - (?:fastforex).{0,40}\b([a-z0-9-]{28})\b part: body - type: regex name: fastlypersonaltoken regex: - (?:fastly).{0,40}\b([A-Za-z0-9_-]{32})\b part: body - type: regex name: feedier regex: - (?:feedier).{0,40}\b([a-z0-9A-Z]{32})\b part: body - type: regex name: fetchrss regex: - (?:fetchrss).{0,40}\b([0-9A-Za-z.]{40})\b part: body - type: regex name: figmapersonalaccesstoken regex: - >- (?:figma).{0,40}\b([0-9]{6}-[0-9a-z]{8}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{12})\b part: body - type: regex name: fileio regex: - (?:fileio).{0,40}\b([A-Z0-9.-]{39})\b part: body - type: regex name: finage regex: - \b(API_KEY[0-9A-Z]{32})\b part: body - type: regex name: financialmodelingprep regex: - (?:financialmodelingprep).{0,40}\b([a-zA-Z0-9]{32})\b part: body - type: regex name: findl regex: - >- (?:findl).{0,40}\b([a-z0-9]{8}\-[a-z0-9]{4}\-[a-z0-9]{4}\-[a-z0-9]{4}\-[a-z0-9]{12})\b part: body - type: regex name: finnhub regex: - (?:finnhub).{0,40}\b([0-9a-z]{20})\b part: body - type: regex name: fixerio regex: - (?:fixer).{0,40}\b([A-Za-z0-9]{32})\b part: body - type: regex name: flatio regex: - (?:flat).{0,40}\b([0-9a-z]{128})\b part: body - type: regex name: fleetbase regex: - \b(flb_live_[0-9a-zA-Z]{20})\b part: body - type: regex name: flickr regex: - (?:flickr).{0,40}\b([0-9a-z]{32})\b part: body - type: regex name: flightapi regex: - (?:flightapi).{0,40}\b([a-z0-9]{24})\b part: body - type: regex name: flightstats_1 regex: - (?:flightstats).{0,40}\b([0-9a-z]{32})\b part: body - type: regex name: flightstats_2 regex: - (?:flightstats).{0,40}\b([0-9a-z]{8})\b part: body - type: regex name: flowflu_2 regex: - (?:flowflu).{0,40}\b([a-zA-Z0-9]{51})\b part: body - type: regex name: flutterwave regex: - \b(FLWSECK-[0-9a-z]{32}-X)\b part: body - type: regex name: fmfw_1 regex: - (?:fmfw).{0,40}\b([a-zA-Z0-9-]{32})\b part: body - type: regex name: fmfw_2 regex: - (?:fmfw).{0,40}\b([a-zA-Z0-9_-]{32})\b part: body - type: regex name: formbucket regex: - >- (?:formbucket).{0,40}\b([0-9A-Za-z]{1,}.[0-9A-Za-z]{1,}\.[0-9A-Z-a-z\-_]{1,}) part: body - type: regex name: formio regex: - >- (?:formio).{0,40}\b(eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9\.[0-9A-Za-z]{310}\.[0-9A-Z-a-z\-_]{43}[ \r\n]{1}) part: body - type: regex name: foursquare regex: - (?:foursquare).{0,40}\b([0-9A-Z]{48})\b part: body - type: regex name: frameio regex: - \b(fio-u-[0-9a-zA-Z_-]{64})\b part: body - type: regex name: freshbooks_1 regex: - (?:freshbooks).{0,40}\b([0-9a-z]{64})\b part: body - type: regex name: freshbooks_2 regex: - (?:freshbooks).{0,40}\b(https://www.[0-9A-Za-z_-]{1,}.com)\b part: body - type: regex name: freshdesk_1 regex: - (?:freshdesk).{0,40}\b([0-9A-Za-z]{20})\b part: body - type: regex name: freshdesk_2 regex: - \b([0-9a-z-]{1,}.freshdesk.com)\b part: body - type: regex name: front regex: - (?:front).{0,40}\b([0-9a-zA-Z]{36}.[0-9a-zA-Z\.\-\_]{188,244})\b part: body - type: regex name: fulcrum regex: - (?:fulcrum).{0,40}\b([a-z0-9]{80})\b part: body - type: regex name: fullstory regex: - (?:fullstory).{0,40}\b([a-zA-Z-0-9/+]{88})\b part: body - type: regex name: fusebill regex: - (?:fusebill).{0,40}\b([a-zA-Z0-9]{88})\b part: body - type: regex name: fxmarket regex: - (?:fxmarket).{0,40}\b([0-9Aa-zA-Z-_=]{20})\b part: body - type: regex name: gcp regex: - \{[^{]+auth_provider_x509_cert_url[^}]+\} part: body - type: regex name: geckoboard regex: - (?:geckoboard).{0,40}\b([a-zA-Z0-9]{44})\b part: body - type: regex name: generic_1376 regex: - jdbc:mysql(=| =|:| :) part: body - type: regex name: generic_1700 regex: - BEGIN OPENSSH PRIVATE KEY part: body - type: regex name: generic_1701 regex: - BEGIN PRIVATE KEY part: body - type: regex name: generic_1702 regex: - BEGIN RSA PRIVATE KEY part: body - type: regex name: generic_1703 regex: - BEGIN DSA PRIVATE KEY part: body - type: regex name: generic_1704 regex: - BEGIN EC PRIVATE KEY part: body - type: regex name: generic_1705 regex: - BEGIN PGP PRIVATE KEY BLOCK part: body - type: regex name: generic_1710 regex: - algolia_api_key part: body - type: regex name: generic_1711 regex: - asana_access_token part: body - type: regex name: generic_1713 regex: - azure_tenant part: body - type: regex name: generic_1714 regex: - bitly_access_token part: body - type: regex name: generic_1716 regex: - browserstack_access_key part: body - type: regex name: generic_1717 regex: - buildkite_access_token part: body - type: regex name: generic_1718 regex: - comcast_access_token part: body - type: regex name: generic_1719 regex: - datadog_api_key part: body - type: regex name: generic_1720 regex: - deviantart_secret part: body - type: regex name: generic_1721 regex: - deviantart_access_token part: body - type: regex name: generic_1722 regex: - dropbox_api_token part: body - type: regex name: generic_1723 regex: - facebook_appsecret part: body - type: regex name: generic_1724 regex: - facebook_access_token part: body - type: regex name: generic_1725 regex: - firebase_custom_token part: body - type: regex name: generic_1726 regex: - firebase_id_token part: body - type: regex name: generic_1727 regex: - github_client part: body - type: regex name: generic_1728 regex: - github_ssh_key part: body - type: regex name: generic_1730 regex: - gitlab_private_token part: body - type: regex name: generic_1733 regex: - heroku_api_key part: body - type: regex name: generic_1734 regex: - instagram_access_token part: body - type: regex name: generic_1735 regex: - mailchimp_api_key part: body - type: regex name: generic_1736 regex: - mailgun_api_key part: body - type: regex name: generic_1739 regex: - pagerduty_api_token part: body - type: regex name: generic_1740 regex: - paypal_key_sb part: body - type: regex name: generic_1741 regex: - paypal_key_live part: body - type: regex name: generic_1742 regex: - paypal_token_sb part: body - type: regex name: generic_1743 regex: - paypal_token_live part: body - type: regex name: generic_1744 regex: - pendo_integration_key part: body - type: regex name: generic_1745 regex: - salesforce_access_token part: body - type: regex name: generic_1746 regex: - saucelabs_ukey part: body - type: regex name: generic_1747 regex: - sendgrid_api_key part: body - type: regex name: generic_1748 regex: - slack_api_token part: body - type: regex name: generic_1751 regex: - square_auth_token part: body - type: regex name: generic_1752 regex: - travisci_api_token part: body - type: regex name: generic_1754 regex: - twitter_api_secret part: body - type: regex name: generic_1755 regex: - twitter_bearer_token part: body - type: regex name: generic_1756 regex: - spotify_access_token part: body - type: regex name: generic_1757 regex: - stripe_key_live part: body - type: regex name: generic_1758 regex: - wakatime_api_key part: body - type: regex name: generic_1759 regex: - wompi_auth_bearer_sb part: body - type: regex name: generic_1760 regex: - wompi_auth_bearer_live part: body - type: regex name: generic_1761 regex: - wpengine_api_key part: body - type: regex name: generic_1763 regex: - zendesk_access_token part: body - type: regex name: generic_1764 regex: - ssh-rsa part: body - type: regex name: gengo regex: - >- (?:gengo).{0,40}([ ]{0,1}[0-9a-zA-Z\[\]\-\(\)\{\}|_^@$=~]{64}[ \r\n]{1}) part: body - type: regex name: geoapify regex: - (?:geoapify).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: geocode regex: - (?:geocode).{0,40}\b([a-z0-9]{28})\b part: body - type: regex name: geocodify regex: - (?:geocodify).{0,40}\b([0-9a-z]{40})\b part: body - type: regex name: geocodio_2 regex: - (?:geocod).{0,40}\b([a-z0-9]{39})\b part: body - type: regex name: geoipifi regex: - (?:ipifi).