mirror of
https://github.com/projectdiscovery/nuclei-templates.git
synced 2026-02-12 05:33:26 +08:00
4503 lines
118 KiB
YAML
4503 lines
118 KiB
YAML
id: secrets-patterns-rules
|
|
|
|
info:
|
|
name: Secrets Patterns (Rules)
|
|
author: dwisiswant0
|
|
reference:
|
|
- https://github.com/mazen160/secrets-patterns-db # db/rules-stable.yml (151eaf659f3bcac3f81161808765eaa91045f2c7)
|
|
severity: info
|
|
tags: global-matchers,exposure,token,key,api,secret,password,generic
|
|
|
|
http:
|
|
- global-matchers: true
|
|
extractors:
|
|
- type: regex
|
|
name: aws_api_key
|
|
regex:
|
|
- AKIA[0-9A-Z]{16}
|
|
part: body
|
|
- type: regex
|
|
name: aws_arn
|
|
regex:
|
|
- arn:aws:[a-z0-9-]+:[a-z]{2}-[a-z]+-[0-9]+:[0-9]+:.+
|
|
part: body
|
|
- type: regex
|
|
name: aws_access_key_id_value
|
|
regex:
|
|
- (A3T[A-Z0-9]|AKIA|AGPA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}
|
|
part: body
|
|
- type: regex
|
|
name: aws_appsync_graphql_key
|
|
regex:
|
|
- da2-[a-z0-9]{26}
|
|
part: body
|
|
- type: regex
|
|
name: aws_mws_key
|
|
regex:
|
|
- >-
|
|
amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}
|
|
part: body
|
|
- type: regex
|
|
name: aws_rds
|
|
regex:
|
|
- '[0-9a-z._-]+.rds.amazonaws.com'
|
|
part: body
|
|
- type: regex
|
|
name: aws_s3_bucket
|
|
regex:
|
|
- s3://[0-9a-z._/-]+
|
|
part: body
|
|
- type: regex
|
|
name: aws_cred_file_info
|
|
regex:
|
|
- (aws_access_key_id|aws_secret_access_key)
|
|
part: body
|
|
- type: regex
|
|
name: abbysale
|
|
regex:
|
|
- (?:abbysale).{0,40}\b([a-z0-9A-Z]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: abstract
|
|
regex:
|
|
- (?:abstract).{0,40}\b([0-9a-z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: abuseipdb
|
|
regex:
|
|
- (?:abuseipdb).{0,40}\b([a-z0-9]{80})\b
|
|
part: body
|
|
- type: regex
|
|
name: accuweather
|
|
regex:
|
|
- (?:accuweather).{0,40}([a-z0-9A-Z\%]{35})\b
|
|
part: body
|
|
- type: regex
|
|
name: adafruitio
|
|
regex:
|
|
- \b(aio\_[a-zA-Z0-9]{28})\b
|
|
part: body
|
|
- type: regex
|
|
name: adobeio_1
|
|
regex:
|
|
- (?:adobe).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: adzuna_1
|
|
regex:
|
|
- (?:adzuna).{0,40}\b([a-z0-9]{8})\b
|
|
part: body
|
|
- type: regex
|
|
name: adzuna_2
|
|
regex:
|
|
- (?:adzuna).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: aeroworkflow_1
|
|
regex:
|
|
- (?:aeroworkflow).{0,40}\b([0-9]{1,})\b
|
|
part: body
|
|
- type: regex
|
|
name: aeroworkflow_2
|
|
regex:
|
|
- (?:aeroworkflow).{0,40}\b([a-zA-Z0-9^!]{20})\b
|
|
part: body
|
|
- type: regex
|
|
name: agora
|
|
regex:
|
|
- (?:agora).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: airbrakeprojectkey_1
|
|
regex:
|
|
- (?:airbrake).{0,40}\b([0-9]{6})\b
|
|
part: body
|
|
- type: regex
|
|
name: airbrakeprojectkey_2
|
|
regex:
|
|
- (?:airbrake).{0,40}\b([a-zA-Z-0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: airbrakeuserkey
|
|
regex:
|
|
- (?:airbrake).{0,40}\b([a-zA-Z-0-9]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: airship
|
|
regex:
|
|
- (?:airship).{0,40}\b([0-9Aa-zA-Z]{91})\b
|
|
part: body
|
|
- type: regex
|
|
name: airvisual
|
|
regex:
|
|
- (?:airvisual).{0,40}\b([a-z0-9-]{36})\b
|
|
part: body
|
|
- type: regex
|
|
name: alconost
|
|
regex:
|
|
- (?:alconost).{0,40}\b([0-9Aa-z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: alegra_1
|
|
regex:
|
|
- (?:alegra).{0,40}\b([a-z0-9-]{20})\b
|
|
part: body
|
|
- type: regex
|
|
name: alegra_2
|
|
regex:
|
|
- (?:alegra).{0,40}\b([a-zA-Z0-9.-@]{25,30})\b
|
|
part: body
|
|
- type: regex
|
|
name: aletheiaapi
|
|
regex:
|
|
- (?:aletheiaapi).{0,40}\b([A-Z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: alibaba_2
|
|
regex:
|
|
- \b(LTAI[a-zA-Z0-9]{17,21})[\"' ;\s]*
|
|
part: body
|
|
- type: regex
|
|
name: alienvault
|
|
regex:
|
|
- (?:alienvault).{0,40}\b([a-z0-9]{64})\b
|
|
part: body
|
|
- type: regex
|
|
name: allsports
|
|
regex:
|
|
- (?:allsports).{0,40}\b([0-9a-z]{64})\b
|
|
part: body
|
|
- type: regex
|
|
name: amadeus_1
|
|
regex:
|
|
- (?:amadeus).{0,40}\b([0-9A-Za-z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: amadeus_2
|
|
regex:
|
|
- (?:amadeus).{0,40}\b([0-9A-Za-z]{16})\b
|
|
part: body
|
|
- type: regex
|
|
name: ambee
|
|
regex:
|
|
- (?:ambee).{0,40}\b([0-9a-f]{64})\b
|
|
part: body
|
|
- type: regex
|
|
name: amplitudeapikey
|
|
regex:
|
|
- (?:amplitude).{0,40}\b([a-f0-9]{32})
|
|
part: body
|
|
- type: regex
|
|
name: apacta
|
|
regex:
|
|
- (?:apacta).{0,40}\b([a-z0-9-]{36})\b
|
|
part: body
|
|
- type: regex
|
|
name: api2cart
|
|
regex:
|
|
- (?:api2cart).{0,40}\b([0-9a-f]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: apideck_1
|
|
regex:
|
|
- \b(sk_live_[a-z0-9A-Z-]{93})\b
|
|
part: body
|
|
- type: regex
|
|
name: apideck_2
|
|
regex:
|
|
- (?:apideck).{0,40}\b([a-z0-9A-Z]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: apiflash_1
|
|
regex:
|
|
- (?:apiflash).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: apiflash_2
|
|
regex:
|
|
- (?:apiflash).{0,40}\b([a-zA-Z0-9\S]{21,30})\b
|
|
part: body
|
|
- type: regex
|
|
name: apifonica
|
|
regex:
|
|
- >-
|
|
(?:apifonica).{0,40}\b([0-9a-z]{11}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{12})\b
|
|
part: body
|
|
- type: regex
|
|
name: apify
|
|
regex:
|
|
- \b(apify\_api\_[a-zA-Z-0-9]{36})\b
|
|
part: body
|
|
- type: regex
|
|
name: apimatic_1
|
|
regex:
|
|
- (?:apimatic).{0,40}\b([a-z0-9-\S]{8,32})\b
|
|
part: body
|
|
- type: regex
|
|
name: apimatic_2
|
|
regex:
|
|
- >-
|
|
(?:apimatic).{0,40}\b([a-zA-Z0-9]{3,20}@[a-zA-Z0-9]{2,12}.[a-zA-Z0-9]{2,5})\b
|
|
part: body
|
|
- type: regex
|
|
name: apiscience
|
|
regex:
|
|
- (?:apiscience).{0,40}\b([a-bA-Z0-9\S]{22})\b
|
|
part: body
|
|
- type: regex
|
|
name: apollo
|
|
regex:
|
|
- (?:apollo).{0,40}\b([a-zA-Z0-9]{22})\b
|
|
part: body
|
|
- type: regex
|
|
name: appcues_1
|
|
regex:
|
|
- (?:appcues).{0,40}\b([0-9]{5})\b
|
|
part: body
|
|
- type: regex
|
|
name: appcues_2
|
|
regex:
|
|
- (?:appcues).{0,40}\b([a-z0-9-]{36})\b
|
|
part: body
|
|
- type: regex
|
|
name: appcues_3
|
|
regex:
|
|
- (?:appcues).{0,40}\b([a-z0-9-]{39})\b
|
|
part: body
|
|
- type: regex
|
|
name: appfollow
|
|
regex:
|
|
- (?:appfollow).{0,40}\b([0-9A-Za-z]{20})\b
|
|
part: body
|
|
- type: regex
|
|
name: appsynergy
|
|
regex:
|
|
- (?:appsynergy).{0,40}\b([a-z0-9]{64})\b
|
|
part: body
|
|
- type: regex
|
|
name: apptivo_1
|
|
regex:
|
|
- (?:apptivo).{0,40}\b([a-z0-9-]{36})\b
|
|
part: body
|
|
- type: regex
|
|
name: apptivo_2
|
|
regex:
|
|
- (?:apptivo).{0,40}\b([a-zA-Z0-9-]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: artifactory_2
|
|
regex:
|
|
- \b([A-Za-z0-9](?:[A-Za-z0-9\-]{0,61}[A-Za-z0-9])\.jfrog\.io)
|
|
part: body
|
|
- type: regex
|
|
name: artsy_1
|
|
regex:
|
|
- (?:artsy).{0,40}\b([0-9a-zA-Z]{20})\b
|
|
part: body
|
|
- type: regex
|
|
name: artsy_2
|
|
regex:
|
|
- (?:artsy).{0,40}\b([0-9a-zA-Z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: asanaoauth
|
|
regex:
|
|
- (?:asana).{0,40}\b([a-z\/:0-9]{51})\b
|
|
part: body
|
|
- type: regex
|
|
name: asanapersonalaccesstoken
|
|
regex:
|
|
- (?:asana).{0,40}\b([0-9]{1,}\/[0-9]{16,}:[A-Za-z0-9]{32,})\b
|
|
part: body
|
|
- type: regex
|
|
name: assemblyai
|
|
regex:
|
|
- (?:assemblyai).{0,40}\b([0-9a-z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: asymmetric_private_key
|
|
regex:
|
|
- '-----BEGIN ((EC|PGP|DSA|RSA|OPENSSH) )?PRIVATE KEY( BLOCK)?-----'
|
|
part: body
|
|
- type: regex
|
|
name: audd
|
|
regex:
|
|
- (?:audd).{0,40}\b([a-z0-9-]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: auth0managementapitoken
|
|
regex:
|
|
- (?:auth0).{0,40}\b(ey[a-zA-Z0-9._-]+)\b
|
|
part: body
|
|
- type: regex
|
|
name: autodesk_1
|
|
regex:
|
|
- (?:autodesk).{0,40}\b([0-9A-Za-z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: autodesk_2
|
|
regex:
|
|
- (?:autodesk).{0,40}\b([0-9A-Za-z]{16})\b
|
|
part: body
|
|
- type: regex
|
|
name: autoklose
|
|
regex:
|
|
- (?:autoklose).{0,40}\b([a-zA-Z0-9-]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: autopilot
|
|
regex:
|
|
- (?:autopilot).{0,40}\b([0-9a-f]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: avazapersonalaccesstoken
|
|
regex:
|
|
- (?:avaza).{0,40}\b([0-9]+-[0-9a-f]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: aviationstack
|
|
regex:
|
|
- (?:aviationstack).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: aws_1
|
|
regex:
|
|
- \b((?:AKIA|ABIA|ACCA|ASIA)[0-9A-Z]{16})\b
|
|
part: body
|
|
- type: regex
|
|
name: axonaut
|
|
regex:
|
|
- (?:axonaut).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: aylien_1
|
|
regex:
|
|
- (?:aylien).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: aylien_2
|
|
regex:
|
|
- (?:aylien).{0,40}\b([a-z0-9]{8})\b
|
|
part: body
|
|
- type: regex
|
|
name: ayrshare
|
|
regex:
|
|
- >-
|
|
(?:ayrshare).{0,40}\b([A-Z]{7}-[A-Z0-9]{7}-[A-Z0-9]{7}-[A-Z0-9]{7})\b
|
|
part: body
|
|
- type: regex
|
|
name: bannerbear
|
|
regex:
|
|
- (?:bannerbear).{0,40}\b([0-9a-zA-Z]{22}tt)\b
|
|
part: body
|
|
- type: regex
|
|
name: baremetrics
|
|
regex:
|
|
- (?:baremetrics).{0,40}\b([a-zA-Z0-9_]{25})\b
|
|
part: body
|
|
- type: regex
|
|
name: baseapiio
|
|
regex:
|
|
- >-
|
|
(?:baseapi|base-api).{0,40}\b([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\b
|
|
part: body
|
|
- type: regex
|
|
name: beamer
|
|
regex:
|
|
- (?:beamer).{0,40}\b([a-zA-Z0-9_+/]{45}=)
|
|
part: body
|
|
- type: regex
|
|
name: beebole
|
|
regex:
|
|
- (?:beebole).{0,40}\b([0-9a-z]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: besttime
|
|
regex:
|
|
- (?:besttime).{0,40}\b([0-9A-Za-z_]{36})\b
|
|
part: body
|
|
- type: regex
|
|
name: billomat_1
|
|
regex:
|
|
- (?:billomat).{0,40}\b([0-9a-z]{1,})\b
|
|
part: body
|
|
- type: regex
|
|
name: billomat_2
|
|
regex:
|
|
- (?:billomat).{0,40}\b([0-9a-z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: bitbar
|
|
regex:
|
|
- (?:bitbar).{0,40}\b([0-9a-z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: bitcoinaverage
|
|
regex:
|
|
- (?:bitcoinaverage).{0,40}\b([a-zA-Z0-9]{43})\b
|
|
part: body
|
|
- type: regex
|
|
name: bitfinex
|
|
regex:
|
|
- (?:bitfinex).{0,40}\b([A-Za-z0-9_-]{43})\b
|
|
part: body
|
|
- type: regex
|
|
name: bitly_secret_key
|
|
regex:
|
|
- R_[0-9a-f]{32}
|
|
part: body
|
|
- type: regex
|
|
name: bitlyaccesstoken
|
|
regex:
|
|
- (?:bitly).{0,40}\b([a-zA-Z-0-9]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: bitmex_1
|
|
regex:
|
|
- (?:bitmex).{0,40}([ \r\n]{1}[0-9a-zA-Z\-\_]{24}[ \r\n]{1})
|
|
part: body
|
|
- type: regex
|
|
name: bitmex_2
|
|
regex:
|
|
- (?:bitmex).{0,40}([ \r\n]{1}[0-9a-zA-Z\-\_]{48}[ \r\n]{1})
|
|
part: body
|
|
- type: regex
|
|
name: blablabus
|
|
regex:
|
|
- (?:blablabus).{0,40}\b([0-9A-Za-z]{22})\b
|
|
part: body
|
|
- type: regex
|
|
name: blazemeter
|
|
regex:
|
|
- >-
|
|
(?:blazemeter|runscope).{0,40}\b([0-9a-z]{8}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{12})\b
|
|
part: body
|
|
- type: regex
|
|
name: blitapp
|
|
regex:
|
|
- (?:blitapp).{0,40}\b([a-zA-Z0-9_-]{39})\b
|
|
part: body
|
|
- type: regex
|
|
name: bombbomb
|
|
regex:
|
|
- (?:bombbomb).{0,40}\b([a-zA-Z0-9-._]{704})\b
|
|
part: body
|
|
- type: regex
|
|
