Skip to content

Commit e938f60

Browse files
authored
Update KeepPassOrKeyInCode.toml
Additional detection of unquoted credentials which are used with for example the parameter -password
1 parent 429ad8b commit e938f60

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

Snaffler/SnaffRules/DefaultRules/FileRules/Keep/Code/KeepPassOrKeyInCode.toml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,7 @@ WordList = ["passw?o?r?d\\s*=\\s*[\\'\\\"][^\\'\\\"]....",
1010
"api[Kk]ey\\s*=\\s*[\\'\\\"][^\\'\\\"]....",
1111
"passw?o?r?d?>\\s*[^\\s<]+\\s*<",
1212
"passw?o?r?d?>.{3,2000}</pass",
13+
"-passw?o?r?d?",
1314
"api[kK]ey>\\s*[^\\s<]+\\s*<",
1415
"[_\\-\\.]oauth\\s*=\\s*[\\'\\\"][^\\'\\\"]....",
1516
"client_secret\\s*=\\s*[\\'\\\"][^\\'\\\"]....",

0 commit comments

Comments
 (0)