{0,40}\b([a-z0-9A-Z_]{32})\b part: body - type: regex name: getemail regex: - (?:getemail).{0,40}\b([a-zA-Z0-9-]{20})\b part: body - type: regex name: getemails_1 regex: - (?:getemails).{0,40}\b([a-z0-9-]{26})\b part: body - type: regex name: getemails_2 regex: - (?:getemails).{0,40}\b([a-z0-9-]{18})\b part: body - type: regex name: getgeoapi regex: - (?:getgeoapi).{0,40}\b([0-9a-z]{40})\b part: body - type: regex name: getgist regex: - (?:getgist).{0,40}\b([a-z0-9A-Z+=]{68}) part: body - type: regex name: getsandbox_1 regex: - (?:getsandbox).{0,40}\b([a-z0-9-]{40})\b part: body - type: regex name: getsandbox_2 regex: - (?:getsandbox).{0,40}\b([a-z0-9-]{15,30})\b part: body - type: regex name: github_2 regex: - \b((?:ghp|gho|ghu|ghs|ghr)_[a-zA-Z0-9]{36,255}\b) part: body - type: regex name: github_app_token regex: - (ghu|ghs)_[0-9a-zA-Z]{36} part: body - type: regex name: github_oauth_access_token regex: - gho_[0-9a-zA-Z]{36} part: body - type: regex name: github_personal_access_token regex: - ghp_[0-9a-zA-Z]{36} part: body - type: regex name: github_refresh_token regex: - ghr_[0-9a-zA-Z]{76} part: body - type: regex name: github_old regex: - (?:github)[^\.].{0,40}[ =:'"]+([a-f0-9]{40})\b part: body - type: regex name: githubapp_2 regex: - >- (?:github).{0,40}(-----BEGIN RSA PRIVATE KEY-----\s[A-Za-z0-9+\/\s]*\s-----END RSA PRIVATE KEY-----) part: body - type: regex name: gitlabv2 regex: - \b(glpat-[a-zA-Z0-9\-=_]{20,22})\b part: body - type: regex name: gitter regex: - (?:gitter).{0,40}\b([a-z0-9-]{40})\b part: body - type: regex name: glassnode regex: - (?:glassnode).{0,40}\b([0-9A-Za-z]{27})\b part: body - type: regex name: gocanvas_1 regex: - (?:gocanvas).{0,40}\b([0-9A-Za-z/+]{43}=[ \r\n]{1}) part: body - type: regex name: gocanvas_2 regex: - (?:gocanvas).{0,40}\b([\w\.-]+@[\w-]+\.[\w\.-]{2,5})\b part: body - type: regex name: gocardless regex: - \b(live_[0-9A-Za-z\_\-]{40}[ "'\r\n]{1}) part: body - type: regex name: goodday regex: - (?:goodday).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: google_gcp_service_account regex: - '"type": "service_account"' part: body - type: regex name: google_api_key regex: - AIza[0-9a-z-_]{35} part: body - type: regex name: google_calendar_uri regex: - https://www\.google\.com/calendar/embed\?src=[A-Za-z0-9%@&;=\-_\./]+ part: body - type: regex name: google_oauth_access_token regex: - ya29\.[0-9A-Za-z\-_]+ part: body - type: regex name: graphcms_1 regex: - (?:graph).{0,40}\b([a-z0-9]{25})\b part: body - type: regex name: graphcms_2 regex: - \b(ey[a-zA-Z0-9]{73}.ey[a-zA-Z0-9]{365}.[a-zA-Z0-9_-]{683})\b part: body - type: regex name: graphhopper regex: - (?:graphhopper).{0,40}\b([a-z0-9-]{36})\b part: body - type: regex name: groovehq regex: - (?:groove).{0,40}\b([a-z0-9A-Z]{64}) part: body - type: regex name: guru_1 regex: - >- (?:guru).{0,40}\b([a-zA-Z0-9]{3,20}@[a-zA-Z0-9]{2,12}.[a-zA-Z0-9]{2,5})\b part: body - type: regex name: guru_2 regex: - >- (?:guru).{0,40}\b([a-z0-9]{8}-[a-z0-9]{4}-[a-z0-9]{4}-[a-z0-9]{4}-[a-z0-9]{12})\b part: body - type: regex name: gyazo regex: - (?:gyazo).{0,40}\b([0-9A-Za-z-]{43})\b part: body - type: regex name: happi regex: - (?:happi).{0,40}\b([a-zA-Z0-9]{56}) part: body - type: regex name: happyscribe regex: - (?:happyscribe).{0,40}\b([0-9a-zA-Z]{24})\b part: body - type: regex name: harvest_1 regex: - (?:harvest).{0,40}\b([a-z0-9A-Z._]{97})\b part: body - type: regex name: hellosign regex: - (?:hellosign).{0,40}\b([a-zA-Z-0-9/+]{64})\b part: body - type: regex name: helpcrunch regex: - (?:helpcrunch).{0,40}\b([a-zA-Z-0-9+/=]{328}) part: body - type: regex name: helpscout regex: - (?:helpscout).{0,40}\b([A-Za-z0-9]{56})\b part: body - type: regex name: hereapi regex: - (?:hereapi).{0,40}\b([a-zA-Z0-9\S]{43})\b part: body - type: regex name: heroku regex: - >- (?:heroku).{0,40}\b([0-9Aa-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\b part: body - type: regex name: hive_2 regex: - (?:hive).{0,40}\b([0-9A-Za-z]{17})\b part: body - type: regex name: hiveage regex: - (?:hiveage).{0,40}\b([0-9A-Za-z\_\-]{20})\b part: body - type: regex name: holidayapi regex: - (?:holidayapi).{0,40}\b([a-z0-9-]{36})\b part: body - type: regex name: html2pdf regex: - (?:html2pdf).{0,40}\b([a-zA-Z0-9]{64})\b part: body - type: regex name: hubspotapikey regex: - >- (?:hubspot).{0,40}\b([A-Za-z0-9]{8}\-[A-Za-z0-9]{4}\-[A-Za-z0-9]{4}\-[A-Za-z0-9]{4}\-[A-Za-z0-9]{12})\b part: body - type: regex name: humanity regex: - (?:humanity).{0,40}\b([0-9a-z]{40})\b part: body - type: regex name: hypertrack_1 regex: - (?:hypertrack).{0,40}\b([0-9a-zA-Z\_\-]{54})\b part: body - type: regex name: hypertrack_2 regex: - (?:hypertrack).{0,40}\b([0-9a-zA-Z\_\-]{27})\b part: body - type: regex name: ibmclouduserkey regex: - (?:ibm).{0,40}\b([A-Za-z0-9_-]{44})\b part: body - type: regex name: iconfinder regex: - (?:iconfinder).{0,40}\b([a-zA-Z0-9]{64})\b part: body - type: regex name: iexcloud regex: - (?:iexcloud).{0,40}\b([a-z0-9_]{35})\b part: body - type: regex name: imagekit regex: - (?:imagekit).{0,40}\b([a-zA-Z0-9_=]{36}) part: body - type: regex name: imagga regex: - (?:imagga).{0,40}\b([a-z0-9A-Z=]{72}) part: body - type: regex name: impala regex: - (?:impala).{0,40}\b([0-9A-Za-z_]{46})\b part: body - type: regex name: insightly regex: - (?:insightly).{0,40}\b([a-z0-9-]{36})\b part: body - type: regex name: integromat regex: - (?:integromat).{0,40}\b([a-z0-9-]{36})\b part: body - type: regex name: intrinio regex: - (?:intrinio).{0,40}\b([a-zA-Z0-9]{44})\b part: body - type: regex name: invoiceocean_1 regex: - (?:invoiceocean).{0,40}\b([0-9A-Za-z]{20})\b part: body - type: regex name: invoiceocean_2 regex: - \b([0-9a-z]{1,}.invoiceocean.com)\b part: body - type: regex name: ipapi regex: - (?:ipapi).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: ipgeolocation regex: - (?:ipgeolocation).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: ipify regex: - (?:ipify).{0,40}\b([a-zA-Z0-9_-]{32})\b part: body - type: regex name: ipinfodb regex: - (?:ipinfodb).{0,40}\b([a-z0-9]{64})\b part: body - type: regex name: ipquality regex: - (?:ipquality).{0,40}\b([0-9a-z]{32})\b part: body - type: regex name: ipstack regex: - (?:ipstack).{0,40}\b([a-fA-f0-9]{32})\b part: body - type: regex name: jdbc_connection_string regex: - jdbc:[a-z:]+://[A-Za-z0-9\.\-_:;=/@?,&]+ part: body - type: regex name: jiratoken_1 regex: - (?:jira).{0,40}\b([a-zA-Z-0-9]{24})\b part: body - type: regex name: jiratoken_2 regex: - (?:jira).{0,40}\b([a-zA-Z-0-9]{5,24}\@[a-zA-Z-0-9]{3,16}\.com)\b part: body - type: regex name: jotform regex: - (?:jotform).{0,40}\b([0-9Aa-z]{32})\b part: body - type: regex name: jumpcloud regex: - (?:jumpcloud).{0,40}\b([a-zA-Z0-9]{40})\b part: body - type: regex name: juro regex: - (?:juro).{0,40}\b([a-zA-Z0-9]{40})\b part: body - type: regex name: kanban_1 regex: - (?:kanban).{0,40}\b([0-9A-Z]{12})\b part: body - type: regex name: kanban_2 regex: - \b([0-9a-z]{1,}.kanbantool.com)\b part: body - type: regex name: karmacrm regex: - (?:karma).{0,40}\b([a-zA-Z0-9]{20})\b part: body - type: regex name: keenio_1 regex: - (?:keen).{0,40}\b([0-9a-z]{24})\b part: body - type: regex name: keenio_2 regex: - (?:keen).{0,40}\b([0-9A-Z]{64})\b part: body - type: regex name: kickbox regex: - (?:kickbox).{0,40}\b([a-zA-Z0-9_]+[a-zA-Z0-9]{64})\b part: body - type: regex name: klipfolio regex: - (?:klipfolio).{0,40}\b([0-9a-f]{40})\b part: body - type: regex name: kontent regex: - (?:kontent).{0,40}\b([a-z0-9-]{36})\b part: body - type: regex name: kraken_1 regex: - (?:kraken).{0,40}\b([0-9A-Za-z\/\+=]{56}[ "'\r\n]{1}) part: body - type: regex name: kraken_2 regex: - (?:kraken).{0,40}\b([0-9A-Za-z\/\+=]{86,88}[ "'\r\n]{1}) part: body - type: regex name: kucoin_1 regex: - (?:kucoin).