name: boostnote
|
|
regex:
|
|
- (?:boostnote).{0,40}\b([0-9a-f]{64})\b
|
|
part: body
|
|
- type: regex
|
|
name: borgbase
|
|
regex:
|
|
- (?:borgbase).{0,40}\b([a-zA-Z0-9/_.-]{148,152})\b
|
|
part: body
|
|
- type: regex
|
|
name: braintree_api_key
|
|
regex:
|
|
- access_token$production$[0-9a-z]{16}$[0-9a-f]{32}
|
|
part: body
|
|
- type: regex
|
|
name: brandfetch
|
|
regex:
|
|
- (?:brandfetch).{0,40}\b([0-9A-Za-z]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: browshot
|
|
regex:
|
|
- (?:browshot).{0,40}\b([a-zA-Z-0-9]{28})\b
|
|
part: body
|
|
- type: regex
|
|
name: buddyns
|
|
regex:
|
|
- (?:buddyns).{0,40}\b([0-9a-z]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: bugherd
|
|
regex:
|
|
- (?:bugherd).{0,40}\b([0-9a-z]{22})\b
|
|
part: body
|
|
- type: regex
|
|
name: bugsnag
|
|
regex:
|
|
- >-
|
|
(?:bugsnag).{0,40}\b([0-9a-z]{8}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{12})\b
|
|
part: body
|
|
- type: regex
|
|
name: buildkite
|
|
regex:
|
|
- (?:buildkite).{0,40}\b([a-z0-9]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: bulbul
|
|
regex:
|
|
- (?:bulbul).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: buttercms
|
|
regex:
|
|
- (?:buttercms).{0,40}\b([a-z0-9]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: caflou
|
|
regex:
|
|
- (?:caflou).{0,40}\b([a-bA-Z0-9\S]{155})\b
|
|
part: body
|
|
- type: regex
|
|
name: calendarific
|
|
regex:
|
|
- (?:calendarific).{0,40}\b([a-z0-9]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: calendlyapikey
|
|
regex:
|
|
- >-
|
|
(?:calendly).{0,40}\b([a-zA-Z-0-9]{20}.[a-zA-Z-0-9]{171}.[a-zA-Z-0-9_]{43})\b
|
|
part: body
|
|
- type: regex
|
|
name: calorieninja
|
|
regex:
|
|
- (?:calorieninja).{0,40}\b([0-9A-Za-z]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: campayn
|
|
regex:
|
|
- (?:campayn).{0,40}\b([a-z0-9]{64})\b
|
|
part: body
|
|
- type: regex
|
|
name: cannyio
|
|
regex:
|
|
- >-
|
|
(?:canny).{0,40}\b([a-z0-9]{8}-[a-z0-9]{4}-[a-z0-9]{4}-[0-9]{4}-[a-z0-9]{12})\b
|
|
part: body
|
|
- type: regex
|
|
name: capsulecrm
|
|
regex:
|
|
- (?:capsulecrm).{0,40}\b([a-zA-Z0-9-._+=]{64})\b
|
|
part: body
|
|
- type: regex
|
|
name: captaindata_1
|
|
regex:
|
|
- >-
|
|
(?:captaindata).{0,40}\b([0-9a-f]{8}\-[0-9a-f]{4}\-[0-9a-f]{4}\-[0-9a-f]{4}\-[0-9a-f]{12})\b
|
|
part: body
|
|
- type: regex
|
|
name: captaindata_2
|
|
regex:
|
|
- (?:captaindata).{0,40}\b([0-9a-f]{64})\b
|
|
part: body
|
|
- type: regex
|
|
name: carboninterface
|
|
regex:
|
|
- (?:carboninterface).{0,40}\b([a-zA-Z0-9]{21})\b
|
|
part: body
|
|
- type: regex
|
|
name: cashboard_1
|
|
regex:
|
|
- >-
|
|
(?:cashboard).{0,40}\b([0-9A-Z]{3}-[0-9A-Z]{3}-[0-9A-Z]{3}-[0-9A-Z]{3})\b
|
|
part: body
|
|
- type: regex
|
|
name: cashboard_2
|
|
regex:
|
|
- (?:cashboard).{0,40}\b([0-9a-z]{1,})\b
|
|
part: body
|
|
- type: regex
|
|
name: caspio_1
|
|
regex:
|
|
- (?:caspio).{0,40}\b([a-z0-9]{8})\b
|
|
part: body
|
|
- type: regex
|
|
name: caspio_2
|
|
regex:
|
|
- (?:caspio).{0,40}\b([a-z0-9]{50})\b
|
|
part: body
|
|
- type: regex
|
|
name: censys_1
|
|
regex:
|
|
- (?:censys).{0,40}\b([a-zA-Z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: censys_2
|
|
regex:
|
|
- (?:censys).{0,40}\b([a-z0-9-]{36})\b
|
|
part: body
|
|
- type: regex
|
|
name: centralstationcrm
|
|
regex:
|
|
- (?:centralstation).{0,40}\b([a-z0-9]{30})\b
|
|
part: body
|
|
- type: regex
|
|
name: cexio_1
|
|
regex:
|
|
- (?:cexio|cex.io).{0,40}\b([a-z]{2}[0-9]{9})\b
|
|
part: body
|
|
- type: regex
|
|
name: cexio_2
|
|
regex:
|
|
- (?:cexio|cex.io).{0,40}\b([0-9A-Za-z]{24,27})\b
|
|
part: body
|
|
- type: regex
|
|
name: chatbot
|
|
regex:
|
|
- (?:chatbot).{0,40}\b([a-zA-Z0-9_]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: chatfule
|
|
regex:
|
|
- (?:chatfuel).{0,40}\b([a-zA-Z0-9]{128})\b
|
|
part: body
|
|
- type: regex
|
|
name: checio
|
|
regex:
|
|
- (?:checio).{0,40}\b(pk_[a-z0-9]{45})\b
|
|
part: body
|
|
- type: regex
|
|
name: checklyhq
|
|
regex:
|
|
- (?:checklyhq).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: checkout_1
|
|
regex:
|
|
- >-
|
|
(?:checkout).{0,40}\b((sk_|sk_test_)[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})\b
|
|
part: body
|
|
- type: regex
|
|
name: checkout_2
|
|
regex:
|
|
- (?:checkout).{0,40}\b(cus_[0-9a-zA-Z]{26})\b
|
|
part: body
|
|
- type: regex
|
|
name: checkvist_1
|
|
regex:
|
|
- (?:checkvist).{0,40}\b([\w\.-]+@[\w-]+\.[\w\.-]{2,5})\b
|
|
part: body
|
|
- type: regex
|
|
name: checkvist_2
|
|
regex:
|
|
- (?:checkvist).{0,40}\b([0-9a-zA-Z]{14})\b
|
|
part: body
|
|
- type: regex
|
|
name: cicero
|
|
regex:
|
|
- (?:cicero).{0,40}\b([0-9a-z]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: clearbit
|
|
regex:
|
|
- (?:clearbit).{0,40}\b([0-9a-z_]{35})\b
|
|
part: body
|
|
- type: regex
|
|
name: clickhelp_1
|
|
regex:
|
|
- \b([0-9A-Za-z]{3,20}.try.clickhelp.co)\b
|
|
part: body
|
|
- type: regex
|
|
name: clickhelp_2
|
|
regex:
|
|
- (?:clickhelp).{0,40}\b([0-9A-Za-z]{24})\b
|
|
part: body
|
|
- type: regex
|
|
name: clicksendsms_2
|
|
regex:
|
|
- >-
|
|
(?:sms).{0,40}\b([a-zA-Z0-9]{3,20}@[a-zA-Z0-9]{2,12}.[a-zA-Z0-9]{2,5})\b
|
|
part: body
|
|
- type: regex
|
|
name: clickuppersonaltoken
|
|
regex:
|
|
- (?:clickup).{0,40}\b(pk_[0-9]{8}_[0-9A-Z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: cliengo
|
|
regex:
|
|
- >-
|
|
(?:cliengo).{0,40}\b([0-9a-f]{8}\-[0-9a-f]{4}\-[0-9a-f]{4}\-[0-9a-f]{4}\-[0-9a-f]{12})\b
|
|
part: body
|
|
- type: regex
|
|
name: clinchpad
|
|
regex:
|
|
- (?:clinchpad).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: clockify
|
|
regex:
|
|
- (?:clockify).{0,40}\b([a-zA-Z0-9]{48})\b
|
|
part: body
|
|
- type: regex
|
|
name: clockworksms_1
|
|
regex:
|
|
- (?:clockwork|textanywhere).{0,40}\b([0-9a-zA-Z]{24})\b
|
|
part: body
|
|
- type: regex
|
|
name: clockworksms_2
|
|
regex:
|
|
- (?:clockwork|textanywhere).{0,40}\b([0-9]{5})\b
|
|
part: body
|
|
- type: regex
|
|
name: closecrm
|
|
regex:
|
|
- \b(api_[a-z0-9A-Z.]{45})\b
|
|
part: body
|
|
- type: regex
|
|
name: cloudelements_1
|
|
regex:
|
|
- (?:cloudelements).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: cloudelements_2
|
|
regex:
|
|
- (?:cloudelements).{0,40}\b([a-zA-Z0-9]{43})\b
|
|
part: body
|
|
- type: regex
|
|
name: cloudflarecakey
|
|
regex:
|
|
- (?:cloudflare).{0,40}\b(v[A-Za-z0-9._-]{173,})\b
|
|
part: body
|
|
- type: regex
|
|
name: cloudimage
|
|
regex:
|
|
- (?:cloudimage).{0,40}\b([a-z0-9_]{30})\b
|
|
part: body
|
|
- type: regex
|
|
name: cloudinary_credentials
|
|
regex:
|
|
- cloudinary://[0-9]+:[A-Za-z0-9\-_\.]+@[A-Za-z0-9\-_\.]+
|
|
part: body
|
|
- type: regex
|
|
name: cloudmersive
|
|
regex:
|
|
- (?:cloudmersive).{0,40}\b([a-z0-9-]{36})\b
|
|
part: body
|
|
- type: regex
|
|
name: cloudplan
|
|
regex:
|
|
- (?:cloudplan).{0,40}\b([A-Z0-9-]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: cloverly
|
|
regex:
|
|
- (?:cloverly).{0,40}\b([a-z0-9:_]{28})\b
|
|
part: body
|
|
- type: regex
|
|
name: cloze_1
|
|
regex:
|
|
- (?:cloze).{0,40}\b([0-9a-f]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: cloze_2
|
|
regex:
|
|
- (?:cloze).{0,40}\b([\w\.-]+@[\w-]+\.[\w\.-]{2,5})\b
|
|
part: body
|
|
- type: regex
|
|
name: clustdoc
|
|
regex:
|
|
- (?:clustdoc).{0,40}\b([0-9a-zA-Z]{60})\b
|
|
part: body
|
|
- type: regex
|
|
name: codacy
|
|
regex:
|
|
- (?:codacy).{0,40}\b([0-9A-Za-z]{20})\b
|
|
part: body
|
|
- type: regex
|
|
name: coinapi
|
|
regex:
|
|
- (?:coinapi).{0,40}\b([A-Z0-9-]{36})\b
|
|
part: body
|
|
- type: regex
|
|
name: coinbase
|
|
regex:
|
|
- (?:coinbase).{0,40}\b([a-zA-Z-0-9]{64})\b
|
|
part: body
|
|
- type: regex
|
|
name: coinlayer
|
|
regex:
|
|
- (?:coinlayer).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: coinlib
|
|
regex:
|
|
- (?:coinlib).{0,40}\b([a-z0-9]{16})\b
|
|
part: body
|
|
- type: regex
|
|
name: column
|
|
regex:
|
|
- (?:column).{0,40}\b((?:test|live)_[a-zA-Z0-9]{27})\b
|
|
part: body
|
|
- type: regex
|
|
name: commercejs
|
|
regex:
|
|
- (?:commercejs).{0,40}\b([a-z0-9_]{48})\b
|
|
part: body
|
|
- type: regex
|
|
name: commodities
|
|
regex:
|
|
- (?:commodities).{0,40}\b([a-zA-Z0-9]{60})\b
|
|
part: body
|
|
- type: regex
|
|
name: companyhub_1
|
|
regex:
|
|
- (?:companyhub).{0,40}\b([0-9a-zA-Z]{20})\b
|
|
part: body
|
|
- type: regex
|
|
name: companyhub_2
|
|
regex:
|
|
- (?:companyhub).{0,40}\b([a-zA-Z0-9$%^=-]{4,32})\b
|
|
part: body
|
|
- type: regex
|
|
name: confluent_1
|
|
regex:
|
|
- (?:confluent).{0,40}\b([a-zA-Z-0-9]{16})\b
|
|
part: body
|
|
- type: regex
|
|
name: confluent_2
|
|
regex:
|
|
- (?:confluent).{0,40}\b([a-zA-Z-0-9]{64})\b
|
|
part: body
|
|
- type: regex
|
|
name: convertkit
|
|
regex:
|
|
- (?:convertkit).{0,40}\b([a-z0-9A-Z_]{22})\b
|
|
part: body
|
|
- type: regex
|
|
name: convier
|
|
regex:
|
|
- (?:convier).{0,40}\b([0-9]{2}\|[a-zA-Z0-9]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: copper_2
|
|
regex:
|
|
- (?:copper).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: countrylayer
|
|
regex:
|
|
- (?:countrylayer).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: courier
|
|
regex:
|
|
- (?:courier).{0,40}\b(pk\_[a-zA-Z0-9]{1,}\_[a-zA-Z0-9]{28})\b
|
|
part: body
|
|
- type: regex
|
|
name: coveralls
|
|
regex:
|
|
- (?:coveralls).{0,40}\b([a-zA-Z0-9-]{37})\b
|
|
part: body
|
|
- type: regex
|
|
name: crowdin
|
|
regex:
|
|
- (?:crowdin).{0,40}\b([0-9A-Za-z]{80})\b
|
|
part: body
|
|
- type: regex
|
|
name: cryptocompare
|
|
regex:
|
|
- (?:cryptocompare).{0,40}\b([a-z-0-9]{64})\b
|
|
part: body
|
|
- type: regex
|
|
name: currencycloud_1
|
|
regex:
|
|
- (?:currencycloud).{0,40}\b([0-9a-z]{64})\b
|
|
part: body
|
|
- type: regex
|
|
name: currencyfreaks
|
|
regex:
|
|
- (?:currencyfreaks).{0,40}\b([0-9a-z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: currencylayer
|
|
regex:
|
|
- (?:currencylayer).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: currencyscoop
|
|
regex:
|
|
- (?:currencyscoop).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: currentsapi
|
|
regex:
|
|
- (?:currentsapi).{0,40}\b([a-zA-Z0-9\S]{48})\b
|
|
part: body
|
|
- type: regex
|
|
name: customerguru_1
|
|
regex:
|
|
- (?:guru).{0,40}\b([a-z0-9A-Z]{50})\b
|
|
part: body
|
|
- type: regex
|
|
name: customerguru_2
|
|
regex:
|
|
- (?:guru).{0,40}\b([a-z0-9A-Z]{30})\b
|
|
part: body
|
|
- type: regex
|
|
name: d7network
|
|
regex:
|
|
- (?:d7network).{0,40}\b([a-zA-Z0-9\W\S]{23}\=)
|
|
part: body
|
|
- type: regex
|
|
name: dailyco
|
|
regex:
|
|
- (?:daily).{0,40}\b([0-9a-f]{64})\b
|
|
part: body
|
|
- type: regex
|
|
name: dandelion
|
|
regex:
|
|
- (?:dandelion).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: databricks
|
|
regex:
|
|
- dapi[a-f0-9]{32}\b
|
|
part: body
|
|
- type: regex
|
|
name: datafire
|
|
regex:
|
|
- (?:datafire).{0,40}\b([a-z0-9\S]{175,190})\b
|
|
part: body
|
|
- type: regex
|
|
name: datagov
|
|
regex:
|
|
- (?:data.gov).{0,40}\b([a-zA-Z0-9]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: deepai
|
|
regex:
|
|
- (?:deepai).{0,40}\b([a-z0-9-]{36})\b
|
|
part: body
|
|
- type: regex
|
|
name: deepgram
|
|
regex:
|
|
- (?:deepgram).{0,40}\b([0-9a-z]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: delighted
