Merge pull request #150 from SnaffCon/dashbfix

some stuff i didn't actually commit in the rulezzzz branch :grimace:

Author: l0ss

Snaffler/Config.cs

@@ -312,7 +312,7 @@ private static Options ParseImpl(string[] args)
                         pathTarget = dirTargetArg.Value.TrimEnd('\\');
                     }
                     parsedConfig.PathTargets.Add(pathTarget);
-                    Console.WriteLine(parsedConfig.PathTargets[0]);
+                    //Console.WriteLine(parsedConfig.PathTargets[0]);
                     Mq.Degub("Disabled finding shares.");
                     Mq.Degub("Target path is " + dirTargetArg.Value);
                 }

Snaffler/SnaffRules/DefaultRules/FileRules/Keep/Code/GenericConfig/KeepConfigByName.toml

@@ -6,5 +6,6 @@ Description = "Files with these exact names are very interesting."
 MatchLocation = "FileName"
 WordListType = "Exact"
 MatchLength = 0
-WordList = ["\\.htpasswd"]
+WordList = ["\\.htpasswd",
+"accounts\\.v4"]
 Triage = "Red"

Snaffler/SnaffRules/DefaultRules/FileRules/Keep/Code/KeepPassOrKeyInCode.toml

@@ -13,6 +13,7 @@ WordList = ["passw?o?r?d\\s*=\\s*[\\'\\\"][^\\'\\\"]....",
 "api[kK]ey>\\s*[^\\s<]+\\s*<",
 "[_\\-\\.]oauth\\s*=\\s*[\\'\\\"][^\\'\\\"]....",
 "client_secret\\s*=\\s*[\\'\\\"][^\\'\\\"]....",
-"<ExtendedMatchKey>ClientAuth"
+"<ExtendedMatchKey>ClientAuth",
+"GIUserPassword"
 ]
 Triage = "Red"

Snaffler/SnaffRules/DefaultRules/FileRules/Keep/UserFiles/PassMgrs/KeepPasswordFilesByName.toml

@@ -25,5 +25,6 @@ WordList = ["passwords\\.txt",
 "secrets\\.doc",
 "secrets\\.xls",
 "secrets\\.docx",
+"BitlockerLAPSPasswords\\.csv",
 "secrets\\.xlsx"]
 Triage = "Red"