{0,40}([ \r\n]{1}[!-~]{7,32}[ \r\n]{1}) part: body - type: regex name: kucoin_2 regex: - >- (?:kucoin).{0,40}\b([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\b part: body - type: regex name: kucoin_3 regex: - (?:kucoin).{0,40}\b([0-9a-f]{24})\b part: body - type: regex name: kylas regex: - (?:kylas).{0,40}\b([a-z0-9-]{36})\b part: body - type: regex name: languagelayer regex: - (?:languagelayer).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: lastfm regex: - (?:lastfm).{0,40}\b([0-9a-z]{32})\b part: body - type: regex name: launchdarkly regex: - (?:launchdarkly).{0,40}\b([a-z0-9-]{40})\b part: body - type: regex name: leadfeeder regex: - (?:leadfeeder).{0,40}\b([a-zA-Z0-9-]{43})\b part: body - type: regex name: lendflow regex: - >- (?:lendflow).{0,40}\b([a-zA-Z0-9]{36}\.[a-zA-Z0-9]{235}\.[a-zA-Z0-9]{32}\-[a-zA-Z0-9]{47}\-[a-zA-Z0-9_]{162}\-[a-zA-Z0-9]{42}\-[a-zA-Z0-9_]{40}\-[a-zA-Z0-9_]{66}\-[a-zA-Z0-9_]{59}\-[a-zA-Z0-9]{7}\-[a-zA-Z0-9_]{220})\b part: body - type: regex name: lexigram regex: - (?:lexigram).{0,40}\b([a-zA-Z0-9\S]{301})\b part: body - type: regex name: linearapi regex: - \b(lin_api_[0-9A-Za-z]{40})\b part: body - type: regex name: linemessaging regex: - (?:line).{0,40}\b([A-Za-z0-9+/]{171,172})\b part: body - type: regex name: linenotify regex: - (?:linenotify).{0,40}\b([0-9A-Za-z]{43})\b part: body - type: regex name: linkpreview regex: - (?:linkpreview).{0,40}\b([a-zA-Z0-9]{32})\b part: body - type: regex name: liveagent regex: - (?:liveagent).{0,40}\b([a-zA-Z0-9]{32})\b part: body - type: regex name: livestorm regex: - >- (?:livestorm).{0,40}\b(eyJhbGciOiJIUzI1NiJ9\.eyJhdWQiOiJhcGkubGl2ZXN0b3JtLmNvIiwianRpIjoi[0-9A-Z-a-z]{134}\.[0-9A-Za-z\-\_]{43}[ \r\n]{1}) part: body - type: regex name: locationiq regex: - \b(pk\.[a-zA-Z-0-9]{32})\b part: body - type: regex name: loginradius regex: - >- (?:loginradius).{0,40}\b([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\b part: body - type: regex name: lokalisetoken regex: - (?:lokalise).{0,40}\b([a-z0-9]{40})\b part: body - type: regex name: loyverse regex: - (?:loyverse).{0,40}\b([0-9-a-z]{32})\b part: body - type: regex name: luno_1 regex: - (?:luno).{0,40}\b([a-z0-9]{13})\b part: body - type: regex name: luno_2 regex: - (?:luno).{0,40}\b([a-zA-Z0-9_-]{43})\b part: body - type: regex name: macaddress regex: - (?:macaddress).{0,40}\b([a-zA-Z0-9_]{32})\b part: body - type: regex name: madkudu regex: - (?:madkudu).{0,40}\b([0-9a-f]{32})\b part: body - type: regex name: magnetic regex: - >- (?:magnetic).{0,40}\b([0-9Aa-z]{8}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{12})\b part: body - type: regex name: mailchimp_api_key regex: - '[0-9a-f]{32}-us[0-9]{1,2}' part: body - type: regex name: mailboxlayer regex: - (?:mailboxlayer).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: mailerlite regex: - (?:mailerlite).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: mailgun_2 regex: - (?:mailgun).{0,40}\b([a-zA-Z-0-9]{72})\b part: body - type: regex name: mailgun_api_key_1 regex: - key-[0-9a-zA-Z]{32} part: body - type: regex name: mailjetbasicauth regex: - (?:mailjet).{0,40}\b([A-Za-z0-9]{87}\=) part: body - type: regex name: mailjetsms regex: - (?:mailjet).{0,40}\b([A-Za-z0-9]{32})\b part: body - type: regex name: mailmodo regex: - >- (?:mailmodo).{0,40}\b([A-Z0-9]{7}-[A-Z0-9]{7}-[A-Z0-9]{7}-[A-Z0-9]{7})\b part: body - type: regex name: mailsac regex: - (?:mailsac).{0,40}\b(k_[0-9A-Za-z]{36,})\b part: body - type: regex name: mandrill regex: - (?:mandrill).{0,40}\b([A-Za-z0-9_-]{22})\b part: body - type: regex name: mapbox_2 regex: - \b(sk\.[a-zA-Z-0-9\.]{80,240})\b part: body - type: regex name: mapquest regex: - (?:mapquest).{0,40}\b([0-9A-Za-z]{32})\b part: body - type: regex name: marketstack regex: - (?:marketstack).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: mattermostpersonaltoken_1 regex: - (?:mattermost).{0,40}\b([A-Za-z0-9-_]{1,}.cloud.mattermost.com)\b part: body - type: regex name: mattermostpersonaltoken_2 regex: - (?:mattermost).{0,40}\b([a-z0-9]{26})\b part: body - type: regex name: mavenlink regex: - (?:mavenlink).{0,40}\b([0-9a-z]{64})\b part: body - type: regex name: maxmindlicense_1 regex: - (?:maxmind|geoip).{0,40}\b([0-9A-Za-z]{16})\b part: body - type: regex name: maxmindlicense_2 regex: - (?:maxmind|geoip).{0,40}\b([0-9]{2,7})\b part: body - type: regex name: meaningcloud regex: - (?:meaningcloud).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: mediastack regex: - (?:mediastack).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: meistertask regex: - (?:meistertask).{0,40}\b([a-zA-Z0-9]{43})\b part: body - type: regex name: mesibo regex: - (?:mesibo).{0,40}\b([0-9A-Za-z]{64})\b part: body - type: regex name: messagebird regex: - (?:messagebird).{0,40}\b([A-Za-z0-9_-]{25})\b part: body - type: regex name: metaapi_1 regex: - (?:metaapi|meta-api).{0,40}\b([0-9a-f]{64})\b part: body - type: regex name: metaapi_2 regex: - (?:metaapi|meta-api).{0,40}\b([0-9a-f]{24})\b part: body - type: regex name: metrilo regex: - (?:metrilo).{0,40}\b([a-z0-9]{16})\b part: body - type: regex name: microsoftteamswebhook regex: - >- (https:\/\/[a-zA-Z-0-9]+\.webhook\.office\.com\/webhookb2\/[a-zA-Z-0-9]{8}-[a-zA-Z-0-9]{4}-[a-zA-Z-0-9]{4}-[a-zA-Z-0-9]{4}-[a-zA-Z-0-9]{12}\@[a-zA-Z-0-9]{8}-[a-zA-Z-0-9]{4}-[a-zA-Z-0-9]{4}-[a-zA-Z-0-9]{4}-[a-zA-Z-0-9]{12}\/IncomingWebhook\/[a-zA-Z-0-9]{32}\/[a-zA-Z-0-9]{8}-[a-zA-Z-0-9]{4}-[a-zA-Z-0-9]{4}-[a-zA-Z-0-9]{4}-[a-zA-Z-0-9]{12}) part: body - type: regex name: midise regex: - midi-662b69edd2[a-zA-Z0-9]{54} part: body - type: regex name: mindmeister regex: - (?:mindmeister).{0,40}\b([a-zA-Z0-9]{43})\b part: body - type: regex name: mite_1 regex: - (?:mite).{0,40}\b([0-9a-z]{16})\b part: body - type: regex name: mite_2 regex: - \b([0-9a-z-]{1,}.mite.yo.lk)\b part: body - type: regex name: mixmax regex: - (?:mixmax).{0,40}\b([a-zA-Z0-9_-]{36})\b part: body - type: regex name: mixpanel_1 regex: - (?:mixpanel).{0,40}\b([a-zA-Z0-9.-]{30,40})\b part: body - type: regex name: mixpanel_2 regex: - (?:mixpanel).{0,40}\b([a-zA-Z0-9-]{32})\b part: body - type: regex name: moderation regex: - >- (?:moderation).{0,40}\b([a-zA-Z0-9]{36}\.[a-zA-Z0-9]{115}\.[a-zA-Z0-9_]{43})\b part: body - type: regex name: monday regex: - (?:monday).{0,40}\b(ey[a-zA-Z0-9_.]{210,225})\b part: body - type: regex name: moonclerck regex: - (?:moonclerck).{0,40}\b([0-9a-z]{32})\b part: body - type: regex name: moonclerk regex: - (?:moonclerk).{0,40}\b([0-9a-z]{32})\b part: body - type: regex name: moosend regex: - >- (?:moosend).{0,40}\b([0-9Aa-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\b part: body - type: regex name: mrticktock_1 regex: - (?:mrticktock).{0,40}\b([a-zA-Z0-9!=@#$%()_^]{1,50}) part: body - type: regex name: myintervals regex: - (?:myintervals).{0,40}\b([0-9a-z]{11})\b part: body - type: regex name: nasdaqdatalink regex: - (?:nasdaq).{0,40}\b([a-zA-Z0-9_-]{20})\b part: body - type: regex name: nethunt_1 regex: - (?:nethunt).{0,40}\b([a-zA-Z0-9.-@]{25,30})\b part: body - type: regex name: nethunt_2 regex: - (?:nethunt).{0,40}\b([a-z0-9-\S]{36})\b part: body - type: regex name: netlify regex: - (?:netlify).{0,40}\b([A-Za-z0-9_-]{43,45})\b part: body - type: regex name: neutrinoapi_1 regex: - (?:neutrinoapi).{0,40}\b([a-zA-Z0-9]{48})\b part: body - type: regex name: neutrinoapi_2 regex: - (?:neutrinoapi).{0,40}\b([a-zA-Z0-9]{6,24})\b part: body - type: regex name: newrelic_admin_api_key regex: - NRAA-[a-f0-9]{27} part: body - type: regex name: newrelic_insights_api_key regex: - NRI(?:I|Q)-[A-Za-z0-9\-_]{32} part: body - type: regex name: newrelic_rest_api_key regex: - NRRA-[a-f0-9]{42} part: body - type: regex name: newrelic_synthetics_location_key regex: - NRSP-[a-z]{2}[0-9]{2}[a-f0-9]{31} part: body - type: regex name: newrelicpersonalapikey regex: - (?:newrelic).