|
|
regex:
|
|
- (?:delighted).{0,40}\b([a-z0-9A-Z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: deputy_1
|
|
regex:
|
|
- \b([0-9a-z]{1,}.as.deputy.com)\b
|
|
part: body
|
|
- type: regex
|
|
name: deputy_2
|
|
regex:
|
|
- (?:deputy).{0,40}\b([0-9a-z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: detectlanguage
|
|
regex:
|
|
- (?:detectlanguage).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: dfuse
|
|
regex:
|
|
- \b(web\_[0-9a-z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: diffbot
|
|
regex:
|
|
- (?:diffbot).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: digitaloceantoken
|
|
regex:
|
|
- (?:digitalocean).{0,40}\b([A-Za-z0-9_-]{64})\b
|
|
part: body
|
|
- type: regex
|
|
name: discord_webhook
|
|
regex:
|
|
- https://discordapp\.com/api/webhooks/[0-9]+/[A-Za-z0-9\-]+
|
|
part: body
|
|
- type: regex
|
|
name: discordbottoken_1
|
|
regex:
|
|
- >-
|
|
(?:discord).{0,40}\b([A-Za-z0-9_-]{24}\.[A-Za-z0-9_-]{6}\.[A-Za-z0-9_-]{27})\b
|
|
part: body
|
|
- type: regex
|
|
name: discordbottoken_2
|
|
regex:
|
|
- (?:discord).{0,40}\b([0-9]{17})\b
|
|
part: body
|
|
- type: regex
|
|
name: discordwebhook
|
|
regex:
|
|
- (https:\/\/discord.com\/api\/webhooks\/[0-9]{18}\/[0-9a-zA-Z-]{68})
|
|
part: body
|
|
- type: regex
|
|
name: ditto
|
|
regex:
|
|
- >-
|
|
(?:ditto).{0,40}\b([a-z0-9]{8}\-[a-z0-9]{4}\-[a-z0-9]{4}\-[a-z0-9]{4}\-[a-z0-9]{12}\.[a-z0-9]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: dnscheck_1
|
|
regex:
|
|
- (?:dnscheck).{0,40}\b([a-z0-9A-Z-]{36})\b
|
|
part: body
|
|
- type: regex
|
|
name: dnscheck_2
|
|
regex:
|
|
- (?:dnscheck).{0,40}\b([a-z0-9A-Z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: documo
|
|
regex:
|
|
- \b(ey[a-zA-Z0-9]{34}.ey[a-zA-Z0-9]{154}.[a-zA-Z0-9_-]{43})\b
|
|
part: body
|
|
- type: regex
|
|
name: doppler
|
|
regex:
|
|
- \b(dp\.pt\.[a-zA-Z0-9]{43})\b
|
|
part: body
|
|
- type: regex
|
|
name: dotmailer_1
|
|
regex:
|
|
- (?:dotmailer).{0,40}\b(apiuser-[a-z0-9]{12}@apiconnector.com)\b
|
|
part: body
|
|
- type: regex
|
|
name: dotmailer_2
|
|
regex:
|
|
- (?:dotmailer).{0,40}\b([a-zA-Z0-9\S]{8,24})\b
|
|
part: body
|
|
- type: regex
|
|
name: dovico
|
|
regex:
|
|
- (?:dovico).{0,40}\b([0-9a-z]{32}\.[0-9a-z]{1,}\b)
|
|
part: body
|
|
- type: regex
|
|
name: dronahq
|
|
regex:
|
|
- (?:dronahq).{0,40}\b([a-z0-9]{50})\b
|
|
part: body
|
|
- type: regex
|
|
name: droneci
|
|
regex:
|
|
- (?:droneci).{0,40}\b([a-zA-Z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: dropbox
|
|
regex:
|
|
- \b(sl\.[A-Za-z0-9\-\_]{130,140})\b
|
|
part: body
|
|
- type: regex
|
|
name: dwolla
|
|
regex:
|
|
- (?:dwolla).{0,40}\b([a-zA-Z-0-9]{50})\b
|
|
part: body
|
|
- type: regex
|
|
name: dynalist
|
|
regex:
|
|
- (?:dynalist).{0,40}\b([a-zA-Z0-9-_]{128})\b
|
|
part: body
|
|
- type: regex
|
|
name: dynatrace_token
|
|
regex:
|
|
- dt0[a-zA-Z]{1}[0-9]{2}\.[A-Z0-9]{24}\.[A-Z0-9]{64}
|
|
part: body
|
|
- type: regex
|
|
name: dyspatch
|
|
regex:
|
|
- (?:dyspatch).{0,40}\b([A-Z0-9]{52})\b
|
|
part: body
|
|
- type: regex
|
|
name: ec
|
|
regex:
|
|
- '-----BEGIN EC PRIVATE KEY-----'
|
|
part: body
|
|
- type: regex
|
|
name: eagleeyenetworks_1
|
|
regex:
|
|
- >-
|
|
(?:eagleeyenetworks).{0,40}\b([a-zA-Z0-9]{3,20}@[a-zA-Z0-9]{2,12}.[a-zA-Z0-9]{2,5})\b
|
|
part: body
|
|
- type: regex
|
|
name: eagleeyenetworks_2
|
|
regex:
|
|
- (?:eagleeyenetworks).{0,40}\b([a-zA-Z0-9]{15})\b
|
|
part: body
|
|
- type: regex
|
|
name: easyinsight_1
|
|
regex:
|
|
- (?:easyinsight|easy-insight).{0,40}\b([a-zA-Z0-9]{20})\b
|
|
part: body
|
|
- type: regex
|
|
name: easyinsight_2
|
|
regex:
|
|
- (?:easyinsight|easy-insight).{0,40}\b([0-9Aa-zA-Z]{20})\b
|
|
part: body
|
|
- type: regex
|
|
name: edamam_1
|
|
regex:
|
|
- (?:edamam).{0,40}\b([0-9a-z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: edamam_2
|
|
regex:
|
|
- (?:edamam).{0,40}\b([0-9a-z]{8})\b
|
|
part: body
|
|
- type: regex
|
|
name: edenai
|
|
regex:
|
|
- >-
|
|
(?:edenai).{0,40}\b([a-zA-Z0-9]{36}.[a-zA-Z0-9]{92}.[a-zA-Z0-9_]{43})\b
|
|
part: body
|
|
- type: regex
|
|
name: eightxeight_2
|
|
regex:
|
|
- (?:8x8).{0,40}\b([a-zA-Z0-9]{43})\b
|
|
part: body
|
|
- type: regex
|
|
name: elasticemail
|
|
regex:
|
|
- (?:elastic).{0,40}\b([A-Za-z0-9_-]{96})\b
|
|
part: body
|
|
- type: regex
|
|
name: enablex_1
|
|
regex:
|
|
- (?:enablex).{0,40}\b([a-zA-Z0-9]{36})\b
|
|
part: body
|
|
- type: regex
|
|
name: enablex_2
|
|
regex:
|
|
- (?:enablex).{0,40}\b([a-z0-9]{24})\b
|
|
part: body
|
|
- type: regex
|
|
name: enigma
|
|
regex:
|
|
- (?:enigma).{0,40}\b([a-zA-Z0-9]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: ethplorer
|
|
regex:
|
|
- (?:ethplorer).{0,40}\b([a-z0-9A-Z-]{22})\b
|
|
part: body
|
|
- type: regex
|
|
name: everhour
|
|
regex:
|
|
- >-
|
|
(?:everhour).{0,40}\b([0-9Aa-f]{4}-[0-9a-f]{4}-[0-9a-f]{6}-[0-9a-f]{6}-[0-9a-f]{8})\b
|
|
part: body
|
|
- type: regex
|
|
name: exchangerateapi
|
|
regex:
|
|
- (?:exchangerate).{0,40}\b([a-z0-9]{24})\b
|
|
part: body
|
|
- type: regex
|
|
name: exchangeratesapi
|
|
regex:
|
|
- (?:exchangerates).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: facebook_access_token
|
|
regex:
|
|
- EAACEdEose0cBA[0-9A-Za-z]+
|
|
part: body
|
|
- type: regex
|
|
name: faceplusplus
|
|
regex:
|
|
- (?:faceplusplus).{0,40}\b([0-9a-zA-Z_-]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: fakejson
|
|
regex:
|
|
- (?:fakejson).{0,40}\b([a-zA-Z0-9]{22})\b
|
|
part: body
|
|
- type: regex
|
|
name: fastforex
|
|
regex:
|
|
- (?:fastforex).{0,40}\b([a-z0-9-]{28})\b
|
|
part: body
|
|
- type: regex
|
|
name: fastlypersonaltoken
|
|
regex:
|
|
- (?:fastly).{0,40}\b([A-Za-z0-9_-]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: feedier
|
|
regex:
|
|
- (?:feedier).{0,40}\b([a-z0-9A-Z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: fetchrss
|
|
regex:
|
|
- (?:fetchrss).{0,40}\b([0-9A-Za-z.]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: figmapersonalaccesstoken
|
|
regex:
|
|
- >-
|
|
(?:figma).{0,40}\b([0-9]{6}-[0-9a-z]{8}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{12})\b
|
|
part: body
|
|
- type: regex
|
|
name: fileio
|
|
regex:
|
|
- (?:fileio).{0,40}\b([A-Z0-9.-]{39})\b
|
|
part: body
|
|
- type: regex
|
|
name: finage
|
|
regex:
|
|
- \b(API_KEY[0-9A-Z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: financialmodelingprep
|
|
regex:
|
|
- (?:financialmodelingprep).{0,40}\b([a-zA-Z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: findl
|
|
regex:
|
|
- >-
|
|
(?:findl).{0,40}\b([a-z0-9]{8}\-[a-z0-9]{4}\-[a-z0-9]{4}\-[a-z0-9]{4}\-[a-z0-9]{12})\b
|
|
part: body
|
|
- type: regex
|
|
name: finnhub
|
|
regex:
|
|
- (?:finnhub).{0,40}\b([0-9a-z]{20})\b
|
|
part: body
|
|
- type: regex
|
|
name: fixerio
|
|
regex:
|
|
- (?:fixer).{0,40}\b([A-Za-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: flatio
|
|
regex:
|
|
- (?:flat).{0,40}\b([0-9a-z]{128})\b
|
|
part: body
|
|
- type: regex
|
|
name: fleetbase
|
|
regex:
|
|
- \b(flb_live_[0-9a-zA-Z]{20})\b
|
|
part: body
|
|
- type: regex
|
|
name: flickr
|
|
regex:
|
|
- (?:flickr).{0,40}\b([0-9a-z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: flightapi
|
|
regex:
|
|
- (?:flightapi).{0,40}\b([a-z0-9]{24})\b
|
|
part: body
|
|
- type: regex
|
|
name: flightstats_1
|
|
regex:
|
|
- (?:flightstats).{0,40}\b([0-9a-z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: flightstats_2
|
|
regex:
|
|
- (?:flightstats).{0,40}\b([0-9a-z]{8})\b
|
|
part: body
|
|
- type: regex
|
|
name: flowflu_2
|
|
regex:
|
|
- (?:flowflu).{0,40}\b([a-zA-Z0-9]{51})\b
|
|
part: body
|
|
- type: regex
|
|
name: flutterwave
|
|
regex:
|
|
- \b(FLWSECK-[0-9a-z]{32}-X)\b
|
|
part: body
|
|
- type: regex
|
|
name: fmfw_1
|
|
regex:
|
|
- (?:fmfw).{0,40}\b([a-zA-Z0-9-]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: fmfw_2
|
|
regex:
|
|
- (?:fmfw).{0,40}\b([a-zA-Z0-9_-]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: formbucket
|
|
regex:
|
|
- >-
|
|
(?:formbucket).{0,40}\b([0-9A-Za-z]{1,}.[0-9A-Za-z]{1,}\.[0-9A-Z-a-z\-_]{1,})
|
|
part: body
|
|
- type: regex
|
|
name: formio
|
|
regex:
|
|
- >-
|
|
(?:formio).{0,40}\b(eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9\.[0-9A-Za-z]{310}\.[0-9A-Z-a-z\-_]{43}[
|
|
\r\n]{1})
|
|
part: body
|
|
- type: regex
|
|
name: foursquare
|
|
regex:
|
|
- (?:foursquare).{0,40}\b([0-9A-Z]{48})\b
|
|
part: body
|
|
- type: regex
|
|
name: frameio
|
|
regex:
|
|
- \b(fio-u-[0-9a-zA-Z_-]{64})\b
|
|
part: body
|
|
- type: regex
|
|
name: freshbooks_1
|
|
regex:
|
|
- (?:freshbooks).{0,40}\b([0-9a-z]{64})\b
|
|
part: body
|
|
- type: regex
|
|
name: freshbooks_2
|
|
regex:
|
|
- (?:freshbooks).{0,40}\b(https://www.[0-9A-Za-z_-]{1,}.com)\b
|
|
part: body
|
|
- type: regex
|
|
name: freshdesk_1
|
|
regex:
|
|
- (?:freshdesk).{0,40}\b([0-9A-Za-z]{20})\b
|
|
part: body
|
|
- type: regex
|
|
name: freshdesk_2
|
|
regex:
|
|
- \b([0-9a-z-]{1,}.freshdesk.com)\b
|
|
part: body
|
|
- type: regex
|
|
name: front
|
|
regex:
|
|
- (?:front).{0,40}\b([0-9a-zA-Z]{36}.[0-9a-zA-Z\.\-\_]{188,244})\b
|
|
part: body
|
|
- type: regex
|
|
name: fulcrum
|
|
regex:
|
|
- (?:fulcrum).{0,40}\b([a-z0-9]{80})\b
|
|
part: body
|
|
- type: regex
|
|
name: fullstory
|
|
regex:
|
|
- (?:fullstory).{0,40}\b([a-zA-Z-0-9/+]{88})\b
|
|
part: body
|
|
- type: regex
|
|
name: fusebill
|
|
regex:
|
|
- (?:fusebill).{0,40}\b([a-zA-Z0-9]{88})\b
|
|
part: body
|
|
- type: regex
|
|
name: fxmarket
|
|
regex:
|
|
- (?:fxmarket).{0,40}\b([0-9Aa-zA-Z-_=]{20})\b
|
|
part: body
|
|
- type: regex
|
|
name: gcp
|
|
regex:
|
|
- \{[^{]+auth_provider_x509_cert_url[^}]+\}
|
|
part: body
|
|
- type: regex
|
|
name: geckoboard
|
|
regex:
|
|
- (?:geckoboard).{0,40}\b([a-zA-Z0-9]{44})\b
|
|
part: body
|
|
- type: regex
|
|
name: generic_1376
|
|
regex:
|
|
- jdbc:mysql(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: generic_1700
|
|
regex:
|
|
- BEGIN OPENSSH PRIVATE KEY
|
|
part: body
|
|
- type: regex
|
|
name: generic_1701
|
|
regex:
|
|
- BEGIN PRIVATE KEY
|
|
part: body
|
|
- type: regex
|
|
name: generic_1702
|
|
regex:
|
|
- BEGIN RSA PRIVATE KEY
|
|
part: body
|
|
- type: regex
|
|
name: generic_1703
|
|
regex:
|
|
- BEGIN DSA PRIVATE KEY
|
|
part: body
|
|
- type: regex
|
|
name: generic_1704
|
|
regex:
|
|
- BEGIN EC PRIVATE KEY
|
|
part: body
|
|
- type: regex
|
|
name: generic_1705
|
|
regex:
|
|
- BEGIN PGP PRIVATE KEY BLOCK
|
|
part: body
|
|
- type: regex
|
|
name: generic_1710
|
|
regex:
|
|
- algolia_api_key
|
|
part: body
|
|
- type: regex
|
|
name: generic_1711
|
|
regex:
|
|
- asana_access_token
|
|
part: body
|
|
- type: regex
|
|
name: generic_1713
|
|
regex:
|
|
- azure_tenant
|
|
part: body
|
|
- type: regex
|
|
name: generic_1714
|
|
regex:
|
|
- bitly_access_token
|
|
part: body
|
|
- type: regex
|
|
name: generic_1716
|
|
regex:
|
|
- browserstack_access_key
|
|
part: body
|
|
- type: regex
|
|
name: generic_1717
|
|
regex:
|
|
- buildkite_access_token
|
|
part: body
|
|
- type: regex
|
|
name: generic_1718
|
|
regex:
|
|
- comcast_access_token
|
|
part: body
|
|
- type: regex
|
|
name: generic_1719
|
|
regex:
|
|
- datadog_api_key
|
|
part: body
|
|
- type: regex
|
|
name: generic_1720
|
|
regex:
|
|
- deviantart_secret
|
|
part: body
|
|
- type: regex
|
|
name: generic_1721
|
|
regex:
|
|
- deviantart_access_token
|
|
part: body
|
|
- type: regex
|
|
name: generic_1722
|
|
regex:
|
|
- dropbox_api_token
|
|
part: body
|
|
- type: regex
|
|
name: generic_1723
|
|
regex:
|
|
- facebook_appsecret
|
|
part: body
|
|
- type: regex
|
|
name: generic_1724
|
|
regex:
|
|
- facebook_access_token
|
|
part: body
|
|
- type: regex
|
|
name: generic_1725
|
|
regex:
|
|
- firebase_custom_token
|
|
part: body
|
|
- type: regex
|
|
name: generic_1726
|
|
regex:
|
|
- firebase_id_token
|
|
part: body
|
|
- type: regex
|
|
name: generic_1727
|
|
regex:
|
|
- github_client
|
|
part: body
|
|
- type: regex
|
|
name: generic_1728
|
|
regex:
|
|
- github_ssh_key
|
|
part: body
|
|
- type: regex
|
|
name: generic_1730
|
|
regex:
|
|
- gitlab_private_token
|
|
part: body
|
|
- type: regex
|
|
name: generic_1733
|
|
regex:
|
|
- heroku_api_key
|
|
part: body
|
|
- type: regex
|
|
name: generic_1734
|
|
regex:
|
|
- instagram_access_token
|
|
part: body
|
|
- type: regex
|
|
name: generic_1735
|
|
regex:
|
|
- mailchimp_api_key
|
|
part: body
|
|
- type: regex
|
|
name: generic_1736
|
|
regex:
|
|
- mailgun_api_key
|
|
part: body
|
|
- type: regex
|
|
name: generic_1739
|
|
regex:
|
|
- pagerduty_api_token
|
|
part: body
|
|
- type: regex
|
|
name: generic_1740
|
|
regex:
|
|
- paypal_key_sb
|
|
part: body
|
|
- type: regex
|
|
name: generic_1741
|
|
regex:
|
|
- paypal_key_live
|
|
part: body
|
|
- type: regex
|
|
name: generic_1742
|
|
regex:
|
|
- paypal_token_sb
|
|
part: body
|
|
- type: regex
|
|
name: generic_1743
|
|
regex:
|
|
- paypal_token_live
|
|
part: body
|
|
- type: regex
|
|
name: generic_1744
|
|
regex:
|
|
- pendo_integration_key
|
|
part: body
|
|
- type: regex
|
|
name: generic_1745
|
|
regex:
|
|
- salesforce_access_token
|
|
part: body
|
|
- type: regex
|
|
name: generic_1746
|
|
regex:
|
|
- saucelabs_ukey
|
|
part: body
|
|
- type: regex
|
|
name: generic_1747
|
|
regex:
|
|
- sendgrid_api_key
|
|
part: body
|
|
- type: regex
|
|
name: generic_1748
|
|
regex:
|
|
- slack_api_token
|
|
part: body
|
|
- type: regex
|
|
name: generic_1751
|
|
regex:
|
|
- square_auth_token
|
|
part: body
|
|
- type: regex
|
|
name: generic_1752
|
|
regex:
|
|
- travisci_api_token
|
|
part: body
|
|
- type: regex
|
|
name: generic_1754
|
|
regex:
|
|
- twitter_api_secret
|
|
part: body
|
|
- type: regex
|
|
name: generic_1755
|
|
regex:
|
|
- twitter_bearer_token
|
|
part: body
|
|
- type: regex
|
|
name: generic_1756
|
|
regex:
|
|
- spotify_access_token
|
|
part: body
|
|
- type: regex
|
|
name: generic_1757
|
|
regex:
|
|
- stripe_key_live
|
|
part: body
|
|
- type: regex
|
|
name: generic_1758
|
|
regex:
|
|
- wakatime_api_key
|
|
part: body
|
|
- type: regex
|
|
name: generic_1759
|
|
regex:
|
|
- wompi_auth_bearer_sb
|
|
part: body
|
|
- type: regex
|
|
name: generic_1760
|
|
regex:
|
|
- wompi_auth_bearer_live
|
|
part: body
|
|
- type: regex
|
|
name: generic_1761
|
|
regex:
|
|
- wpengine_api_key
|
|
part: body
|
|
- type: regex
|
|
name: generic_1763
|
|
regex:
|
|
- zendesk_access_token
|
|
part: body
|
|
- type: regex
|
|
name: generic_1764
|
|
regex:
|
|
- ssh-rsa
|
|
part: body
|
|
- type: regex
|
|
name: gengo
|
|
regex:
|
|
- >-
|
|
(?:gengo).{0,40}([ ]{0,1}[0-9a-zA-Z\[\]\-\(\)\{\}|_^@$=~]{64}[
|
|
\r\n]{1})
|
|
part: body
|
|
- type: regex
|
|
name: geoapify
|
|
regex:
|
|
- (?:geoapify).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: geocode
|
|
regex:
|
|
- (?:geocode).{0,40}\b([a-z0-9]{28})\b
|
|
part: body
|
|
- type: regex
|
|
name: geocodify
|
|
regex:
|
|
- (?:geocodify).{0,40}\b([0-9a-z]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: geocodio_2
|
|
regex:
|
|
- (?:geocod).{0,40}\b([a-z0-9]{39})\b
|
|
part: body
|
|
- type: regex
|
|
name: geoipifi
|
|
regex:
|
|
- (?:ipifi).{0,40}\b([a-z0-9A-Z_]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: getemail
|
|
regex:
|
|
- (?:getemail).{0,40}\b([a-zA-Z0-9-]{20})\b
|
|
part: body
|
|
- type: regex
|
|
name: getemails_1
|
|
regex:
|
|
- (?:getemails).{0,40}\b([a-z0-9-]{26})\b
|
|
part: body
|
|
- type: regex
|
|
name: getemails_2
|
|
regex:
|
|
- (?:getemails).{0,40}\b([a-z0-9-]{18})\b
|
|
part: body
|
|
- type: regex
|
|
name: getgeoapi
|
|
regex:
|
|
- (?:getgeoapi).{0,40}\b([0-9a-z]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: getgist
|
|
regex:
|
|
- (?:getgist).{0,40}\b([a-z0-9A-Z+=]{68})
|
|
part: body
|
|
- type: regex
|
|
name: getsandbox_1
|
|
regex:
|
|
- (?:getsandbox).{0,40}\b([a-z0-9-]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: getsandbox_2
|
|
regex:
|
|
- (?:getsandbox).{0,40}\b([a-z0-9-]{15,30})\b
|
|
part: body
|
|
- type: regex
|
|
name: github_2
|
|
regex:
|
|
- \b((?:ghp|gho|ghu|ghs|ghr)_[a-zA-Z0-9]{36,255}\b)
|
|
part: body
|
|
- type: regex
|
|
name: github_app_token
|
|
regex:
|
|
- (ghu|ghs)_[0-9a-zA-Z]{36}
|
|
part: body
|
|
- type: regex
|
|
name: github_oauth_access_token
|
|
regex:
|
|
- gho_[0-9a-zA-Z]{36}
|
|
part: body
|
|
- type: regex
|
|
name: github_personal_access_token
|
|
regex:
|
|
- ghp_[0-9a-zA-Z]{36}
|
|
part: body
|
|
- type: regex
|
|
name: github_refresh_token
|
|
regex:
|
|
- ghr_[0-9a-zA-Z]{76}
|
|
part: body
|
|
- type: regex
|
|
name: github_old
|
|
regex:
|
|
- (?:github)[^\.].{0,40}[ =:'"]+([a-f0-9]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: githubapp_2
|
|
regex:
|
|
- >-
|
|
(?:github).{0,40}(-----BEGIN RSA PRIVATE
|
|
KEY-----\s[A-Za-z0-9+\/\s]*\s-----END RSA PRIVATE KEY-----)
|
|
part: body
|
|
- type: regex
|
|
name: gitlabv2
|
|
regex:
|
|
- \b(glpat-[a-zA-Z0-9\-=_]{20,22})\b
|
|
part: body
|
|
- type: regex
|
|
name: gitter
|
|
regex:
|
|
- (?:gitter).{0,40}\b([a-z0-9-]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: glassnode
|
|
regex:
|
|
- (?:glassnode).{0,40}\b([0-9A-Za-z]{27})\b
|
|
part: body
|
|
- type: regex
|
|
name: gocanvas_1
|
|
regex:
|
|
- (?:gocanvas).{0,40}\b([0-9A-Za-z/+]{43}=[ \r\n]{1})
|
|
part: body
|
|
- type: regex
|
|
name: gocanvas_2
|
|
regex:
|
|
- (?:gocanvas).{0,40}\b([\w\.-]+@[\w-]+\.[\w\.-]{2,5})\b
|
|
part: body
|
|
- type: regex
|
|
name: gocardless
|
|
regex:
|
|
- \b(live_[0-9A-Za-z\_\-]{40}[ "'\r\n]{1})
|
|
part: body
|
|
- type: regex
|
|
name: goodday
|
|
regex:
|
|
- (?:goodday).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: google_gcp_service_account
|
|
regex:
|
|
- '"type": "service_account"'
|
|
part: body
|
|
- type: regex
|
|
name: google_api_key
|
|
regex:
|
|
- AIza[0-9a-z-_]{35}
|
|
part: body
|
|
- type: regex
|
|
name: google_calendar_uri
|
|
regex:
|
|
- https://www\.google\.com/calendar/embed\?src=[A-Za-z0-9%@&;=\-_\./]+
|
|
part: body
|
|
- type: regex
|
|
name: google_oauth_access_token
|
|
regex:
|
|
- ya29\.[0-9A-Za-z\-_]+
|
|
part: body
|
|
- type: regex
|
|
name: graphcms_1
|
|
regex:
|
|
- (?:graph).{0,40}\b([a-z0-9]{25})\b
|
|
part: body
|
|
- type: regex
|
|
name: graphcms_2
|
|
regex:
|
|
- \b(ey[a-zA-Z0-9]{73}.ey[a-zA-Z0-9]{365}.[a-zA-Z0-9_-]{683})\b
|
|
part: body
|
|
- type: regex
|
|
name: graphhopper
|
|
regex:
|
|
- (?:graphhopper).{0,40}\b([a-z0-9-]{36})\b
|
|
part: body
|
|
- type: regex
|
|
name: groovehq
|
|
regex:
|
|
- (?:groove).{0,40}\b([a-z0-9A-Z]{64})
|
|
part: body
|
|
- type: regex
|
|
name: guru_1
|
|
regex:
|
|
- >-
|
|
(?:guru).{0,40}\b([a-zA-Z0-9]{3,20}@[a-zA-Z0-9]{2,12}.[a-zA-Z0-9]{2,5})\b
|
|
part: body
|
|
- type: regex
|
|
name: guru_2
|
|
regex:
|
|
- >-
|
|
(?:guru).{0,40}\b([a-z0-9]{8}-[a-z0-9]{4}-[a-z0-9]{4}-[a-z0-9]{4}-[a-z0-9]{12})\b
|
|
part: body
|
|
- type: regex
|
|
name: gyazo
|
|
regex:
|
|
- (?:gyazo).{0,40}\b([0-9A-Za-z-]{43})\b
|
|
part: body
|
|
- type: regex
|
|
name: happi
|
|
regex:
|
|
- (?:happi).{0,40}\b([a-zA-Z0-9]{56})
|
|
part: body
|
|
- type: regex
|
|
name: happyscribe
|
|
regex:
|
|
- (?:happyscribe).{0,40}\b([0-9a-zA-Z]{24})\b
|
|
part: body
|
|
- type: regex
|
|
name: harvest_1
|
|
regex:
|
|
- (?:harvest).{0,40}\b([a-z0-9A-Z._]{97})\b
|
|
part: body
|
|
- type: regex
|
|
name: hellosign
|
|
regex:
|
|
- (?:hellosign).{0,40}\b([a-zA-Z-0-9/+]{64})\b
|
|
part: body
|
|
- type: regex
|
|
name: helpcrunch
|
|
regex:
|
|
- (?:helpcrunch).{0,40}\b([a-zA-Z-0-9+/=]{328})
|
|
part: body
|
|
- type: regex
|
|
name: helpscout
|
|
regex:
|
|
- (?:helpscout).{0,40}\b([A-Za-z0-9]{56})\b
|
|
part: body
|
|
- type: regex
|
|
name: hereapi
|
|
regex:
|
|
- (?:hereapi).{0,40}\b([a-zA-Z0-9\S]{43})\b
|
|
part: body
|
|
- type: regex
|
|
name: heroku
|
|
regex:
|
|
- >-
|
|
(?:heroku).{0,40}\b([0-9Aa-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\b
|
|
part: body
|
|
- type: regex
|
|
name: hive_2
|
|
regex:
|
|
- (?:hive).{0,40}\b([0-9A-Za-z]{17})\b
|
|
part: body
|
|
- type: regex
|
|
name: hiveage
|
|
regex:
|
|
- (?:hiveage).{0,40}\b([0-9A-Za-z\_\-]{20})\b
|
|
part: body
|
|
- type: regex
|
|
name: holidayapi
|
|
regex:
|
|
- (?:holidayapi).{0,40}\b([a-z0-9-]{36})\b
|
|
part: body
|
|
- type: regex
|
|
name: html2pdf
|
|
regex:
|
|
- (?:html2pdf).{0,40}\b([a-zA-Z0-9]{64})\b
|
|
part: body
|
|
- type: regex
|
|
name: hubspotapikey
|
|
regex:
|
|
- >-
|
|
(?:hubspot).{0,40}\b([A-Za-z0-9]{8}\-[A-Za-z0-9]{4}\-[A-Za-z0-9]{4}\-[A-Za-z0-9]{4}\-[A-Za-z0-9]{12})\b
|
|
part: body
|
|
- type: regex
|
|
name: humanity
|
|
regex:
|
|
- (?:humanity).{0,40}\b([0-9a-z]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: hypertrack_1
|
|
regex:
|
|
- (?:hypertrack).{0,40}\b([0-9a-zA-Z\_\-]{54})\b
|
|
part: body
|
|
- type: regex
|
|
name: hypertrack_2
|
|
regex:
|
|
- (?:hypertrack).{0,40}\b([0-9a-zA-Z\_\-]{27})\b
|
|
part: body
|
|
- type: regex
|
|
name: ibmclouduserkey
|
|
regex:
|
|
- (?:ibm).{0,40}\b([A-Za-z0-9_-]{44})\b
|
|
part: body
|
|
- type: regex
|
|
name: iconfinder
|
|
regex:
|
|
- (?:iconfinder).{0,40}\b([a-zA-Z0-9]{64})\b
|
|
part: body
|
|
- type: regex
|
|
name: iexcloud
|
|
regex:
|
|
- (?:iexcloud).{0,40}\b([a-z0-9_]{35})\b
|
|
part: body
|
|
- type: regex
|
|
name: imagekit
|
|
regex:
|
|
- (?:imagekit).{0,40}\b([a-zA-Z0-9_=]{36})
|
|
part: body
|
|
- type: regex
|
|
name: imagga
|
|
regex:
|
|
- (?:imagga).{0,40}\b([a-z0-9A-Z=]{72})
|
|
part: body
|
|
- type: regex
|
|
name: impala
|
|
regex:
|
|
- (?:impala).{0,40}\b([0-9A-Za-z_]{46})\b
|
|
part: body
|
|
- type: regex
|
|
name: insightly
|
|
regex:
|
|
- (?:insightly).{0,40}\b([a-z0-9-]{36})\b
|
|
part: body
|
|
- type: regex
|
|
name: integromat
|
|
regex:
|
|
- (?:integromat).{0,40}\b([a-z0-9-]{36})\b
|
|
part: body
|
|
- type: regex
|
|
name: intrinio
|
|
regex:
|
|
- (?:intrinio).{0,40}\b([a-zA-Z0-9]{44})\b
|
|
part: body
|
|
- type: regex
|
|
name: invoiceocean_1
|
|
regex:
|
|
- (?:invoiceocean).{0,40}\b([0-9A-Za-z]{20})\b
|
|
part: body
|
|
- type: regex
|
|
name: invoiceocean_2
|
|
regex:
|
|
- \b([0-9a-z]{1,}.invoiceocean.com)\b
|
|
part: body
|
|
- type: regex
|
|
name: ipapi
|
|
regex:
|
|
- (?:ipapi).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: ipgeolocation
|
|
regex:
|
|
- (?:ipgeolocation).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: ipify
|
|
regex:
|
|
- (?:ipify).{0,40}\b([a-zA-Z0-9_-]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: ipinfodb
|
|
regex:
|
|
- (?:ipinfodb).{0,40}\b([a-z0-9]{64})\b
|
|
part: body
|
|
- type: regex
|