{0,40}\b([A-Za-z0-9_\.]{4}-[A-Za-z0-9_\.]{42})\b part: body - type: regex name: newsapi regex: - (?:newsapi).{0,40}\b([a-z0-9]{32}) part: body - type: regex name: newscatcher regex: - (?:newscatcher).{0,40}\b([0-9A-Za-z_]{43})\b part: body - type: regex name: nexmoapikey_1 regex: - (?:nexmo).{0,40}\b([A-Za-z0-9_-]{8})\b part: body - type: regex name: nexmoapikey_2 regex: - (?:nexmo).{0,40}\b([A-Za-z0-9_-]{16})\b part: body - type: regex name: nftport regex: - >- (?:nftport).{0,40}\b([a-z0-9]{8}-[a-z0-9]{4}-[a-z0-9]{4}-[a-z0-9]{4}-[a-z0-9]{12})\b part: body - type: regex name: nicereply regex: - (?:nicereply).{0,40}\b([0-9a-f]{40})\b part: body - type: regex name: nimble regex: - (?:nimble).{0,40}\b([a-zA-Z0-9]{30})\b part: body - type: regex name: nitro regex: - (?:nitro).{0,40}\b([0-9a-f]{32})\b part: body - type: regex name: noticeable regex: - (?:noticeable).{0,40}\b([0-9a-zA-Z]{20})\b part: body - type: regex name: notion regex: - \b(secret_[A-Za-z0-9]{43})\b part: body - type: regex name: nozbeteams regex: - >- (?:nozbe|nozbeteams).{0,40}\b([0-9A-Za-z]{16}_[0-9A-Za-z\-_]{64}[ \r\n]{1}) part: body - type: regex name: numverify regex: - (?:numverify).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: nutritionix_1 regex: - (?:nutritionix).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: nutritionix_2 regex: - (?:nutritionix).{0,40}\b([a-z0-9]{8})\b part: body - type: regex name: nylas regex: - (?:nylas).{0,40}\b([0-9A-Za-z]{30})\b part: body - type: regex name: oanda regex: - (?:oanda).{0,40}\b([a-zA-Z0-9]{24})\b part: body - type: regex name: omnisend regex: - (?:omnisend).{0,40}\b([a-z0-9A-Z-]{75})\b part: body - type: regex name: onedesk_1 regex: - (?:onedesk).{0,40}\b([a-zA-Z0-9!=@#$%^]{8,64}) part: body - type: regex name: onelogin_2 regex: - secret[a-zA-Z0-9_' "=]{0,20}([a-z0-9]{64}) part: body - type: regex name: onepagecrm_1 regex: - (?:onepagecrm).{0,40}\b([a-zA-Z0-9=]{44}) part: body - type: regex name: onepagecrm_2 regex: - (?:onepagecrm).{0,40}\b([a-z0-9]{24})\b part: body - type: regex name: onwaterio regex: - (?:onwater).{0,40}\b([a-zA-Z0-9_-]{20})\b part: body - type: regex name: oopspam regex: - (?:oopspam).{0,40}\b([a-zA-Z0-9]{40})\b part: body - type: regex name: opencagedata regex: - (?:opencagedata).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: opengraphr regex: - (?:opengraphr).{0,40}\b([0-9Aa-zA-Z]{80})\b part: body - type: regex name: openuv regex: - (?:openuv).{0,40}\b([0-9a-z]{32})\b part: body - type: regex name: openweather regex: - (?:openweather).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: optimizely regex: - (?:optimizely).{0,40}\b([0-9A-Za-z-:]{54})\b part: body - type: regex name: owlbot regex: - (?:owlbot).{0,40}\b([a-z0-9]{40})\b part: body - type: regex name: pgp_private_key_block regex: - '-----BEGIN PGP PRIVATE KEY BLOCK-----' part: body - type: regex name: pagerdutyapikey regex: - >- (?:pagerduty).{0,40}\b([a-z]{1}\+[a-zA-Z]{9}\-[a-z]{2}\-[a-z0-9]{5})\b part: body - type: regex name: pandadoc regex: - (?:pandadoc).{0,40}\b([a-zA-Z0-9]{40})\b part: body - type: regex name: pandascore regex: - (?:pandascore).{0,40}([ \r\n]{0,1}[0-9A-Za-z\-\_]{51}[ \r\n]{1}) part: body - type: regex name: paralleldots regex: - (?:paralleldots).{0,40}\b([0-9A-Za-z]{43})\b part: body - type: regex name: partnerstack regex: - (?:partnerstack).{0,40}\b([0-9A-Za-z]{64})\b part: body - type: regex name: passbase regex: - (?:passbase).{0,40}\b([a-zA-Z0-9]{128})\b part: body - type: regex name: password_in_url regex: - '[a-zA-Z]{3,10}://[^/\s:@]{3,20}:[^/\s:@]{3,20}@.{1,100}["''\s]' part: body - type: regex name: pastebin regex: - (?:pastebin).{0,40}\b([a-zA-Z0-9_]{32})\b part: body - type: regex name: paypal_braintree_access_token regex: - access_token\$production\$[0-9a-z]{16}\$[0-9a-f]{32} part: body - type: regex name: paymoapp regex: - (?:paymoapp).{0,40}\b([a-zA-Z0-9]{44})\b part: body - type: regex name: paymongo regex: - (?:paymongo).{0,40}\b([a-zA-Z0-9_]{32})\b part: body - type: regex name: paystack regex: - \b(sk\_[a-z]{1,}\_[A-Za-z0-9]{40})\b part: body - type: regex name: pdflayer regex: - (?:pdflayer).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: pdfshift regex: - (?:pdfshift).{0,40}\b([0-9a-f]{32})\b part: body - type: regex name: peopledatalabs regex: - (?:peopledatalabs).{0,40}\b([a-z0-9]{64})\b part: body - type: regex name: pepipost regex: - (?:pepipost|netcore).{0,40}\b([a-zA-Z-0-9]{32})\b part: body - type: regex name: picatic_api_key regex: - sk_live_[0-9a-z]{32} part: body - type: regex name: pipedream regex: - (?:pipedream).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: pipedrive regex: - (?:pipedrive).{0,40}\b([a-zA-Z0-9]{40})\b part: body - type: regex name: pivotaltracker regex: - (?:pivotal).{0,40}([a-z0-9]{32}) part: body - type: regex name: pixabay regex: - (?:pixabay).{0,40}\b([a-z0-9-]{34})\b part: body - type: regex name: plaidkey_1 regex: - (?:plaid).{0,40}\b([a-z0-9]{24})\b part: body - type: regex name: plaidkey_2 regex: - (?:plaid).{0,40}\b([a-z0-9]{30})\b part: body - type: regex name: planviewleankit_1 regex: - (?:planviewleankit|planview).{0,40}\b([0-9a-f]{128})\b part: body - type: regex name: planviewleankit_2 regex: - >- (?:planviewleankit|planview).{0,40}(?:subdomain).\b([a-zA-Z][a-zA-Z0-9.-]{1,23}[a-zA-Z0-9])\b part: body - type: regex name: planyo regex: - (?:planyo).{0,40}\b([0-9a-z]{62})\b part: body - type: regex name: plivo_1 regex: - (?:plivo).{0,40}\b([A-Za-z0-9_-]{40})\b part: body - type: regex name: plivo_2 regex: - (?:plivo).{0,40}\b([A-Z]{20})\b part: body - type: regex name: poloniex_1 regex: - (?:poloniex).{0,40}\b([0-9a-f]{128})\b part: body - type: regex name: poloniex_2 regex: - >- (?:poloniex).{0,40}\b([0-9A-Z]{8}-[0-9A-Z]{8}-[0-9A-Z]{8}-[0-9A-Z]{8})\b part: body - type: regex name: polygon regex: - (?:polygon).{0,40}\b([a-z0-9A-Z]{32})\b part: body - type: regex name: positionstack regex: - (?:positionstack).{0,40}\b([a-zA-Z0-9_]{32})\b part: body - type: regex name: postageapp regex: - (?:postageapp).{0,40}\b([0-9A-Za-z]{32})\b part: body - type: regex name: posthog regex: - \b(phc_[a-zA-Z0-9_]{43})\b part: body - type: regex name: postman regex: - \b(PMAK-[a-zA-Z-0-9]{59})\b part: body - type: regex name: postmark regex: - >- (?:postmark).{0,40}\b([0-9a-z]{8}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{12})\b part: body - type: regex name: powrbot regex: - (?:powrbot).{0,40}\b([a-z0-9A-Z]{40})\b part: body - type: regex name: privatekey regex: - >- -----\s*?BEGIN[ A-Z0-9_-]*?PRIVATE KEY\s*?-----[\s\S]*?----\s*?END[ A-Z0-9_-]*? PRIVATE KEY\s*?----- part: body - type: regex name: prospectcrm regex: - (?:prospect).{0,40}\b([a-z0-9-]{32})\b part: body - type: regex name: prospectio regex: - (?:prospect).{0,40}\b([a-z0-9A-Z-]{50})\b part: body - type: regex name: protocolsio regex: - (?:protocols).{0,40}\b([a-z0-9]{64})\b part: body - type: regex name: proxycrawl regex: - (?:proxycrawl).{0,40}\b([a-zA-Z0-9_]{22})\b part: body - type: regex name: pubnubpublishkey_1 regex: - >- \b(sub-c-[0-9a-z]{8}-[a-z]{4}-[a-z0-9]{4}-[a-z0-9]{4}-[a-z0-9]{12})\b part: body - type: regex name: pubnubpublishkey_2 regex: - >- \b(pub-c-[0-9a-z]{8}-[0-9a-z]{4}-[a-z0-9]{4}-[a-z0-9]{4}-[a-z0-9]{12})\b part: body - type: regex name: purestake regex: - (?:purestake).{0,40}\b([a-zA-Z0-9]{40})\b part: body - type: regex name: pushbulletapikey regex: - (?:pushbullet).{0,40}\b([A-Za-z0-9_\.]{34})\b part: body - type: regex name: pusherchannelkey_2 regex: - (?:pusher).{0,40}\b([a-z0-9]{20})\b part: body - type: regex name: pusherchannelkey_3 regex: - (?:pusher).{0,40}\b([0-9]{7})\b part: body - type: regex name: pypi_upload_token regex: - pypi-AgEIcHlwaS5vcmc[A-Za-z0-9-_]{50,1000} part: body - type: regex name: qualaroo regex: - (?:qualaroo).{0,40}\b([a-z0-9A-Z=]{64}) part: body - type: regex name: qubole regex: - (?:qubole).{0,40}\b([0-9a-z]{64})\b part: body - type: regex name: quickmetrics regex: - (?:quickmetrics).{0,40}\b([a-zA-Z0-9_-]{22})\b part: body - type: regex name: rkcs8 regex: - '-----BEGIN PRIVATE KEY-----' part: body - type: regex name: rsa_private_key regex: - '-----BEGIN RSA PRIVATE KEY-----' part: body - type: regex name: rapidapi regex: - (?:rapidapi).{0,40}\b([A-Za-z0-9_-]{50})\b part: body - type: regex name: raven regex: - (?:raven).{0,40}\b([A-Z0-9-]{16})\b part: body - type: regex name: rawg regex: - (?:rawg).{0,40}\b([0-9Aa-z]{32})\b part: body - type: regex name: razorpay_1 regex: - \brzp_\w{2,6}_\w{10,20}\b part: body - type: regex name: readme regex: - (?:readme).{0,40}\b([a-zA-Z0-9_]{32})\b part: body - type: regex name: reallysimplesystems regex: - \b(ey[a-zA-Z0-9-._]{153}.ey[a-zA-Z0-9-._]{916,1000})\b part: body - type: regex name: rebrandly regex: - (?:rebrandly).{0,40}\b([a-zA-Z0-9_]{32})\b part: body - type: regex name: refiner regex: - >- (?:refiner).{0,40}\b([0-9Aa-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\b part: body - type: regex name: repairshopr_1 regex: - (?:repairshopr).{0,40}\b([a-zA-Z0-9_.!+$#^*]{3,32})\b part: body - type: regex name: repairshopr_2 regex: - (?:repairshopr).{0,40}\b([a-zA-Z0-9-]{51})\b part: body - type: regex name: restpack regex: - (?:restpack).{0,40}\b([a-zA-Z0-9]{48})\b part: body - type: regex name: restpackhtmltopdfapi regex: - (?:restpack).{0,40}\b([0-9A-Za-z]{48})\b part: body - type: regex name: rev_1 regex: - (?:rev).{0,40}\b([0-9a-zA-Z\/\+]{27}\=[ \r\n]{1}) part: body - type: regex name: revampcrm_1 regex: - (?:revamp).{0,40}\b([a-zA-Z0-9]{40}\b) part: body - type: regex name: ringcentral_1 regex: - (?:ringcentral).{0,40}\b(https://www.[0-9A-Za-z_-]{1,}.com)\b part: body - type: regex name: ringcentral_2 regex: - (?:ringcentral).{0,40}\b([0-9A-Za-z_-]{22})\b part: body - type: regex name: ritekit regex: - (?:ritekit).{0,40}\b([0-9a-f]{44})\b part: body - type: regex name: roaring regex: - (?:roaring).{0,40}\b([0-9A-Za-z_-]{28})\b part: body - type: regex name: rocketreach regex: - (?:rocketreach).{0,40}\b([a-z0-9-]{39})\b part: body - type: regex name: roninapp_2 regex: - (?:ronin).{0,40}\b([0-9a-zA-Z]{26})\b part: body - type: regex name: route4me regex: - (?:route4me).{0,40}\b([0-9A-Z]{32})\b part: body - type: regex name: rownd_1 regex: - >- (?:rownd).{0,40}\b([a-z0-9]{8}\-[a-z0-9]{4}\-[a-z0-9]{4}\-[a-z0-9]{4}\-[a-z0-9]{12})\b part: body - type: regex name: rownd_2 regex: - (?:rownd).{0,40}\b([a-z0-9]{48})\b part: body - type: regex name: rownd_3 regex: - (?:rownd).{0,40}\b([0-9]{18})\b part: body - type: regex name: rubygems regex: - \b(rubygems_[a-zA0-9]{48})\b part: body - type: regex name: runrunit_1 regex: - (?:runrunit).{0,40}\b([0-9a-f]{32})\b part: body - type: regex name: runrunit_2 regex: - (?:runrunit).{0,40}\b([0-9A-Za-z]{18,20})\b part: body - type: regex name: ssh regex: - '-----BEGIN OPENSSH PRIVATE KEY-----' part: body - type: regex name: ssh_dsa_private_key regex: - '-----BEGIN DSA PRIVATE KEY-----' part: body - type: regex name: salesblink regex: - (?:salesblink).{0,40}\b([a-zA-Z]{16})\b part: body - type: regex name: salescookie regex: - (?:salescookie).{0,40}\b([a-zA-z0-9]{32})\b part: body - type: regex name: salesflare regex: - (?:salesflare).{0,40}\b([a-zA-Z0-9_]{45})\b part: body - type: regex name: satismeterprojectkey_1 regex: - >- (?:satismeter).{0,40}\b([a-zA-Z0-9]{4,20}@[a-zA-Z0-9]{2,12}.[a-zA-Z0-9]{2,12})\b part: body - type: regex name: satismeterprojectkey_2 regex: - (?:satismeter).{0,40}\b([a-zA-Z0-9]{24})\b part: body - type: regex name: satismeterprojectkey_3 regex: - (?:satismeter).{0,40}\b([a-zA-Z0-9!=@#$%^]{6,32}) part: body - type: regex name: satismeterwritekey regex: - (?:satismeter).{0,40}\b([a-z0-9A-Z]{16})\b part: body - type: regex name: saucelabs_1 regex: - \b(oauth\-[a-z0-9]{8,}\-[a-z0-9]{5})\b part: body - type: regex name: saucelabs_2 regex: - >- (?:saucelabs).{0,40}\b([a-z0-9]{8}\-[a-z0-9]{4}\-[a-z0-9]{4}\-[a-z0-9]{4}\-[a-z0-9]{12})\b part: body - type: regex name: scalewaykey regex: - >- (?:scaleway).{0,40}\b([0-9a-z]{8}-[a-z0-9]{4}-[a-z0-9]{4}-[0-9a-z]{4}-[0-9a-z]{12})\b part: body - type: regex name: scrapeowl regex: - (?:scrapeowl).{0,40}\b([0-9a-z]{30})\b part: body - type: regex name: scraperapi regex: - (?:scraperapi).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: scraperbox regex: - (?:scraperbox).{0,40}\b([A-Z0-9]{32})\b part: body - type: regex name: scrapersite regex: - (?:scrapersite).{0,40}\b([a-zA-Z0-9]{45})\b part: body - type: regex name: scrapestack regex: - (?:scrapestack).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: scrapfly regex: - (?:scrapfly).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: scrapingant regex: - (?:scrapingant).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: scrapingbee regex: - (?:scrapingbee).{0,40}\b([A-Z0-9]{80})\b part: body - type: regex name: screenshotapi regex: - >- (?:screenshotapi).{0,40}\b([0-9A-Z]{7}\-[0-9A-Z]{7}\-[0-9A-Z]{7}\-[0-9A-Z]{7})\b part: body - type: regex name: screenshotlayer regex: - (?:screenshotlayer).{0,40}\b([a-zA-Z0-9_]{32})\b part: body - type: regex name: securitytrails regex: - (?:securitytrails).{0,40}\b([a-zA-Z0-9]{32})\b part: body - type: regex name: segmentapikey regex: - >- (?:segment).{0,40}\b([A-Za-z0-9_\-a-zA-Z]{43}\.[A-Za-z0-9_\-a-zA-Z]{43})\b part: body - type: regex name: selectpdf regex: - (?:selectpdf).{0,40}\b([a-z0-9-]{36})\b part: body - type: regex name: semaphore regex: - (?:semaphore).{0,40}\b([0-9a-z]{32})\b part: body - type: regex name: sendgrid_api_key regex: - SG\.[\w_]{16,32}\.[\w_]{16,64} part: body - type: regex name: sendbird_1 regex: - (?:sendbird).{0,40}\b([0-9a-f]{40})\b part: body - type: regex name: sendbird_2 regex: - >- (?:sendbird).{0,40}\b([0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12})\b part: body - type: regex name: sendbirdorganizationapi regex: - (?:sendbird).{0,40}\b([0-9a-f]{24})\b part: body - type: regex name: sendgrid regex: - (?:sendgrid).{0,40}(SG\.[\w\-_]{20,24}\.[\w\-_]{39,50})\b part: body - type: regex name: sendinbluev2 regex: - \b(xkeysib\-[A-Za-z0-9_-]{81})\b part: body - type: regex name: sentiment_1 regex: - (?:sentiment).{0,40}\b([0-9]{17})\b part: body - type: regex name: sentiment_2 regex: - (?:sentiment).{0,40}\b([a-zA-Z0-9]{20})\b part: body - type: regex name: sentrytoken regex: - (?:sentry).{0,40}\b([a-f0-9]{64})\b part: body - type: regex name: serphouse regex: - (?:serphouse).{0,40}\b([0-9A-Za-z]{60})\b part: body - type: regex name: serpstack regex: - (?:serpstack).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: sheety_1 regex: - (?:sheety).{0,40}\b([0-9a-z]{32})\b part: body - type: regex name: sheety_2 regex: - (?:sheety).{0,40}\b([0-9a-z]{64})\b part: body - type: regex name: sherpadesk regex: - (?:sherpadesk).{0,40}\b([0-9a-z]{32})\b part: body - type: regex name: shipday regex: - (?:shipday).{0,40}\b([a-zA-Z0-9.]{11}[a-zA-Z0-9]{20})\b part: body - type: regex name: shodankey regex: - (?:shodan).{0,40}\b([a-zA-Z0-9]{32})\b part: body - type: regex name: shopify_access_token regex: - shpat_[a-fA-F0-9]{32} part: body - type: regex name: shopify_custom_app_access_token regex: - shpca_[a-fA-F0-9]{32} part: body - type: regex name: shopify_private_app_access_token regex: - shppa_[a-fA-F0-9]{32} part: body - type: regex name: shopify_shared_secret regex: - shpss_[a-fA-F0-9]{32} part: body - type: regex name: shortcut regex: - (?:shortcut).