|
name: ipquality
|
|
regex:
|
|
- (?:ipquality).{0,40}\b([0-9a-z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: ipstack
|
|
regex:
|
|
- (?:ipstack).{0,40}\b([a-fA-f0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: jdbc_connection_string
|
|
regex:
|
|
- jdbc:[a-z:]+://[A-Za-z0-9\.\-_:;=/@?,&]+
|
|
part: body
|
|
- type: regex
|
|
name: jiratoken_1
|
|
regex:
|
|
- (?:jira).{0,40}\b([a-zA-Z-0-9]{24})\b
|
|
part: body
|
|
- type: regex
|
|
name: jiratoken_2
|
|
regex:
|
|
- (?:jira).{0,40}\b([a-zA-Z-0-9]{5,24}\@[a-zA-Z-0-9]{3,16}\.com)\b
|
|
part: body
|
|
- type: regex
|
|
name: jotform
|
|
regex:
|
|
- (?:jotform).{0,40}\b([0-9Aa-z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: jumpcloud
|
|
regex:
|
|
- (?:jumpcloud).{0,40}\b([a-zA-Z0-9]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: juro
|
|
regex:
|
|
- (?:juro).{0,40}\b([a-zA-Z0-9]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: kanban_1
|
|
regex:
|
|
- (?:kanban).{0,40}\b([0-9A-Z]{12})\b
|
|
part: body
|
|
- type: regex
|
|
name: kanban_2
|
|
regex:
|
|
- \b([0-9a-z]{1,}.kanbantool.com)\b
|
|
part: body
|
|
- type: regex
|
|
name: karmacrm
|
|
regex:
|
|
- (?:karma).{0,40}\b([a-zA-Z0-9]{20})\b
|
|
part: body
|
|
- type: regex
|
|
name: keenio_1
|
|
regex:
|
|
- (?:keen).{0,40}\b([0-9a-z]{24})\b
|
|
part: body
|
|
- type: regex
|
|
name: keenio_2
|
|
regex:
|
|
- (?:keen).{0,40}\b([0-9A-Z]{64})\b
|
|
part: body
|
|
- type: regex
|
|
name: kickbox
|
|
regex:
|
|
- (?:kickbox).{0,40}\b([a-zA-Z0-9_]+[a-zA-Z0-9]{64})\b
|
|
part: body
|
|
- type: regex
|
|
name: klipfolio
|
|
regex:
|
|
- (?:klipfolio).{0,40}\b([0-9a-f]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: kontent
|
|
regex:
|
|
- (?:kontent).{0,40}\b([a-z0-9-]{36})\b
|
|
part: body
|
|
- type: regex
|
|
name: kraken_1
|
|
regex:
|
|
- (?:kraken).{0,40}\b([0-9A-Za-z\/\+=]{56}[ "'\r\n]{1})
|
|
part: body
|
|
- type: regex
|
|
name: kraken_2
|
|
regex:
|
|
- (?:kraken).{0,40}\b([0-9A-Za-z\/\+=]{86,88}[ "'\r\n]{1})
|
|
part: body
|
|
- type: regex
|
|
name: kucoin_1
|
|
regex:
|
|
- (?:kucoin).{0,40}([ \r\n]{1}[!-~]{7,32}[ \r\n]{1})
|
|
part: body
|
|
- type: regex
|
|
name: kucoin_2
|
|
regex:
|
|
- >-
|
|
(?:kucoin).{0,40}\b([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\b
|
|
part: body
|
|
- type: regex
|
|
name: kucoin_3
|
|
regex:
|
|
- (?:kucoin).{0,40}\b([0-9a-f]{24})\b
|
|
part: body
|
|
- type: regex
|
|
name: kylas
|
|
regex:
|
|
- (?:kylas).{0,40}\b([a-z0-9-]{36})\b
|
|
part: body
|
|
- type: regex
|
|
name: languagelayer
|
|
regex:
|
|
- (?:languagelayer).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: lastfm
|
|
regex:
|
|
- (?:lastfm).{0,40}\b([0-9a-z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: launchdarkly
|
|
regex:
|
|
- (?:launchdarkly).{0,40}\b([a-z0-9-]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: leadfeeder
|
|
regex:
|
|
- (?:leadfeeder).{0,40}\b([a-zA-Z0-9-]{43})\b
|
|
part: body
|
|
- type: regex
|
|
name: lendflow
|
|
regex:
|
|
- >-
|
|
(?:lendflow).{0,40}\b([a-zA-Z0-9]{36}\.[a-zA-Z0-9]{235}\.[a-zA-Z0-9]{32}\-[a-zA-Z0-9]{47}\-[a-zA-Z0-9_]{162}\-[a-zA-Z0-9]{42}\-[a-zA-Z0-9_]{40}\-[a-zA-Z0-9_]{66}\-[a-zA-Z0-9_]{59}\-[a-zA-Z0-9]{7}\-[a-zA-Z0-9_]{220})\b
|
|
part: body
|
|
- type: regex
|
|
name: lexigram
|
|
regex:
|
|
- (?:lexigram).{0,40}\b([a-zA-Z0-9\S]{301})\b
|
|
part: body
|
|
- type: regex
|
|
name: linearapi
|
|
regex:
|
|
- \b(lin_api_[0-9A-Za-z]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: linemessaging
|
|
regex:
|
|
- (?:line).{0,40}\b([A-Za-z0-9+/]{171,172})\b
|
|
part: body
|
|
- type: regex
|
|
name: linenotify
|
|
regex:
|
|
- (?:linenotify).{0,40}\b([0-9A-Za-z]{43})\b
|
|
part: body
|
|
- type: regex
|
|
name: linkpreview
|
|
regex:
|
|
- (?:linkpreview).{0,40}\b([a-zA-Z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: liveagent
|
|
regex:
|
|
- (?:liveagent).{0,40}\b([a-zA-Z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: livestorm
|
|
regex:
|
|
- >-
|
|
(?:livestorm).{0,40}\b(eyJhbGciOiJIUzI1NiJ9\.eyJhdWQiOiJhcGkubGl2ZXN0b3JtLmNvIiwianRpIjoi[0-9A-Z-a-z]{134}\.[0-9A-Za-z\-\_]{43}[
|
|
\r\n]{1})
|
|
part: body
|
|
- type: regex
|
|
name: locationiq
|
|
regex:
|
|
- \b(pk\.[a-zA-Z-0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: loginradius
|
|
regex:
|
|
- >-
|
|
(?:loginradius).{0,40}\b([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\b
|
|
part: body
|
|
- type: regex
|
|
name: lokalisetoken
|
|
regex:
|
|
- (?:lokalise).{0,40}\b([a-z0-9]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: loyverse
|
|
regex:
|
|
- (?:loyverse).{0,40}\b([0-9-a-z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: luno_1
|
|
regex:
|
|
- (?:luno).{0,40}\b([a-z0-9]{13})\b
|
|
part: body
|
|
- type: regex
|
|
name: luno_2
|
|
regex:
|
|
- (?:luno).{0,40}\b([a-zA-Z0-9_-]{43})\b
|
|
part: body
|
|
- type: regex
|
|
name: macaddress
|
|
regex:
|
|
- (?:macaddress).{0,40}\b([a-zA-Z0-9_]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: madkudu
|
|
regex:
|
|
- (?:madkudu).{0,40}\b([0-9a-f]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: magnetic
|
|
regex:
|
|
- >-
|
|
(?:magnetic).{0,40}\b([0-9Aa-z]{8}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{12})\b
|
|
part: body
|
|
- type: regex
|
|
name: mailchimp_api_key
|
|
regex:
|
|
- '[0-9a-f]{32}-us[0-9]{1,2}'
|
|
part: body
|
|
- type: regex
|
|
name: mailboxlayer
|
|
regex:
|
|
- (?:mailboxlayer).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: mailerlite
|
|
regex:
|
|
- (?:mailerlite).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: mailgun_2
|
|
regex:
|
|
- (?:mailgun).{0,40}\b([a-zA-Z-0-9]{72})\b
|
|
part: body
|
|
- type: regex
|
|
name: mailgun_api_key_1
|
|
regex:
|
|
- key-[0-9a-zA-Z]{32}
|
|
part: body
|
|
- type: regex
|
|
name: mailjetbasicauth
|
|
regex:
|
|
- (?:mailjet).{0,40}\b([A-Za-z0-9]{87}\=)
|
|
part: body
|
|
- type: regex
|
|
name: mailjetsms
|
|
regex:
|
|
- (?:mailjet).{0,40}\b([A-Za-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: mailmodo
|
|
regex:
|
|
- >-
|
|
(?:mailmodo).{0,40}\b([A-Z0-9]{7}-[A-Z0-9]{7}-[A-Z0-9]{7}-[A-Z0-9]{7})\b
|
|
part: body
|
|
- type: regex
|
|
name: mailsac
|
|
regex:
|
|
- (?:mailsac).{0,40}\b(k_[0-9A-Za-z]{36,})\b
|
|
part: body
|
|
- type: regex
|
|
name: mandrill
|
|
regex:
|
|
- (?:mandrill).{0,40}\b([A-Za-z0-9_-]{22})\b
|
|
part: body
|
|
- type: regex
|
|
name: mapbox_2
|
|
regex:
|
|
- \b(sk\.[a-zA-Z-0-9\.]{80,240})\b
|
|
part: body
|
|
- type: regex
|
|
name: mapquest
|
|
regex:
|
|
- (?:mapquest).{0,40}\b([0-9A-Za-z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: marketstack
|
|
regex:
|
|
- (?:marketstack).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: mattermostpersonaltoken_1
|
|
regex:
|
|
- (?:mattermost).{0,40}\b([A-Za-z0-9-_]{1,}.cloud.mattermost.com)\b
|
|
part: body
|
|
- type: regex
|
|
name: mattermostpersonaltoken_2
|
|
regex:
|
|
- (?:mattermost).{0,40}\b([a-z0-9]{26})\b
|
|
part: body
|
|
- type: regex
|
|
name: mavenlink
|
|
regex:
|
|
- (?:mavenlink).{0,40}\b([0-9a-z]{64})\b
|
|
part: body
|
|
- type: regex
|
|
name: maxmindlicense_1
|
|
regex:
|
|
- (?:maxmind|geoip).{0,40}\b([0-9A-Za-z]{16})\b
|
|
part: body
|
|
- type: regex
|
|
name: maxmindlicense_2
|
|
regex:
|
|
- (?:maxmind|geoip).{0,40}\b([0-9]{2,7})\b
|
|
part: body
|
|
- type: regex
|
|
name: meaningcloud
|
|
regex:
|
|
- (?:meaningcloud).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: mediastack
|
|
regex:
|
|
- (?:mediastack).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: meistertask
|
|
regex:
|
|
- (?:meistertask).{0,40}\b([a-zA-Z0-9]{43})\b
|
|
part: body
|
|
- type: regex
|
|
name: mesibo
|
|
regex:
|
|
- (?:mesibo).{0,40}\b([0-9A-Za-z]{64})\b
|
|
part: body
|
|
- type: regex
|
|
name: messagebird
|
|
regex:
|
|
- (?:messagebird).{0,40}\b([A-Za-z0-9_-]{25})\b
|
|
part: body
|
|
- type: regex
|
|
name: metaapi_1
|
|
regex:
|
|
- (?:metaapi|meta-api).{0,40}\b([0-9a-f]{64})\b
|
|
part: body
|
|
- type: regex
|
|
name: metaapi_2
|
|
regex:
|
|
- (?:metaapi|meta-api).{0,40}\b([0-9a-f]{24})\b
|
|
part: body
|
|
- type: regex
|
|
name: metrilo
|
|
regex:
|
|
- (?:metrilo).{0,40}\b([a-z0-9]{16})\b
|
|
part: body
|
|
- type: regex
|
|
name: microsoftteamswebhook
|
|
regex:
|
|
- >-
|
|
(https:\/\/[a-zA-Z-0-9]+\.webhook\.office\.com\/webhookb2\/[a-zA-Z-0-9]{8}-[a-zA-Z-0-9]{4}-[a-zA-Z-0-9]{4}-[a-zA-Z-0-9]{4}-[a-zA-Z-0-9]{12}\@[a-zA-Z-0-9]{8}-[a-zA-Z-0-9]{4}-[a-zA-Z-0-9]{4}-[a-zA-Z-0-9]{4}-[a-zA-Z-0-9]{12}\/IncomingWebhook\/[a-zA-Z-0-9]{32}\/[a-zA-Z-0-9]{8}-[a-zA-Z-0-9]{4}-[a-zA-Z-0-9]{4}-[a-zA-Z-0-9]{4}-[a-zA-Z-0-9]{12})
|
|
part: body
|
|
- type: regex
|
|
name: midise
|
|
regex:
|
|
- midi-662b69edd2[a-zA-Z0-9]{54}
|
|
part: body
|
|
- type: regex
|
|
name: mindmeister
|
|
regex:
|
|
- (?:mindmeister).{0,40}\b([a-zA-Z0-9]{43})\b
|
|
part: body
|
|
- type: regex
|
|
name: mite_1
|
|
regex:
|
|
- (?:mite).{0,40}\b([0-9a-z]{16})\b
|
|
part: body
|
|
- type: regex
|
|
name: mite_2
|
|
regex:
|
|
- \b([0-9a-z-]{1,}.mite.yo.lk)\b
|
|
part: body
|
|
- type: regex
|
|
name: mixmax
|
|
regex:
|
|
- (?:mixmax).{0,40}\b([a-zA-Z0-9_-]{36})\b
|
|
part: body
|
|
- type: regex
|
|
name: mixpanel_1
|
|
regex:
|
|
- (?:mixpanel).{0,40}\b([a-zA-Z0-9.-]{30,40})\b
|
|
part: body
|
|
- type: regex
|
|
name: mixpanel_2
|
|
regex:
|
|
- (?:mixpanel).{0,40}\b([a-zA-Z0-9-]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: moderation
|
|
regex:
|
|
- >-
|
|
(?:moderation).{0,40}\b([a-zA-Z0-9]{36}\.[a-zA-Z0-9]{115}\.[a-zA-Z0-9_]{43})\b
|
|
part: body
|
|
- type: regex
|
|
name: monday
|
|
regex:
|
|
- (?:monday).{0,40}\b(ey[a-zA-Z0-9_.]{210,225})\b
|
|
part: body
|
|
- type: regex
|
|
name: moonclerck
|
|
regex:
|
|
- (?:moonclerck).{0,40}\b([0-9a-z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: moonclerk
|
|
regex:
|
|
- (?:moonclerk).{0,40}\b([0-9a-z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: moosend
|
|
regex:
|
|
- >-
|
|
(?:moosend).{0,40}\b([0-9Aa-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\b
|
|
part: body
|
|
- type: regex
|
|
name: mrticktock_1
|
|
regex:
|
|
- (?:mrticktock).{0,40}\b([a-zA-Z0-9!=@#$%()_^]{1,50})
|
|
part: body
|
|
- type: regex
|
|
name: myintervals
|
|
regex:
|
|
- (?:myintervals).{0,40}\b([0-9a-z]{11})\b
|
|
part: body
|
|
- type: regex
|
|
name: nasdaqdatalink
|
|
regex:
|
|
- (?:nasdaq).{0,40}\b([a-zA-Z0-9_-]{20})\b
|
|
part: body
|
|
- type: regex
|
|
name: nethunt_1
|
|
regex:
|
|
- (?:nethunt).{0,40}\b([a-zA-Z0-9.-@]{25,30})\b
|
|
part: body
|
|
- type: regex
|
|
name: nethunt_2
|
|
regex:
|
|
- (?:nethunt).{0,40}\b([a-z0-9-\S]{36})\b
|
|
part: body
|
|
- type: regex
|
|
name: netlify
|
|
regex:
|
|
- (?:netlify).{0,40}\b([A-Za-z0-9_-]{43,45})\b
|
|
part: body
|
|
- type: regex
|
|
name: neutrinoapi_1
|
|
regex:
|
|
- (?:neutrinoapi).{0,40}\b([a-zA-Z0-9]{48})\b
|
|
part: body
|
|
- type: regex
|
|
name: neutrinoapi_2
|
|
regex:
|
|
- (?:neutrinoapi).{0,40}\b([a-zA-Z0-9]{6,24})\b
|
|
part: body
|
|
- type: regex
|
|
name: newrelic_admin_api_key
|
|
regex:
|
|
- NRAA-[a-f0-9]{27}
|
|
part: body
|
|
- type: regex
|
|
name: newrelic_insights_api_key
|
|
regex:
|
|
- NRI(?:I|Q)-[A-Za-z0-9\-_]{32}
|
|
part: body
|
|
- type: regex
|
|
name: newrelic_rest_api_key
|
|
regex:
|
|
- NRRA-[a-f0-9]{42}
|
|
part: body
|
|
- type: regex
|
|
name: newrelic_synthetics_location_key
|
|
regex:
|
|
- NRSP-[a-z]{2}[0-9]{2}[a-f0-9]{31}
|
|
part: body
|
|
- type: regex
|
|
name: newrelicpersonalapikey
|
|
regex:
|
|
- (?:newrelic).{0,40}\b([A-Za-z0-9_\.]{4}-[A-Za-z0-9_\.]{42})\b
|
|
part: body
|
|
- type: regex
|
|
name: newsapi
|
|
regex:
|
|
- (?:newsapi).{0,40}\b([a-z0-9]{32})
|
|
part: body
|
|
- type: regex
|
|
name: newscatcher
|
|
regex:
|
|
- (?:newscatcher).{0,40}\b([0-9A-Za-z_]{43})\b
|
|
part: body
|
|
- type: regex
|
|
name: nexmoapikey_1
|
|
regex:
|
|
- (?:nexmo).{0,40}\b([A-Za-z0-9_-]{8})\b
|
|
part: body
|
|
- type: regex
|
|
name: nexmoapikey_2
|
|
regex:
|
|
- (?:nexmo).{0,40}\b([A-Za-z0-9_-]{16})\b
|
|
part: body
|
|
- type: regex
|
|
name: nftport
|
|
regex:
|
|
- >-
|
|
(?:nftport).{0,40}\b([a-z0-9]{8}-[a-z0-9]{4}-[a-z0-9]{4}-[a-z0-9]{4}-[a-z0-9]{12})\b
|
|
part: body
|
|
- type: regex
|
|
name: nicereply
|
|
regex:
|
|
- (?:nicereply).{0,40}\b([0-9a-f]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: nimble
|
|
regex:
|
|
- (?:nimble).{0,40}\b([a-zA-Z0-9]{30})\b
|
|
part: body
|
|
- type: regex
|
|
name: nitro
|
|
regex:
|
|
- (?:nitro).{0,40}\b([0-9a-f]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: noticeable
|
|
regex:
|
|
- (?:noticeable).{0,40}\b([0-9a-zA-Z]{20})\b
|
|
part: body
|
|
- type: regex
|
|
name: notion
|
|
regex:
|
|
- \b(secret_[A-Za-z0-9]{43})\b
|
|
part: body
|
|
- type: regex
|
|
name: nozbeteams
|
|
regex:
|
|
- >-
|
|
(?:nozbe|nozbeteams).{0,40}\b([0-9A-Za-z]{16}_[0-9A-Za-z\-_]{64}[
|
|
\r\n]{1})
|
|
part: body
|
|
- type: regex
|
|
name: numverify
|
|
regex:
|
|
- (?:numverify).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: nutritionix_1
|
|
regex:
|
|
- (?:nutritionix).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: nutritionix_2
|
|
regex:
|
|
- (?:nutritionix).{0,40}\b([a-z0-9]{8})\b
|
|
part: body
|
|
- type: regex
|
|
name: nylas
|
|
regex:
|
|
- (?:nylas).{0,40}\b([0-9A-Za-z]{30})\b
|
|
part: body
|
|
- type: regex
|
|
name: oanda
|
|
regex:
|
|
- (?:oanda).{0,40}\b([a-zA-Z0-9]{24})\b
|
|
part: body
|
|
- type: regex
|
|
name: omnisend
|
|
regex:
|
|
- (?:omnisend).{0,40}\b([a-z0-9A-Z-]{75})\b
|
|
part: body
|
|
- type: regex
|
|
name: onedesk_1
|
|
regex:
|
|
- (?:onedesk).{0,40}\b([a-zA-Z0-9!=@#$%^]{8,64})
|
|
part: body
|
|
- type: regex
|
|
name: onelogin_2
|
|
regex:
|
|
- secret[a-zA-Z0-9_' "=]{0,20}([a-z0-9]{64})
|
|
part: body
|
|
- type: regex
|
|
name: onepagecrm_1
|
|
regex:
|
|
- (?:onepagecrm).{0,40}\b([a-zA-Z0-9=]{44})
|
|
part: body
|
|
- type: regex
|
|
name: onepagecrm_2
|
|
regex:
|
|
- (?:onepagecrm).{0,40}\b([a-z0-9]{24})\b
|
|
part: body
|
|
- type: regex
|
|
name: onwaterio
|
|
regex:
|
|
- (?:onwater).{0,40}\b([a-zA-Z0-9_-]{20})\b
|
|
part: body
|
|
- type: regex
|
|
name: oopspam
|
|
regex:
|
|
- (?:oopspam).{0,40}\b([a-zA-Z0-9]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: opencagedata
|
|
regex:
|
|
- (?:opencagedata).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: opengraphr
|
|
regex:
|
|
- (?:opengraphr).{0,40}\b([0-9Aa-zA-Z]{80})\b
|
|
part: body
|
|
- type: regex
|
|
name: openuv
|
|
regex:
|
|
- (?:openuv).{0,40}\b([0-9a-z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: openweather
|
|
regex:
|
|
- (?:openweather).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: optimizely
|
|
regex:
|
|
- (?:optimizely).{0,40}\b([0-9A-Za-z-:]{54})\b
|
|
part: body
|
|
- type: regex
|
|
name: owlbot
|
|
regex:
|
|
- (?:owlbot).{0,40}\b([a-z0-9]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: pgp_private_key_block
|
|
regex:
|
|
- '-----BEGIN PGP PRIVATE KEY BLOCK-----'
|
|
part: body
|
|
- type: regex
|
|
name: pagerdutyapikey
|
|
regex:
|
|
- >-
|
|
(?:pagerduty).{0,40}\b([a-z]{1}\+[a-zA-Z]{9}\-[a-z]{2}\-[a-z0-9]{5})\b
|
|
part: body
|
|
- type: regex
|
|
name: pandadoc
|
|
regex:
|
|
- (?:pandadoc).{0,40}\b([a-zA-Z0-9]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: pandascore
|
|
regex:
|
|
- (?:pandascore).{0,40}([ \r\n]{0,1}[0-9A-Za-z\-\_]{51}[ \r\n]{1})
|
|
part: body
|
|
- type: regex
|
|
name: paralleldots
|
|
regex:
|
|
- (?:paralleldots).{0,40}\b([0-9A-Za-z]{43})\b
|
|
part: body
|
|
- type: regex
|
|
name: partnerstack
|
|
regex:
|
|
- (?:partnerstack).{0,40}\b([0-9A-Za-z]{64})\b
|
|
part: body
|
|
- type: regex
|
|
name: passbase
|
|
regex:
|
|
- (?:passbase).{0,40}\b([a-zA-Z0-9]{128})\b
|
|
part: body
|
|
- type: regex
|
|
name: password_in_url
|
|
regex:
|
|
- '[a-zA-Z]{3,10}://[^/\s:@]{3,20}:[^/\s:@]{3,20}@.{1,100}["''\s]'
|
|
part: body
|
|
- type: regex
|
|
name: pastebin
|
|
regex:
|
|
- (?:pastebin).{0,40}\b([a-zA-Z0-9_]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: paypal_braintree_access_token
|
|
regex:
|
|
- access_token\$production\$[0-9a-z]{16}\$[0-9a-f]{32}
|
|
part: body
|
|
- type: regex
|
|
name: paymoapp
|
|
regex:
|
|
- (?:paymoapp).{0,40}\b([a-zA-Z0-9]{44})\b
|
|
part: body
|
|
- type: regex
|
|
name: paymongo
|
|
regex:
|
|
- (?:paymongo).{0,40}\b([a-zA-Z0-9_]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: paystack
|
|
regex:
|
|
- \b(sk\_[a-z]{1,}\_[A-Za-z0-9]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: pdflayer
|
|
regex:
|
|
- (?:pdflayer).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: pdfshift
|
|
regex:
|
|
- (?:pdfshift).{0,40}\b([0-9a-f]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: peopledatalabs
|
|
regex:
|
|
- (?:peopledatalabs).{0,40}\b([a-z0-9]{64})\b
|
|
part: body
|
|
- type: regex
|
|
name: pepipost
|
|
regex:
|
|
- (?:pepipost|netcore).{0,40}\b([a-zA-Z-0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: picatic_api_key
|
|
regex:
|
|
- sk_live_[0-9a-z]{32}
|
|
part: body
|
|
- type: regex
|
|
name: pipedream
|
|
regex:
|
|
- (?:pipedream).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: pipedrive
|
|
regex:
|
|
- (?:pipedrive).{0,40}\b([a-zA-Z0-9]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: pivotaltracker
|
|
regex:
|
|
- (?:pivotal).{0,40}([a-z0-9]{32})
|
|
part: body
|
|
- type: regex
|
|
name: pixabay
|
|
regex:
|
|
- (?:pixabay).{0,40}\b([a-z0-9-]{34})\b
|
|
part: body
|
|
- type: regex
|
|
name: plaidkey_1
|
|
regex:
|
|
- (?:plaid).{0,40}\b([a-z0-9]{24})\b
|
|
part: body
|
|
- type: regex
|
|
name: plaidkey_2
|
|
regex:
|
|
- (?:plaid).{0,40}\b([a-z0-9]{30})\b
|
|
part: body
|
|
- type: regex
|
|
name: planviewleankit_1
|
|
regex:
|
|
- (?:planviewleankit|planview).{0,40}\b([0-9a-f]{128})\b
|
|
part: body
|
|
- type: regex
|
|
name: planviewleankit_2
|
|
regex:
|
|
- >-
|
|
(?:planviewleankit|planview).{0,40}(?:subdomain).\b([a-zA-Z][a-zA-Z0-9.-]{1,23}[a-zA-Z0-9])\b
|
|
part: body
|
|
- type: regex
|
|
name: planyo
|
|
regex:
|
|
- (?:planyo).{0,40}\b([0-9a-z]{62})\b
|
|
part: body
|
|
- type: regex
|
|
name: plivo_1
|
|
regex:
|
|
- (?:plivo).{0,40}\b([A-Za-z0-9_-]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: plivo_2
|
|
regex:
|
|
- (?:plivo).{0,40}\b([A-Z]{20})\b
|
|
part: body
|
|
- type: regex
|
|
name: poloniex_1
|
|
regex:
|
|
- (?:poloniex).{0,40}\b([0-9a-f]{128})\b
|
|
part: body
|
|
- type: regex
|
|
name: poloniex_2
|
|
regex:
|
|
- >-
|
|
(?:poloniex).{0,40}\b([0-9A-Z]{8}-[0-9A-Z]{8}-[0-9A-Z]{8}-[0-9A-Z]{8})\b
|
|
part: body
|
|
- type: regex
|
|
name: polygon
|
|
regex:
|
|
- (?:polygon).{0,40}\b([a-z0-9A-Z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: positionstack
|
|
regex:
|
|
- (?:positionstack).{0,40}\b([a-zA-Z0-9_]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: postageapp
|
|
regex:
|
|
- (?:postageapp).{0,40}\b([0-9A-Za-z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: posthog
|
|
regex:
|
|
- \b(phc_[a-zA-Z0-9_]{43})\b
|
|
part: body
|
|
- type: regex
|
|
name: postman
|
|
regex:
|
|
- \b(PMAK-[a-zA-Z-0-9]{59})\b
|
|
part: body
|
|
- type: regex
|
|
name: postmark
|
|
regex:
|
|
- >-
|
|
(?:postmark).{0,40}\b([0-9a-z]{8}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{12})\b
|
|
part: body
|
|
- type: regex
|
|
name: powrbot
|
|
regex:
|
|
- (?:powrbot).{0,40}\b([a-z0-9A-Z]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: privatekey
|
|
regex:
|
|
- >-
|
|
-----\s*?BEGIN[ A-Z0-9_-]*?PRIVATE KEY\s*?-----[\s\S]*?----\s*?END[
|
|
A-Z0-9_-]*? PRIVATE KEY\s*?-----
|
|
part: body
|
|
- type: regex
|
|
name: prospectcrm
|
|
regex:
|
|
- (?:prospect).{0,40}\b([a-z0-9-]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: prospectio
|
|
regex:
|
|
- (?:prospect).{0,40}\b([a-z0-9A-Z-]{50})\b
|
|
part: body
|
|
- type: regex
|
|
name: protocolsio
|
|
regex:
|
|
- (?:protocols).{0,40}\b([a-z0-9]{64})\b
|
|
part: body
|
|
- type: regex
|
|
name: proxycrawl
|
|
regex:
|
|
- (?:proxycrawl).{0,40}\b([a-zA-Z0-9_]{22})\b
|
|
part: body
|
|
- type: regex
|
|
name: pubnubpublishkey_1
|
|
regex:
|
|
- >-
|
|
\b(sub-c-[0-9a-z]{8}-[a-z]{4}-[a-z0-9]{4}-[a-z0-9]{4}-[a-z0-9]{12})\b
|
|
part: body
|
|
- type: regex
|
|
name: pubnubpublishkey_2
|
|
regex:
|
|
- >-
|
|
\b(pub-c-[0-9a-z]{8}-[0-9a-z]{4}-[a-z0-9]{4}-[a-z0-9]{4}-[a-z0-9]{12})\b
|
|
part: body
|
|
- type: regex
|
|
name: purestake
|
|
regex:
|
|
- (?:purestake).{0,40}\b([a-zA-Z0-9]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: pushbulletapikey
|
|
regex:
|
|
- (?:pushbullet).{0,40}\b([A-Za-z0-9_\.]{34})\b
|
|
part: body
|
|
- type: regex
|
|
name: pusherchannelkey_2
|
|
regex:
|
|
- (?:pusher).{0,40}\b([a-z0-9]{20})\b
|
|
part: body
|
|
- type: regex
|
|
name: pusherchannelkey_3
|
|
regex:
|
|
- (?:pusher).{0,40}\b([0-9]{7})\b
|
|
part: body
|
|
- type: regex
|
|
name: pypi_upload_token
|
|
regex:
|
|
- pypi-AgEIcHlwaS5vcmc[A-Za-z0-9-_]{50,1000}
|
|
part: body
|
|
- type: regex
|
|
name: qualaroo
|
|
regex:
|
|
- (?:qualaroo).{0,40}\b([a-z0-9A-Z=]{64})
|
|
part: body
|
|
- type: regex
|
|
name: qubole
|
|
regex:
|
|
- (?:qubole).{0,40}\b([0-9a-z]{64})\b
|
|
part: body
|
|
- type: regex
|
|
name: quickmetrics
|
|
regex:
|
|
- (?:quickmetrics).{0,40}\b([a-zA-Z0-9_-]{22})\b
|
|
part: body
|
|
- type: regex
|
|
name: rkcs8
|
|
regex:
|
|
- '-----BEGIN PRIVATE KEY-----'
|
|
part: body
|
|
- type: regex
|
|
name: rsa_private_key
|
|
regex:
|
|
- '-----BEGIN RSA PRIVATE KEY-----'
|
|
part: body
|
|
- type: regex
|
|
name: rapidapi
|
|
regex:
|
|
- (?:rapidapi).{0,40}\b([A-Za-z0-9_-]{50})\b
|
|
part: body
|
|
- type: regex
|
|
name: raven
|
|
regex:
|
|
- (?:raven).{0,40}\b([A-Z0-9-]{16})\b
|
|
part: body
|
|
- type: regex
|
|
name: rawg
|
|
regex:
|
|
- (?:rawg).{0,40}\b([0-9Aa-z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: razorpay_1
|
|
regex:
|
|
- \brzp_\w{2,6}_\w{10,20}\b
|
|
part: body
|
|
- type: regex
|
|
name: readme
|
|
regex:
|
|
- (?:readme).{0,40}\b([a-zA-Z0-9_]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: reallysimplesystems
|
|
regex:
|
|
- \b(ey[a-zA-Z0-9-._]{153}.ey[a-zA-Z0-9-._]{916,1000})\b
|
|
part: body
|
|
- type: regex
|
|
name: rebrandly
|
|
regex:
|
|
- (?:rebrandly).{0,40}\b([a-zA-Z0-9_]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: refiner
|
|
regex:
|
|
- >-
|
|
(?:refiner).{0,40}\b([0-9Aa-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\b
|
|
part: body
|
|
- type: regex
|
|
name: repairshopr_1
|
|
regex:
|
|
- (?:repairshopr).{0,40}\b([a-zA-Z0-9_.!+$#^*]{3,32})\b
|