{0,40}\b([0-9a-f-]{36})\b part: body - type: regex name: shotstack regex: - (?:shotstack).{0,40}\b([a-zA-Z0-9]{40})\b part: body - type: regex name: shutterstockoauth regex: - (?:shutterstock).{0,40}\b(v2/[0-9A-Za-z]{388})\b part: body - type: regex name: signalwire_1 regex: - \b([0-9a-z-]{3,64}.signalwire.com)\b part: body - type: regex name: signalwire_2 regex: - >- (?:signalwire).{0,40}\b([0-9a-z]{8}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{12})\b part: body - type: regex name: signalwire_3 regex: - (?:signalwire).{0,40}\b([0-9A-Za-z]{50})\b part: body - type: regex name: signaturit regex: - (?:signaturit).{0,40}\b([0-9A-Za-z]{86})\b part: body - type: regex name: signupgenius regex: - (?:signupgenius).{0,40}\b([0-9A-Za-z]{32})\b part: body - type: regex name: sigopt regex: - (?:sigopt).{0,40}\b([A-Z0-9]{48})\b part: body - type: regex name: simplesat regex: - (?:simplesat).{0,40}\b([a-z0-9]{40}) part: body - type: regex name: simplynoted regex: - (?:simplynoted).{0,40}\b([a-zA-Z0-9\S]{340,360})\b part: body - type: regex name: simvoly regex: - (?:simvoly).{0,40}\b([a-z0-9]{33})\b part: body - type: regex name: sinchmessage regex: - (?:sinch).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: sirv_1 regex: - (?:sirv).{0,40}\b([a-zA-Z0-9\S]{88}) part: body - type: regex name: sirv_2 regex: - (?:sirv).{0,40}\b([a-zA-Z0-9]{26})\b part: body - type: regex name: siteleaf regex: - (?:siteleaf).{0,40}\b([0-9Aa-z]{32})\b part: body - type: regex name: skrappio regex: - (?:skrapp).{0,40}\b([a-z0-9A-Z]{42})\b part: body - type: regex name: skybiometry regex: - (?:skybiometry).{0,40}\b([0-9a-z]{25,26})\b part: body - type: regex name: slack regex: - xox[baprs]-[0-9a-zA-Z]{10,48} part: body - type: regex name: slack_token regex: - (xox[pborsa]-[0-9]{12}-[0-9]{12}-[0-9]{12}-[a-z0-9]{32}) part: body - type: regex name: slack_webhook regex: - >- https://hooks.slack.com/services/T[a-zA-Z0-9_]{8,10}/B[a-zA-Z0-9_]{8,12}/[a-zA-Z0-9_]{23,24} part: body - type: regex name: slack_access_token regex: - xoxb-[0-9A-Za-z\-]{51} part: body - type: regex name: slackwebhook regex: - (https:\/\/hooks.slack.com\/services\/[A-Za-z0-9+\/]{44,46}) part: body - type: regex name: smartsheets regex: - (?:smartsheets).{0,40}\b([a-zA-Z0-9]{37})\b part: body - type: regex name: smartystreets_1 regex: - (?:smartystreets).{0,40}\b([a-zA-Z0-9]{20})\b part: body - type: regex name: smartystreets_2 regex: - (?:smartystreets).{0,40}\b([a-z0-9-]{36})\b part: body - type: regex name: smooch_1 regex: - (?:smooch).{0,40}\b(act_[0-9a-z]{24})\b part: body - type: regex name: smooch_2 regex: - (?:smooch).{0,40}\b([0-9a-zA-Z_-]{86})\b part: body - type: regex name: snipcart regex: - (?:snipcart).{0,40}\b([0-9A-Za-z_]{75})\b part: body - type: regex name: snykkey regex: - >- (?:snyk).{0,40}\b([0-9a-z]{8}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{12})\b part: body - type: regex name: sonarqube_token regex: - sonar.{0,50}(?:"|'|`)?[0-9a-f]{40}(?:"|'|`)? part: body - type: regex name: splunkobservabilitytoken regex: - (?:splunk).{0,40}\b([a-z0-9A-Z]{22})\b part: body - type: regex name: spoonacular regex: - (?:spoonacular).{0,40}\b([0-9a-z]{32})\b part: body - type: regex name: sportsmonk regex: - (?:sportsmonk).{0,40}\b([0-9a-zA-Z]{60})\b part: body - type: regex name: square regex: - (?:square).{0,40}(EAAA[a-zA-Z0-9\-\+\=]{60}) part: body - type: regex name: square_oauth_secret regex: - sq0csp-[0-9A-Za-z\-_]{43} part: body - type: regex name: square_access_token regex: - sq0atp-[0-9A-Za-z\-_]{22} part: body - type: regex name: squareapp_1 regex: - '[\w\-]*sq0i[a-z]{2}-[0-9A-Za-z\-_]{22,43}' part: body - type: regex name: squareapp_2 regex: - '[\w\-]*sq0c[a-z]{2}-[0-9A-Za-z\-_]{40,50}' part: body - type: regex name: squarespace regex: - >- (?:squarespace).{0,40}\b([0-9Aa-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\b part: body - type: regex name: squareup regex: - \b(sq0idp-[0-9A-Za-z]{22})\b part: body - type: regex name: sslmate regex: - (?:sslmate).{0,40}\b([a-zA-Z0-9]{36})\b part: body - type: regex name: stitchdata regex: - (?:stitchdata).{0,40}\b([0-9a-z_]{35})\b part: body - type: regex name: stockdata regex: - (?:stockdata).{0,40}\b([0-9A-Za-z]{40})\b part: body - type: regex name: storecove regex: - (?:storecove).{0,40}\b([a-zA-Z0-9_-]{43})\b part: body - type: regex name: stormglass regex: - (?:stormglass).{0,40}\b([0-9Aa-z-]{73})\b part: body - type: regex name: storyblok regex: - (?:storyblok).{0,40}\b([0-9A-Za-z]{22}t{2})\b part: body - type: regex name: storychief regex: - (?:storychief).{0,40}\b([a-zA-Z0-9_\-.]{940,1000}) part: body - type: regex name: strava_1 regex: - (?:strava).{0,40}\b([0-9]{5})\b part: body - type: regex name: strava_2 regex: - (?:strava).{0,40}\b([0-9a-z]{40})\b part: body - type: regex name: streak regex: - (?:streak).{0,40}\b([0-9Aa-f]{32})\b part: body - type: regex name: stripe regex: - '[rs]k_live_[a-zA-Z0-9]{20,30}' part: body - type: regex name: stripe_api_key_1 regex: - sk_live_[0-9a-zA-Z]{24} part: body - type: regex name: stripe_api_key_2 regex: - stripe[sr]k_live_[0-9a-zA-Z]{24} part: body - type: regex name: stripe_api_key_3 regex: - stripe[sk|rk]_live_[0-9a-zA-Z]{24} part: body - type: regex name: stripe_public_live_key regex: - pk_live_[0-9a-z]{24} part: body - type: regex name: stripe_public_test_key regex: - pk_test_[0-9a-z]{24} part: body - type: regex name: stripe_restriced_key regex: - rk_(?:live|test)_[0-9a-zA-Z]{24} part: body - type: regex name: stripe_restricted_api_key regex: - rk_live_[0-9a-zA-Z]{24} part: body - type: regex name: stripe_secret_key regex: - sk_(?:live|test)_[0-9a-zA-Z]{24} part: body - type: regex name: stripe_secret_live_key regex: - (sk|rk)_live_[0-9a-z]{24} part: body - type: regex name: stripe_secret_test_key regex: - (sk|rk)_test_[0-9a-z]{24} part: body - type: regex name: stytch_1 regex: - (?:stytch).{0,40}\b([a-zA-Z0-9-_]{47}=) part: body - type: regex name: stytch_2 regex: - (?:stytch).{0,40}\b([a-z0-9-]{49})\b part: body - type: regex name: sugester_1 regex: - (?:sugester).{0,40}\b([a-zA-Z0-9_.!+$#^*%]{3,32})\b part: body - type: regex name: sugester_2 regex: - (?:sugester).{0,40}\b([a-zA-Z0-9]{32})\b part: body - type: regex name: sumologickey_1 regex: - (?:sumo).{0,40}\b([A-Za-z0-9]{14})\b part: body - type: regex name: sumologickey_2 regex: - (?:sumo).{0,40}\b([A-Za-z0-9]{64})\b part: body - type: regex name: supernotesapi regex: - (?:supernotes).{0,40}([ \r\n]{0,1}[0-9A-Za-z\-_]{43}[ \r\n]{1}) part: body - type: regex name: surveybot regex: - (?:surveybot).{0,40}\b([A-Za-z0-9-]{80})\b part: body - type: regex name: surveysparrow regex: - (?:surveysparrow).{0,40}\b([a-zA-Z0-9-_]{88})\b part: body - type: regex name: survicate regex: - (?:survicate).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: swell_2 regex: - (?:swell).{0,40}\b([a-zA-Z0-9]{32})\b part: body - type: regex name: swiftype regex: - >- (?:swiftype).{0,40}\b([a-zA-z-0-9]{6}\_[a-zA-z-0-9]{6}\-[a-zA-z-0-9]{6})\b part: body - type: regex name: tallyfy regex: - >- (?:tallyfy).{0,40}\b([0-9A-Za-z]{36}\.[0-9A-Za-z]{264}\.[0-9A-Za-z\-\_]{683})\b part: body - type: regex name: tatumio regex: - (?:tatum).{0,40}\b([0-9a-z-]{36})\b part: body - type: regex name: taxjar regex: - (?:taxjar).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: teamgate_1 regex: - (?:teamgate).{0,40}\b([a-z0-9]{40})\b part: body - type: regex name: teamgate_2 regex: - (?:teamgate).{0,40}\b([a-zA-Z0-9]{80})\b part: body - type: regex name: teamworkcrm regex: - >- (?:teamwork|teamworkcrm).