|
part: body
|
|
- type: regex
|
|
name: repairshopr_2
|
|
regex:
|
|
- (?:repairshopr).{0,40}\b([a-zA-Z0-9-]{51})\b
|
|
part: body
|
|
- type: regex
|
|
name: restpack
|
|
regex:
|
|
- (?:restpack).{0,40}\b([a-zA-Z0-9]{48})\b
|
|
part: body
|
|
- type: regex
|
|
name: restpackhtmltopdfapi
|
|
regex:
|
|
- (?:restpack).{0,40}\b([0-9A-Za-z]{48})\b
|
|
part: body
|
|
- type: regex
|
|
name: rev_1
|
|
regex:
|
|
- (?:rev).{0,40}\b([0-9a-zA-Z\/\+]{27}\=[ \r\n]{1})
|
|
part: body
|
|
- type: regex
|
|
name: revampcrm_1
|
|
regex:
|
|
- (?:revamp).{0,40}\b([a-zA-Z0-9]{40}\b)
|
|
part: body
|
|
- type: regex
|
|
name: ringcentral_1
|
|
regex:
|
|
- (?:ringcentral).{0,40}\b(https://www.[0-9A-Za-z_-]{1,}.com)\b
|
|
part: body
|
|
- type: regex
|
|
name: ringcentral_2
|
|
regex:
|
|
- (?:ringcentral).{0,40}\b([0-9A-Za-z_-]{22})\b
|
|
part: body
|
|
- type: regex
|
|
name: ritekit
|
|
regex:
|
|
- (?:ritekit).{0,40}\b([0-9a-f]{44})\b
|
|
part: body
|
|
- type: regex
|
|
name: roaring
|
|
regex:
|
|
- (?:roaring).{0,40}\b([0-9A-Za-z_-]{28})\b
|
|
part: body
|
|
- type: regex
|
|
name: rocketreach
|
|
regex:
|
|
- (?:rocketreach).{0,40}\b([a-z0-9-]{39})\b
|
|
part: body
|
|
- type: regex
|
|
name: roninapp_2
|
|
regex:
|
|
- (?:ronin).{0,40}\b([0-9a-zA-Z]{26})\b
|
|
part: body
|
|
- type: regex
|
|
name: route4me
|
|
regex:
|
|
- (?:route4me).{0,40}\b([0-9A-Z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: rownd_1
|
|
regex:
|
|
- >-
|
|
(?:rownd).{0,40}\b([a-z0-9]{8}\-[a-z0-9]{4}\-[a-z0-9]{4}\-[a-z0-9]{4}\-[a-z0-9]{12})\b
|
|
part: body
|
|
- type: regex
|
|
name: rownd_2
|
|
regex:
|
|
- (?:rownd).{0,40}\b([a-z0-9]{48})\b
|
|
part: body
|
|
- type: regex
|
|
name: rownd_3
|
|
regex:
|
|
- (?:rownd).{0,40}\b([0-9]{18})\b
|
|
part: body
|
|
- type: regex
|
|
name: rubygems
|
|
regex:
|
|
- \b(rubygems_[a-zA0-9]{48})\b
|
|
part: body
|
|
- type: regex
|
|
name: runrunit_1
|
|
regex:
|
|
- (?:runrunit).{0,40}\b([0-9a-f]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: runrunit_2
|
|
regex:
|
|
- (?:runrunit).{0,40}\b([0-9A-Za-z]{18,20})\b
|
|
part: body
|
|
- type: regex
|
|
name: ssh
|
|
regex:
|
|
- '-----BEGIN OPENSSH PRIVATE KEY-----'
|
|
part: body
|
|
- type: regex
|
|
name: ssh_dsa_private_key
|
|
regex:
|
|
- '-----BEGIN DSA PRIVATE KEY-----'
|
|
part: body
|
|
- type: regex
|
|
name: salesblink
|
|
regex:
|
|
- (?:salesblink).{0,40}\b([a-zA-Z]{16})\b
|
|
part: body
|
|
- type: regex
|
|
name: salescookie
|
|
regex:
|
|
- (?:salescookie).{0,40}\b([a-zA-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: salesflare
|
|
regex:
|
|
- (?:salesflare).{0,40}\b([a-zA-Z0-9_]{45})\b
|
|
part: body
|
|
- type: regex
|
|
name: satismeterprojectkey_1
|
|
regex:
|
|
- >-
|
|
(?:satismeter).{0,40}\b([a-zA-Z0-9]{4,20}@[a-zA-Z0-9]{2,12}.[a-zA-Z0-9]{2,12})\b
|
|
part: body
|
|
- type: regex
|
|
name: satismeterprojectkey_2
|
|
regex:
|
|
- (?:satismeter).{0,40}\b([a-zA-Z0-9]{24})\b
|
|
part: body
|
|
- type: regex
|
|
name: satismeterprojectkey_3
|
|
regex:
|
|
- (?:satismeter).{0,40}\b([a-zA-Z0-9!=@#$%^]{6,32})
|
|
part: body
|
|
- type: regex
|
|
name: satismeterwritekey
|
|
regex:
|
|
- (?:satismeter).{0,40}\b([a-z0-9A-Z]{16})\b
|
|
part: body
|
|
- type: regex
|
|
name: saucelabs_1
|
|
regex:
|
|
- \b(oauth\-[a-z0-9]{8,}\-[a-z0-9]{5})\b
|
|
part: body
|
|
- type: regex
|
|
name: saucelabs_2
|
|
regex:
|
|
- >-
|
|
(?:saucelabs).{0,40}\b([a-z0-9]{8}\-[a-z0-9]{4}\-[a-z0-9]{4}\-[a-z0-9]{4}\-[a-z0-9]{12})\b
|
|
part: body
|
|
- type: regex
|
|
name: scalewaykey
|
|
regex:
|
|
- >-
|
|
(?:scaleway).{0,40}\b([0-9a-z]{8}-[a-z0-9]{4}-[a-z0-9]{4}-[0-9a-z]{4}-[0-9a-z]{12})\b
|
|
part: body
|
|
- type: regex
|
|
name: scrapeowl
|
|
regex:
|
|
- (?:scrapeowl).{0,40}\b([0-9a-z]{30})\b
|
|
part: body
|
|
- type: regex
|
|
name: scraperapi
|
|
regex:
|
|
- (?:scraperapi).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: scraperbox
|
|
regex:
|
|
- (?:scraperbox).{0,40}\b([A-Z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: scrapersite
|
|
regex:
|
|
- (?:scrapersite).{0,40}\b([a-zA-Z0-9]{45})\b
|
|
part: body
|
|
- type: regex
|
|
name: scrapestack
|
|
regex:
|
|
- (?:scrapestack).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: scrapfly
|
|
regex:
|
|
- (?:scrapfly).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: scrapingant
|
|
regex:
|
|
- (?:scrapingant).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: scrapingbee
|
|
regex:
|
|
- (?:scrapingbee).{0,40}\b([A-Z0-9]{80})\b
|
|
part: body
|
|
- type: regex
|
|
name: screenshotapi
|
|
regex:
|
|
- >-
|
|
(?:screenshotapi).{0,40}\b([0-9A-Z]{7}\-[0-9A-Z]{7}\-[0-9A-Z]{7}\-[0-9A-Z]{7})\b
|
|
part: body
|
|
- type: regex
|
|
name: screenshotlayer
|
|
regex:
|
|
- (?:screenshotlayer).{0,40}\b([a-zA-Z0-9_]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: securitytrails
|
|
regex:
|
|
- (?:securitytrails).{0,40}\b([a-zA-Z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: segmentapikey
|
|
regex:
|
|
- >-
|
|
(?:segment).{0,40}\b([A-Za-z0-9_\-a-zA-Z]{43}\.[A-Za-z0-9_\-a-zA-Z]{43})\b
|
|
part: body
|
|
- type: regex
|
|
name: selectpdf
|
|
regex:
|
|
- (?:selectpdf).{0,40}\b([a-z0-9-]{36})\b
|
|
part: body
|
|
- type: regex
|
|
name: semaphore
|
|
regex:
|
|
- (?:semaphore).{0,40}\b([0-9a-z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: sendgrid_api_key
|
|
regex:
|
|
- SG\.[\w_]{16,32}\.[\w_]{16,64}
|
|
part: body
|
|
- type: regex
|
|
name: sendbird_1
|
|
regex:
|
|
- (?:sendbird).{0,40}\b([0-9a-f]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: sendbird_2
|
|
regex:
|
|
- >-
|
|
(?:sendbird).{0,40}\b([0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12})\b
|
|
part: body
|
|
- type: regex
|
|
name: sendbirdorganizationapi
|
|
regex:
|
|
- (?:sendbird).{0,40}\b([0-9a-f]{24})\b
|
|
part: body
|
|
- type: regex
|
|
name: sendgrid
|
|
regex:
|
|
- (?:sendgrid).{0,40}(SG\.[\w\-_]{20,24}\.[\w\-_]{39,50})\b
|
|
part: body
|
|
- type: regex
|
|
name: sendinbluev2
|
|
regex:
|
|
- \b(xkeysib\-[A-Za-z0-9_-]{81})\b
|
|
part: body
|
|
- type: regex
|
|
name: sentiment_1
|
|
regex:
|
|
- (?:sentiment).{0,40}\b([0-9]{17})\b
|
|
part: body
|
|
- type: regex
|
|
name: sentiment_2
|
|
regex:
|
|
- (?:sentiment).{0,40}\b([a-zA-Z0-9]{20})\b
|
|
part: body
|
|
- type: regex
|
|
name: sentrytoken
|
|
regex:
|
|
- (?:sentry).{0,40}\b([a-f0-9]{64})\b
|
|
part: body
|
|
- type: regex
|
|
name: serphouse
|
|
regex:
|
|
- (?:serphouse).{0,40}\b([0-9A-Za-z]{60})\b
|
|
part: body
|
|
- type: regex
|
|
name: serpstack
|
|
regex:
|
|
- (?:serpstack).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: sheety_1
|
|
regex:
|
|
- (?:sheety).{0,40}\b([0-9a-z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: sheety_2
|
|
regex:
|
|
- (?:sheety).{0,40}\b([0-9a-z]{64})\b
|
|
part: body
|
|
- type: regex
|
|
name: sherpadesk
|
|
regex:
|
|
- (?:sherpadesk).{0,40}\b([0-9a-z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: shipday
|
|
regex:
|
|
- (?:shipday).{0,40}\b([a-zA-Z0-9.]{11}[a-zA-Z0-9]{20})\b
|
|
part: body
|
|
- type: regex
|
|
name: shodankey
|
|
regex:
|
|
- (?:shodan).{0,40}\b([a-zA-Z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: shopify_access_token
|
|
regex:
|
|
- shpat_[a-fA-F0-9]{32}
|
|
part: body
|
|
- type: regex
|
|
name: shopify_custom_app_access_token
|
|
regex:
|
|
- shpca_[a-fA-F0-9]{32}
|
|
part: body
|
|
- type: regex
|
|
name: shopify_private_app_access_token
|
|
regex:
|
|
- shppa_[a-fA-F0-9]{32}
|
|
part: body
|
|
- type: regex
|
|
name: shopify_shared_secret
|
|
regex:
|
|
- shpss_[a-fA-F0-9]{32}
|
|
part: body
|
|
- type: regex
|
|
name: shortcut
|
|
regex:
|
|
- (?:shortcut).{0,40}\b([0-9a-f-]{36})\b
|
|
part: body
|
|
- type: regex
|
|
name: shotstack
|
|
regex:
|
|
- (?:shotstack).{0,40}\b([a-zA-Z0-9]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: shutterstockoauth
|
|
regex:
|
|
- (?:shutterstock).{0,40}\b(v2/[0-9A-Za-z]{388})\b
|
|
part: body
|
|
- type: regex
|
|
name: signalwire_1
|
|
regex:
|
|
- \b([0-9a-z-]{3,64}.signalwire.com)\b
|
|
part: body
|
|
- type: regex
|
|
name: signalwire_2
|
|
regex:
|
|
- >-
|
|
(?:signalwire).{0,40}\b([0-9a-z]{8}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{12})\b
|
|
part: body
|
|
- type: regex
|
|
name: signalwire_3
|
|
regex:
|
|
- (?:signalwire).{0,40}\b([0-9A-Za-z]{50})\b
|
|
part: body
|
|
- type: regex
|
|
name: signaturit
|
|
regex:
|
|
- (?:signaturit).{0,40}\b([0-9A-Za-z]{86})\b
|
|
part: body
|
|
- type: regex
|
|
name: signupgenius
|
|
regex:
|
|
- (?:signupgenius).{0,40}\b([0-9A-Za-z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: sigopt
|
|
regex:
|
|
- (?:sigopt).{0,40}\b([A-Z0-9]{48})\b
|
|
part: body
|
|
- type: regex
|
|
name: simplesat
|
|
regex:
|
|
- (?:simplesat).{0,40}\b([a-z0-9]{40})
|
|
part: body
|
|
- type: regex
|
|
name: simplynoted
|
|
regex:
|
|
- (?:simplynoted).{0,40}\b([a-zA-Z0-9\S]{340,360})\b
|
|
part: body
|
|
- type: regex
|
|
name: simvoly
|
|
regex:
|
|
- (?:simvoly).{0,40}\b([a-z0-9]{33})\b
|
|
part: body
|
|
- type: regex
|
|
name: sinchmessage
|
|
regex:
|
|
- (?:sinch).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: sirv_1
|
|
regex:
|
|
- (?:sirv).{0,40}\b([a-zA-Z0-9\S]{88})
|
|
part: body
|
|
- type: regex
|
|
name: sirv_2
|
|
regex:
|
|
- (?:sirv).{0,40}\b([a-zA-Z0-9]{26})\b
|
|
part: body
|
|
- type: regex
|
|
name: siteleaf
|
|
regex:
|
|
- (?:siteleaf).{0,40}\b([0-9Aa-z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: skrappio
|
|
regex:
|
|
- (?:skrapp).{0,40}\b([a-z0-9A-Z]{42})\b
|
|
part: body
|
|
- type: regex
|
|
name: skybiometry
|
|
regex:
|
|
- (?:skybiometry).{0,40}\b([0-9a-z]{25,26})\b
|
|
part: body
|
|
- type: regex
|
|
name: slack
|
|
regex:
|
|
- xox[baprs]-[0-9a-zA-Z]{10,48}
|
|
part: body
|
|
- type: regex
|
|
name: slack_token
|
|
regex:
|
|
- (xox[pborsa]-[0-9]{12}-[0-9]{12}-[0-9]{12}-[a-z0-9]{32})
|
|
part: body
|
|
- type: regex
|
|
name: slack_webhook
|
|
regex:
|
|
- >-
|
|
https://hooks.slack.com/services/T[a-zA-Z0-9_]{8,10}/B[a-zA-Z0-9_]{8,12}/[a-zA-Z0-9_]{23,24}
|
|
part: body
|
|
- type: regex
|
|
name: slack_access_token
|
|
regex:
|
|
- xoxb-[0-9A-Za-z\-]{51}
|
|
part: body
|
|
- type: regex
|
|
name: slackwebhook
|
|
regex:
|
|
- (https:\/\/hooks.slack.com\/services\/[A-Za-z0-9+\/]{44,46})
|
|
part: body
|
|
- type: regex
|
|
name: smartsheets
|
|
regex:
|
|
- (?:smartsheets).{0,40}\b([a-zA-Z0-9]{37})\b
|
|
part: body
|
|
- type: regex
|
|
name: smartystreets_1
|
|
regex:
|
|
- (?:smartystreets).{0,40}\b([a-zA-Z0-9]{20})\b
|
|
part: body
|
|
- type: regex
|
|
name: smartystreets_2
|
|
regex:
|
|
- (?:smartystreets).{0,40}\b([a-z0-9-]{36})\b
|
|
part: body
|
|
- type: regex
|
|
name: smooch_1
|
|
regex:
|
|
- (?:smooch).{0,40}\b(act_[0-9a-z]{24})\b
|
|
part: body
|
|
- type: regex
|
|
name: smooch_2
|
|
regex:
|
|
- (?:smooch).{0,40}\b([0-9a-zA-Z_-]{86})\b
|
|
part: body
|
|
- type: regex
|
|
name: snipcart
|
|
regex:
|
|
- (?:snipcart).{0,40}\b([0-9A-Za-z_]{75})\b
|
|
part: body
|
|
- type: regex
|
|
name: snykkey
|
|
regex:
|
|
- >-
|
|
(?:snyk).{0,40}\b([0-9a-z]{8}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{12})\b
|
|
part: body
|
|
- type: regex
|
|
name: sonarqube_token
|
|
regex:
|
|
- sonar.{0,50}(?:"|'|`)?[0-9a-f]{40}(?:"|'|`)?