{0,40}\b(tkn\.v1_[0-9A-Za-z]{71}=[ \r\n]{1}) part: body - type: regex name: teamworkdesk regex: - >- (?:teamwork|teamworkdesk).{0,40}\b(tkn\.v1_[0-9A-Za-z]{71}=[ \r\n]{1}) part: body - type: regex name: teamworkspaces regex: - >- (?:teamwork|teamworkspaces).{0,40}\b(tkn\.v1_[0-9A-Za-z]{71}=[ \r\n]{1}) part: body - type: regex name: technicalanalysisapi regex: - (?:technicalanalysisapi).{0,40}\b([A-Z0-9]{48})\b part: body - type: regex name: telegram_bot_api_key regex: - '[0-9]+:AA[0-9A-Za-z\-_]{33}' part: body - type: regex name: telegram_secret regex: - d{5,}:A[0-9a-z_-]{34,34} part: body - type: regex name: telegrambottoken regex: - (?:telegram).{0,40}\b([0-9]{8,10}:[a-zA-Z0-9_-]{35})\b part: body - type: regex name: telnyx regex: - (?:telnyx).{0,40}\b(KEY[0-9A-Za-z_-]{55})\b part: body - type: regex name: terraformcloudpersonaltoken regex: - \b([A-Za-z0-9]{14}.atlasv1.[A-Za-z0-9]{67})\b part: body - type: regex name: text2data regex: - >- (?:text2data).{0,40}\b([0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12})\b part: body - type: regex name: textmagic_1 regex: - (?:textmagic).{0,40}\b([0-9A-Za-z]{30})\b part: body - type: regex name: textmagic_2 regex: - (?:textmagic).{0,40}\b([0-9A-Za-z]{1,25})\b part: body - type: regex name: theoddsapi regex: - (?:theoddsapi|the-odds-api).{0,40}\b([0-9a-f]{32})\b part: body - type: regex name: thinkific_1 regex: - (?:thinkific).{0,40}\b([0-9a-f]{32})\b part: body - type: regex name: thinkific_2 regex: - (?:thinkific).{0,40}\b([0-9A-Za-z]{4,40})\b part: body - type: regex name: thousandeyes_1 regex: - (?:thousandeyes).{0,40}\b([a-zA-Z0-9]{32})\b part: body - type: regex name: thousandeyes_2 regex: - >- (?:thousandeyes).{0,40}\b([a-zA-Z0-9]{3,20}@[a-zA-Z0-9]{2,12}.[a-zA-Z0-9]{2,5})\b part: body - type: regex name: ticketmaster regex: - (?:ticketmaster).{0,40}\b([a-zA-Z0-9]{32})\b part: body - type: regex name: tiingo regex: - (?:tiingo).{0,40}\b([0-9a-z]{40})\b part: body - type: regex name: timezoneapi regex: - (?:timezoneapi).{0,40}\b([a-zA-Z0-9]{20})\b part: body - type: regex name: tly regex: - (?:tly).{0,40}\b([0-9A-Za-z]{60})\b part: body - type: regex name: tmetric regex: - (?:tmetric).{0,40}\b([0-9A-Z]{64})\b part: body - type: regex name: todoist regex: - (?:todoist).{0,40}\b([0-9a-z]{40})\b part: body - type: regex name: toggltrack regex: - (?:toggl).{0,40}\b([0-9Aa-z]{32})\b part: body - type: regex name: tomorrowio regex: - (?:tomorrow).{0,40}\b([a-zA-Z0-9]{32})\b part: body - type: regex name: tomtom regex: - (?:tomtom).{0,40}\b([0-9Aa-zA-Z]{32})\b part: body - type: regex name: tradier regex: - (?:tradier).{0,40}\b([a-zA-Z0-9]{28})\b part: body - type: regex name: travelpayouts regex: - (?:travelpayouts).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: travisci regex: - (?:travis).{0,40}\b([a-zA-Z0-9A-Z_]{22})\b part: body - type: regex name: trello_url regex: - https://trello.com/b/[0-9a-z]/[0-9a-z_-]+ part: body - type: regex name: trelloapikey_2 regex: - (?:trello).{0,40}\b([a-zA-Z-0-9]{32})\b part: body - type: regex name: twelvedata regex: - (?:twelvedata).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: twilio_1 regex: - \bAC[0-9a-f]{32}\b part: body - type: regex name: twilio_api_key regex: - SK[0-9a-fA-F]{32} part: body - type: regex name: twitter_client_id regex: - twitter[0-9a-z]{18,25} part: body - type: regex name: twitter_secret_key regex: - twitter[0-9a-z]{35,44} part: body - type: regex name: tyntec regex: - (?:tyntec).{0,40}\b([a-zA-Z0-9]{32})\b part: body - type: regex name: typeform regex: - (?:typeform).{0,40}\b([0-9A-Za-z]{44})\b part: body - type: regex name: ubidots regex: - \b(BBFF-[0-9a-zA-Z]{30})\b part: body - type: regex name: unifyid regex: - (?:unify).{0,40}\b([0-9A-Za-z_=-]{44}) part: body - type: regex name: unplugg regex: - (?:unplu).{0,40}\b([a-z0-9]{64})\b part: body - type: regex name: unsplash regex: - (?:unsplash).{0,40}\b([0-9A-Za-z_]{43})\b part: body - type: regex name: upcdatabase regex: - (?:upcdatabase).{0,40}\b([A-Z0-9]{32})\b part: body - type: regex name: uplead regex: - (?:uplead).{0,40}\b([a-z0-9-]{32})\b part: body - type: regex name: uploadcare regex: - (?:uploadcare).{0,40}\b([a-z0-9]{20})\b part: body - type: regex name: upwave regex: - (?:upwave).{0,40}\b([0-9a-z]{32})\b part: body - type: regex name: urlscan regex: - (?:urlscan).{0,40}\b([a-z0-9-]{36})\b part: body - type: regex name: userstack regex: - (?:userstack).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: vatlayer regex: - (?:vatlayer).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: vercel regex: - (?:vercel).{0,40}\b([a-zA-Z0-9]{24})\b part: body - type: regex name: verifier_1 regex: - >- (?:verifier).{0,40}\b([a-zA-Z-0-9-]{5,16}\@[a-zA-Z-0-9]{4,16}\.[a-zA-Z-0-9]{3,6})\b part: body - type: regex name: verifier_2 regex: - (?:verifier).{0,40}\b([a-z0-9]{96})\b part: body - type: regex name: verimail regex: - (?:verimail).{0,40}\b([A-Z0-9]{32})\b part: body - type: regex name: veriphone regex: - (?:veriphone).{0,40}\b([0-9A-Z]{32})\b part: body - type: regex name: versioneye regex: - (?:versioneye).{0,40}\b([a-zA-Z0-9-]{40})\b part: body - type: regex name: viewneo regex: - >- (?:viewneo).{0,40}\b([a-z0-9A-Z]{120,300}.[a-z0-9A-Z]{150,300}.[a-z0-9A-Z-_]{600,800}) part: body - type: regex name: virustotal regex: - (?:virustotal).{0,40}\b([a-f0-9]{64})\b part: body - type: regex name: visualcrossing regex: - (?:visualcrossing).{0,40}\b([0-9A-Z]{25})\b part: body - type: regex name: voicegain regex: - >- (?:voicegain).{0,40}\b(ey[0-9a-zA-Z_-]{34}.ey[0-9a-zA-Z_-]{108}.[0-9a-zA-Z_-]{43})\b part: body - type: regex name: vouchery_1 regex: - (?:vouchery).{0,40}\b([a-z0-9-]{36})\b part: body - type: regex name: vouchery_2 regex: - (?:vouchery).{0,40}\b([a-zA-Z0-9-\S]{2,20})\b part: body - type: regex name: vpnapi regex: - (?:vpnapi).{0,40}\b([a-z0-9A-Z]{32})\b part: body - type: regex name: vultrapikey regex: - (?:vultr).{0,40} \b([A-Z0-9]{36})\b part: body - type: regex name: vyte regex: - (?:vyte).{0,40}\b([0-9a-z]{50})\b part: body - type: regex name: walkscore regex: - (?:walkscore).{0,40}\b([0-9a-z]{32})\b part: body - type: regex name: weatherbit regex: - (?:weatherbit).{0,40}\b([0-9a-z]{32})\b part: body - type: regex name: weatherstack regex: - (?:weatherstack).{0,40}\b([0-9a-z]{32})\b part: body - type: regex name: webex_1 regex: - (?:error).{0,40}(redirect_uri_mismatch) part: body - type: regex name: webex_2 regex: - (?:webex).{0,40}\b([A-Za-z0-9_-]{65})\b part: body - type: regex name: webex_3 regex: - (?:webex).{0,40}\b([A-Za-z0-9_-]{64})\b part: body - type: regex name: webflow regex: - (?:webflow).{0,40}\b([a-zA0-9]{64})\b part: body - type: regex name: webscraper regex: - (?:webscraper).{0,40}\b([a-zA-Z0-9]{60})\b part: body - type: regex name: webscraping regex: - (?:webscraping).{0,40}\b([0-9A-Za-z]{32})\b part: body - type: regex name: wepay_2 regex: - (?:wepay).{0,40}\b([a-zA-Z0-9_?]{62})\b part: body - type: regex name: whoxy regex: - (?:whoxy).{0,40}\b([0-9a-z]{33})\b part: body - type: regex name: worksnaps regex: - (?:worksnaps).{0,40}\b([0-9A-Za-z]{40})\b part: body - type: regex name: workstack regex: - (?:workstack).{0,40}\b([0-9Aa-zA-Z]{60})\b part: body - type: regex name: worldcoinindex regex: - (?:worldcoinindex).{0,40}\b([a-zA-Z0-9]{35})\b part: body - type: regex name: worldweather regex: - (?:worldweather).{0,40}\b([0-9a-z]{31})\b part: body - type: regex name: wrike regex: - (?:wrike).{0,40}\b(ey[a-zA-Z0-9-._]{333})\b part: body - type: regex name: yandex regex: - (?:yandex).{0,40}\b([a-z0-9A-Z.]{83})\b part: body - type: regex name: youneedabudget regex: - (?:youneedabudget).{0,40}\b([0-9a-f]{64})\b part: body - type: regex name: yousign regex: - (?:yousign).{0,40}\b([0-9a-z]{32})\b part: body - type: regex name: zapierwebhook regex: - (https:\/\/hooks.zapier.com\/hooks\/catch\/[A-Za-z0-9\/]{16}) part: body - type: regex name: zendeskapi_3 regex: - (?:zendesk).{0,40}([A-Za-z0-9_-]{40}) part: body - type: regex name: zenkitapi regex: - (?:zenkit).{0,40}\b([0-9a-z]{8}\-[0-9A-Za-z]{32})\b part: body - type: regex name: zenscrape regex: - >- (?:zenscrape).{0,40}\b([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\b part: body - type: regex name: zenserp regex: - (?:zenserp).{0,40}\b([0-9a-z-]{36})\b part: body - type: regex name: zeplin regex: - (?:zeplin).{0,40}\b([a-zA-Z0-9-.]{350,400})\b part: body - type: regex name: zerobounce regex: - (?:zerobounce).{0,40}\b([a-z0-9]{32})\b part: body - type: regex name: zipapi_1 regex: - (?:zipapi).{0,40}\b([a-zA-Z0-9!=@#$%^]{7,}) part: body - type: regex name: zipapi_3 regex: - (?:zipapi).{0,40}\b([0-9a-z]{32})\b part: body - type: regex name: zipcodeapi regex: - (?:zipcodeapi).{0,40}\b([a-zA-Z0-9]{64})\b part: body - type: regex name: zonkafeedback regex: - (?:zonka).{0,40}\b([A-Za-z0-9]{36})\b part: body - type: regex name: amazon_secret_access_key regex: - amazon[_-]?secret[_-]?access[_-]?key(=| =|:| :) part: body - type: regex name: ansible_vault_password regex: - ansible[_-]?vault[_-]?password(=| =|:| :) part: body - type: regex name: chrome_client_secret regex: - chrome[_-]?client[_-]?secret(=| =|:| :) part: body - type: regex name: chrome_refresh_token regex: - chrome[_-]?refresh[_-]?token(=| =|:| :) part: body - type: regex name: ci_deploy_password regex: - ci[_-]?deploy[_-]?password(=| =|:| :) part: body - type: regex name: ci_project_url regex: - ci[_-]?project[_-]?url(=| =|:| :) part: body - type: regex name: ci_registry_user regex: - ci[_-]?registry[_-]?user(=| =|:| :) part: body - type: regex name: ci_server_name regex: - ci[_-]?server[_-]?name(=| =|:| :) part: body - type: regex name: cloud_api_key regex: - cloud[_-]?api[_-]?key(=| =|:| :) part: body - type: regex name: cloudflare_api_key regex: - cloudflare[_-]?api[_-]?key(=| =|:| :) part: body - type: regex name: cloudflare_auth_email regex: - cloudflare[_-]?auth[_-]?email(=| =|:| :) part: body - type: regex name: consumer_key regex: - consumer[_-]?key(=| =|:| :) part: body - type: regex name: database_username regex: - database[_-]?username(=| =|:| :) part: body - type: regex name: db_password regex: - db[_-]?password(=| =|:| :) part: body - type: regex name: db_pw regex: - db[_-]?pw(=| =|:| :) part: body - type: regex name: docker_hub_password regex: - docker[_-]?hub[_-]?password(=| =|:| :) part: body - type: regex name: docker_passwd regex: - docker[_-]?passwd(=| =|:| :) part: body - type: regex name: docker_password regex: - docker[_-]?password(=| =|:| :) part: body - type: regex name: docker_token regex: - docker[_-]?token(=| =|:| :) part: body - type: regex name: dockerhub_password regex: - dockerhub[_-]?password(=| =|:| :) part: body - type: regex name: doordash_auth_token regex: - doordash[_-]?auth[_-]?token(=| =|:| :) part: body - type: regex name: dropbox_oauth_bearer regex: - dropbox[_-]?oauth[_-]?bearer(=| =|:| :) part: body - type: regex name: droplet_travis_password regex: - droplet[_-]?travis[_-]?password(=| =|:| :) part: body - type: regex name: env_github_oauth_token regex: - env[_-]?github[_-]?oauth[_-]?token(=| =|:| :) part: body - type: regex name: env_heroku_api_key regex: - env[_-]?heroku[_-]?api[_-]?key(=| =|:| :) part: body - type: regex name: facebook_access_token regex: - (EAACEdEose0cBA[0-9A-Za-z]+) part: body - type: regex name: firebase_api_json regex: - firebase[_-]?api[_-]?json(=| =|:| :) part: body - type: regex name: firebase_api_token regex: - firebase[_-]?api[_-]?token(=| =|:| :) part: body - type: regex name: firebase_key regex: - firebase[_-]?key(=| =|:| :) part: body - type: regex name: firebase_token regex: - firebase[_-]?token(=| =|:| :) part: body - type: regex name: firefox_secret regex: - firefox[_-]?secret(=| =|:| :) part: body - type: regex name: ftp_pw regex: - ftp[_-]?pw(=| =|:| :) part: body - type: regex name: gh_api_key regex: - gh[_-]?api[_-]?key(=| =|:| :) part: body - type: regex name: github_api_key regex: - github[_-]?api[_-]?key(=| =|:| :) part: body - type: regex name: github_oauth regex: - github[_-]?oauth(=| =|:| :) part: body - type: regex name: github_token regex: - github[_-]?token(=| =|:| :) part: body - type: regex name: github_tokens regex: - github[_-]?tokens(=| =|:| :) part: body - type: regex name: google_client_id regex: - google[_-]?client[_-]?id(=| =|:| :) part: body - type: regex name: google_client_secret regex: - google[_-]?client[_-]?secret(=| =|:| :) part: body - type: regex name: google_maps_api_key regex: - google[_-]?maps[_-]?api[_-]?key(=| =|:| :) part: body - type: regex name: google_oauth regex: - (ya29.[0-9A-Za-z-_]+) part: body - type: regex name: mailchimp regex: - (W(?:[a-f0-9]{32}(-us[0-9]{1,2}))a-zA-Z0-9) part: body - type: regex name: mailgun_priv_key regex: - mailgun[_-]?priv[_-]?key(=| =|:| :) part: body - type: regex name: mailgun_secret_api_key regex: - mailgun[_-]?secret[_-]?api[_-]?key(=| =|:| :) part: body - type: regex name: master_password regex: - (master_password).+ part: body - type: regex name: mg_public_api_key regex: - mg[_-]?public[_-]?api[_-]?key(=| =|:| :) part: body - type: regex name: mysql_root_password regex: - mysql[_-]?root[_-]?password(=| =|:| :) part: body - type: regex name: netlify_api_key regex: - netlify[_-]?api[_-]?key(=| =|:| :) part: body - type: regex name: rabbitmq_password regex: - rabbitmq[_-]?password(=| =|:| :) part: body - type: regex name: rediscloud_url regex: - rediscloud[_-]?url(=| =|:| :) part: body - type: regex name: release_gh_token regex: - release[_-]?gh[_-]?token(=| =|:| :) part: body - type: regex name: rubygems_auth_token regex: - rubygems[_-]?auth[_-]?token(=| =|:| :) part: body - type: regex name: travis_secure_env_vars regex: - travis[_-]?secure[_-]?env[_-]?vars(=| =|:| :) part: body - type: regex name: travis_token regex: - travis[_-]?token(=| =|:| :) part: body - type: regex name: twilio_api_key regex: - twilio[_-]?api[_-]?key(=| =|:| :) part: body - type: regex name: twilio_api_secret regex: - twilio[_-]?api[_-]?secret(=| =|:| :) part: body - type: regex name: twilio_chat_account_api_service regex: - twilio[_-]?chat[_-]?account[_-]?api[_-]?service(=| =|:| :) part: body - type: regex name: twilio_token regex: - twilio[_-]?token(=| =|:| :) part: body - type: regex name: twitter_consumer_key regex: - twitter[_-]?consumer[_-]?key(=| =|:| :) part: body - type: regex name: twitter_consumer_secret regex: - twitter[_-]?consumer[_-]?secret(=| =|:| :) part: body - type: regex name: twitteroauthaccesssecret regex: - twitteroauthaccesssecret(=| =|:| :) part: body - type: regex name: twitteroauthaccesstoken regex: - twitteroauthaccesstoken(=| =|:| :) part: body - type: regex name: urban_master_secret regex: - urban[_-]?master[_-]?secret(=| =|:| :) part: body - type: regex name: use_ssh regex: - use[_-]?ssh(=| =|:| :) part: body - type: regex name: user_assets_access_key_id regex: - user[_-]?assets[_-]?access[_-]?key[_-]?id(=| =|:| :) part: body - type: regex name: virustotal_apikey regex: - virustotal[_-]?apikey(=| =|:| :) part: body# digest: 490a00463044022073e1bbd0f76b2de5f173ec157570e3cb695cdcd869766e016c36b07f791d4a7002205af4daa53077f262d437409394a250a3702a7b440af6cb4770102822b0491e2d:922c64590222798bb761d5b6d8e72950Guide to check the vulnerabilities
Section titled “Guide to check the vulnerabilities”This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.
$ nuclei -u "URL" -t "http/global-matchers/secrets-patterns-rules.yaml"