|
|
part: body
|
|
- type: regex
|
|
name: splunkobservabilitytoken
|
|
regex:
|
|
- (?:splunk).{0,40}\b([a-z0-9A-Z]{22})\b
|
|
part: body
|
|
- type: regex
|
|
name: spoonacular
|
|
regex:
|
|
- (?:spoonacular).{0,40}\b([0-9a-z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: sportsmonk
|
|
regex:
|
|
- (?:sportsmonk).{0,40}\b([0-9a-zA-Z]{60})\b
|
|
part: body
|
|
- type: regex
|
|
name: square
|
|
regex:
|
|
- (?:square).{0,40}(EAAA[a-zA-Z0-9\-\+\=]{60})
|
|
part: body
|
|
- type: regex
|
|
name: square_oauth_secret
|
|
regex:
|
|
- sq0csp-[0-9A-Za-z\-_]{43}
|
|
part: body
|
|
- type: regex
|
|
name: square_access_token
|
|
regex:
|
|
- sq0atp-[0-9A-Za-z\-_]{22}
|
|
part: body
|
|
- type: regex
|
|
name: squareapp_1
|
|
regex:
|
|
- '[\w\-]*sq0i[a-z]{2}-[0-9A-Za-z\-_]{22,43}'
|
|
part: body
|
|
- type: regex
|
|
name: squareapp_2
|
|
regex:
|
|
- '[\w\-]*sq0c[a-z]{2}-[0-9A-Za-z\-_]{40,50}'
|
|
part: body
|
|
- type: regex
|
|
name: squarespace
|
|
regex:
|
|
- >-
|
|
(?:squarespace).{0,40}\b([0-9Aa-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\b
|
|
part: body
|
|
- type: regex
|
|
name: squareup
|
|
regex:
|
|
- \b(sq0idp-[0-9A-Za-z]{22})\b
|
|
part: body
|
|
- type: regex
|
|
name: sslmate
|
|
regex:
|
|
- (?:sslmate).{0,40}\b([a-zA-Z0-9]{36})\b
|
|
part: body
|
|
- type: regex
|
|
name: stitchdata
|
|
regex:
|
|
- (?:stitchdata).{0,40}\b([0-9a-z_]{35})\b
|
|
part: body
|
|
- type: regex
|
|
name: stockdata
|
|
regex:
|
|
- (?:stockdata).{0,40}\b([0-9A-Za-z]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: storecove
|
|
regex:
|
|
- (?:storecove).{0,40}\b([a-zA-Z0-9_-]{43})\b
|
|
part: body
|
|
- type: regex
|
|
name: stormglass
|
|
regex:
|
|
- (?:stormglass).{0,40}\b([0-9Aa-z-]{73})\b
|
|
part: body
|
|
- type: regex
|
|
name: storyblok
|
|
regex:
|
|
- (?:storyblok).{0,40}\b([0-9A-Za-z]{22}t{2})\b
|
|
part: body
|
|
- type: regex
|
|
name: storychief
|
|
regex:
|
|
- (?:storychief).{0,40}\b([a-zA-Z0-9_\-.]{940,1000})
|
|
part: body
|
|
- type: regex
|
|
name: strava_1
|
|
regex:
|
|
- (?:strava).{0,40}\b([0-9]{5})\b
|
|
part: body
|
|
- type: regex
|
|
name: strava_2
|
|
regex:
|
|
- (?:strava).{0,40}\b([0-9a-z]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: streak
|
|
regex:
|
|
- (?:streak).{0,40}\b([0-9Aa-f]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: stripe
|
|
regex:
|
|
- '[rs]k_live_[a-zA-Z0-9]{20,30}'
|
|
part: body
|
|
- type: regex
|
|
name: stripe_api_key_1
|
|
regex:
|
|
- sk_live_[0-9a-zA-Z]{24}
|
|
part: body
|
|
- type: regex
|
|
name: stripe_api_key_2
|
|
regex:
|
|
- stripe[sr]k_live_[0-9a-zA-Z]{24}
|
|
part: body
|
|
- type: regex
|
|
name: stripe_api_key_3
|
|
regex:
|
|
- stripe[sk|rk]_live_[0-9a-zA-Z]{24}
|
|
part: body
|
|
- type: regex
|
|
name: stripe_public_live_key
|
|
regex:
|
|
- pk_live_[0-9a-z]{24}
|
|
part: body
|
|
- type: regex
|
|
name: stripe_public_test_key
|
|
regex:
|
|
- pk_test_[0-9a-z]{24}
|
|
part: body
|
|
- type: regex
|
|
name: stripe_restriced_key
|
|
regex:
|
|
- rk_(?:live|test)_[0-9a-zA-Z]{24}
|
|
part: body
|
|
- type: regex
|
|
name: stripe_restricted_api_key
|
|
regex:
|
|
- rk_live_[0-9a-zA-Z]{24}
|
|
part: body
|
|
- type: regex
|
|
name: stripe_secret_key
|
|
regex:
|
|
- sk_(?:live|test)_[0-9a-zA-Z]{24}
|
|
part: body
|
|
- type: regex
|
|
name: stripe_secret_live_key
|
|
regex:
|
|
- (sk|rk)_live_[0-9a-z]{24}
|
|
part: body
|
|
- type: regex
|
|
name: stripe_secret_test_key
|
|
regex:
|
|
- (sk|rk)_test_[0-9a-z]{24}
|
|
part: body
|
|
- type: regex
|
|
name: stytch_1
|
|
regex:
|
|
- (?:stytch).{0,40}\b([a-zA-Z0-9-_]{47}=)
|
|
part: body
|
|
- type: regex
|
|
name: stytch_2
|
|
regex:
|
|
- (?:stytch).{0,40}\b([a-z0-9-]{49})\b
|
|
part: body
|
|
- type: regex
|
|
name: sugester_1
|
|
regex:
|
|
- (?:sugester).{0,40}\b([a-zA-Z0-9_.!+$#^*%]{3,32})\b
|
|
part: body
|
|
- type: regex
|
|
name: sugester_2
|
|
regex:
|
|
- (?:sugester).{0,40}\b([a-zA-Z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: sumologickey_1
|
|
regex:
|
|
- (?:sumo).{0,40}\b([A-Za-z0-9]{14})\b
|
|
part: body
|
|
- type: regex
|
|
name: sumologickey_2
|
|
regex:
|
|
- (?:sumo).{0,40}\b([A-Za-z0-9]{64})\b
|
|
part: body
|
|
- type: regex
|
|
name: supernotesapi
|
|
regex:
|
|
- (?:supernotes).{0,40}([ \r\n]{0,1}[0-9A-Za-z\-_]{43}[ \r\n]{1})
|
|
part: body
|
|
- type: regex
|
|
name: surveybot
|
|
regex:
|
|
- (?:surveybot).{0,40}\b([A-Za-z0-9-]{80})\b
|
|
part: body
|
|
- type: regex
|
|
name: surveysparrow
|
|
regex:
|
|
- (?:surveysparrow).{0,40}\b([a-zA-Z0-9-_]{88})\b
|
|
part: body
|
|
- type: regex
|
|
name: survicate
|
|
regex:
|
|
- (?:survicate).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: swell_2
|
|
regex:
|
|
- (?:swell).{0,40}\b([a-zA-Z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: swiftype
|
|
regex:
|
|
- >-
|
|
(?:swiftype).{0,40}\b([a-zA-z-0-9]{6}\_[a-zA-z-0-9]{6}\-[a-zA-z-0-9]{6})\b
|
|
part: body
|
|
- type: regex
|
|
name: tallyfy
|
|
regex:
|
|
- >-
|
|
(?:tallyfy).{0,40}\b([0-9A-Za-z]{36}\.[0-9A-Za-z]{264}\.[0-9A-Za-z\-\_]{683})\b
|
|
part: body
|
|
- type: regex
|
|
name: tatumio
|
|
regex:
|
|
- (?:tatum).{0,40}\b([0-9a-z-]{36})\b
|
|
part: body
|
|
- type: regex
|
|
name: taxjar
|
|
regex:
|
|
- (?:taxjar).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: teamgate_1
|
|
regex:
|
|
- (?:teamgate).{0,40}\b([a-z0-9]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: teamgate_2
|
|
regex:
|
|
- (?:teamgate).{0,40}\b([a-zA-Z0-9]{80})\b
|
|
part: body
|
|
- type: regex
|
|
name: teamworkcrm
|
|
regex:
|
|
- >-
|
|
(?:teamwork|teamworkcrm).{0,40}\b(tkn\.v1_[0-9A-Za-z]{71}=[
|
|
\r\n]{1})
|
|
part: body
|
|
- type: regex
|
|
name: teamworkdesk
|
|
regex:
|
|
- >-
|
|
(?:teamwork|teamworkdesk).{0,40}\b(tkn\.v1_[0-9A-Za-z]{71}=[
|
|
\r\n]{1})
|
|
part: body
|
|
- type: regex
|
|
name: teamworkspaces
|
|
regex:
|
|
- >-
|
|
(?:teamwork|teamworkspaces).{0,40}\b(tkn\.v1_[0-9A-Za-z]{71}=[
|
|
\r\n]{1})
|
|
part: body
|
|
- type: regex
|
|
name: technicalanalysisapi
|
|
regex:
|
|
- (?:technicalanalysisapi).{0,40}\b([A-Z0-9]{48})\b
|
|
part: body
|
|
- type: regex
|
|
name: telegram_bot_api_key
|
|
regex:
|
|
- '[0-9]+:AA[0-9A-Za-z\-_]{33}'
|
|
part: body
|
|
- type: regex
|
|
name: telegram_secret
|
|
regex:
|
|
- d{5,}:A[0-9a-z_-]{34,34}
|
|
part: body
|
|
- type: regex
|
|
name: telegrambottoken
|
|
regex:
|
|
- (?:telegram).{0,40}\b([0-9]{8,10}:[a-zA-Z0-9_-]{35})\b
|
|
part: body
|
|
- type: regex
|
|
name: telnyx
|
|
regex:
|
|
- (?:telnyx).{0,40}\b(KEY[0-9A-Za-z_-]{55})\b
|
|
part: body
|
|
- type: regex
|
|
name: terraformcloudpersonaltoken
|
|
regex:
|
|
- \b([A-Za-z0-9]{14}.atlasv1.[A-Za-z0-9]{67})\b
|
|
part: body
|
|
- type: regex
|
|
name: text2data
|
|
regex:
|
|
- >-
|
|
(?:text2data).{0,40}\b([0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12})\b
|
|
part: body
|
|
- type: regex
|
|
name: textmagic_1
|
|
regex:
|
|
- (?:textmagic).{0,40}\b([0-9A-Za-z]{30})\b
|
|
part: body
|
|
- type: regex
|
|
name: textmagic_2
|
|
regex:
|
|
- (?:textmagic).{0,40}\b([0-9A-Za-z]{1,25})\b
|
|
part: body
|
|
- type: regex
|
|
name: theoddsapi
|
|
regex:
|
|
- (?:theoddsapi|the-odds-api).{0,40}\b([0-9a-f]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: thinkific_1
|
|
regex:
|
|
- (?:thinkific).{0,40}\b([0-9a-f]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: thinkific_2
|
|
regex:
|
|
- (?:thinkific).{0,40}\b([0-9A-Za-z]{4,40})\b
|
|
part: body
|
|
- type: regex
|
|
name: thousandeyes_1
|
|
regex:
|
|
- (?:thousandeyes).{0,40}\b([a-zA-Z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: thousandeyes_2
|
|
regex:
|
|
- >-
|
|
(?:thousandeyes).{0,40}\b([a-zA-Z0-9]{3,20}@[a-zA-Z0-9]{2,12}.[a-zA-Z0-9]{2,5})\b
|
|
part: body
|
|
- type: regex
|
|
name: ticketmaster
|
|
regex:
|
|
- (?:ticketmaster).{0,40}\b([a-zA-Z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: tiingo
|
|
regex:
|
|
- (?:tiingo).{0,40}\b([0-9a-z]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: timezoneapi
|
|
regex:
|
|
- (?:timezoneapi).{0,40}\b([a-zA-Z0-9]{20})\b
|
|
part: body
|
|
- type: regex
|
|
name: tly
|
|
regex:
|
|
- (?:tly).{0,40}\b([0-9A-Za-z]{60})\b
|
|
part: body
|
|
- type: regex
|
|
name: tmetric
|
|
regex:
|
|
- (?:tmetric).{0,40}\b([0-9A-Z]{64})\b
|
|
part: body
|
|
- type: regex
|
|
name: todoist
|
|
regex:
|
|
- (?:todoist).{0,40}\b([0-9a-z]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: toggltrack
|
|
regex:
|
|
- (?:toggl).{0,40}\b([0-9Aa-z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: tomorrowio
|
|
regex:
|
|
- (?:tomorrow).{0,40}\b([a-zA-Z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: tomtom
|
|
regex:
|
|
- (?:tomtom).{0,40}\b([0-9Aa-zA-Z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: tradier
|
|
regex:
|
|
- (?:tradier).{0,40}\b([a-zA-Z0-9]{28})\b
|
|
part: body
|
|
- type: regex
|
|
name: travelpayouts
|
|
regex:
|
|
- (?:travelpayouts).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: travisci
|
|
regex:
|
|
- (?:travis).{0,40}\b([a-zA-Z0-9A-Z_]{22})\b
|
|
part: body
|
|
- type: regex
|
|
name: trello_url
|
|
regex:
|
|
- https://trello.com/b/[0-9a-z]/[0-9a-z_-]+
|
|
part: body
|
|
- type: regex
|
|
name: trelloapikey_2
|
|
regex:
|
|
- (?:trello).{0,40}\b([a-zA-Z-0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: twelvedata
|
|
regex:
|
|
- (?:twelvedata).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: twilio_1
|
|
regex:
|
|
- \bAC[0-9a-f]{32}\b
|
|
part: body
|
|
- type: regex
|
|
name: twilio_api_key
|
|
regex:
|
|
- SK[0-9a-fA-F]{32}
|
|
part: body
|
|
- type: regex
|
|
name: twitter_client_id
|
|
regex:
|
|
- twitter[0-9a-z]{18,25}
|
|
part: body
|
|
- type: regex
|
|
name: twitter_secret_key
|
|
regex:
|
|
- twitter[0-9a-z]{35,44}
|
|
part: body
|
|
- type: regex
|
|
name: tyntec
|
|
regex:
|
|
- (?:tyntec).{0,40}\b([a-zA-Z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: typeform
|
|
regex:
|
|
- (?:typeform).{0,40}\b([0-9A-Za-z]{44})\b
|
|
part: body
|
|
- type: regex
|
|
name: ubidots
|
|
regex:
|
|
- \b(BBFF-[0-9a-zA-Z]{30})\b
|
|
part: body
|
|
- type: regex
|
|
name: unifyid
|
|
regex:
|
|
- (?:unify).{0,40}\b([0-9A-Za-z_=-]{44})
|
|
part: body
|
|
- type: regex
|
|
name: unplugg
|
|
regex:
|
|
- (?:unplu).{0,40}\b([a-z0-9]{64})\b
|
|
part: body
|
|
- type: regex
|
|
name: unsplash
|
|
regex:
|
|
- (?:unsplash).{0,40}\b([0-9A-Za-z_]{43})\b
|
|
part: body
|
|
- type: regex
|
|
name: upcdatabase
|
|
regex:
|
|
- (?:upcdatabase).{0,40}\b([A-Z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: uplead
|
|
regex:
|
|
- (?:uplead).{0,40}\b([a-z0-9-]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: uploadcare
|
|
regex:
|
|
- (?:uploadcare).{0,40}\b([a-z0-9]{20})\b
|
|
part: body
|
|
- type: regex
|
|
name: upwave
|
|
regex:
|
|
- (?:upwave).{0,40}\b([0-9a-z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: urlscan
|
|
regex:
|
|
- (?:urlscan).{0,40}\b([a-z0-9-]{36})\b
|
|
part: body
|
|
- type: regex
|
|
name: userstack
|
|
regex:
|
|
- (?:userstack).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: vatlayer
|
|
regex:
|
|
- (?:vatlayer).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: vercel
|
|
regex:
|
|
- (?:vercel).{0,40}\b([a-zA-Z0-9]{24})\b
|
|
part: body
|
|
- type: regex
|
|
name: verifier_1
|
|
regex:
|
|
- >-
|
|
(?:verifier).{0,40}\b([a-zA-Z-0-9-]{5,16}\@[a-zA-Z-0-9]{4,16}\.[a-zA-Z-0-9]{3,6})\b
|
|
part: body
|
|
- type: regex
|
|
name: verifier_2
|
|
regex:
|
|
- (?:verifier).{0,40}\b([a-z0-9]{96})\b
|
|
part: body
|
|
- type: regex
|
|
name: verimail
|
|
regex:
|
|
- (?:verimail).{0,40}\b([A-Z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: veriphone
|
|
regex:
|
|
- (?:veriphone).{0,40}\b([0-9A-Z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: versioneye
|
|
regex:
|
|
- (?:versioneye).{0,40}\b([a-zA-Z0-9-]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: viewneo
|
|
regex:
|
|
- >-
|
|
(?:viewneo).{0,40}\b([a-z0-9A-Z]{120,300}.[a-z0-9A-Z]{150,300}.[a-z0-9A-Z-_]{600,800})
|
|
part: body
|
|
- type: regex
|
|
name: virustotal
|
|
regex:
|
|
- (?:virustotal).{0,40}\b([a-f0-9]{64})\b
|
|
part: body
|
|
- type: regex
|
|
name: visualcrossing
|
|
regex:
|
|
- (?:visualcrossing).{0,40}\b([0-9A-Z]{25})\b
|
|
part: body
|
|
- type: regex
|
|
name: voicegain
|
|
regex:
|
|
- >-
|
|
(?:voicegain).{0,40}\b(ey[0-9a-zA-Z_-]{34}.ey[0-9a-zA-Z_-]{108}.[0-9a-zA-Z_-]{43})\b
|
|
part: body
|
|
- type: regex
|
|
name: vouchery_1
|
|
regex:
|
|
- (?:vouchery).{0,40}\b([a-z0-9-]{36})\b
|
|
part: body
|
|
- type: regex
|
|
name: vouchery_2
|
|
regex:
|
|
- (?:vouchery).{0,40}\b([a-zA-Z0-9-\S]{2,20})\b
|
|
part: body
|
|
- type: regex
|
|
name: vpnapi
|
|
regex:
|
|
- (?:vpnapi).{0,40}\b([a-z0-9A-Z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: vultrapikey
|
|
regex:
|
|
- (?:vultr).{0,40} \b([A-Z0-9]{36})\b
|
|
part: body
|
|
- type: regex
|
|
name: vyte
|
|
regex:
|
|
- (?:vyte).{0,40}\b([0-9a-z]{50})\b
|
|
part: body
|
|
- type: regex
|
|
name: walkscore
|
|
regex:
|
|
- (?:walkscore).{0,40}\b([0-9a-z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: weatherbit
|
|
regex:
|
|
- (?:weatherbit).{0,40}\b([0-9a-z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: weatherstack
|
|
regex:
|
|
- (?:weatherstack).{0,40}\b([0-9a-z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: webex_1
|
|
regex:
|
|
- (?:error).{0,40}(redirect_uri_mismatch)
|
|
part: body
|
|
- type: regex
|
|
name: webex_2
|
|
regex:
|
|
- (?:webex).{0,40}\b([A-Za-z0-9_-]{65})\b
|
|
part: body
|
|
- type: regex
|
|
name: webex_3
|
|
regex:
|
|
- (?:webex).{0,40}\b([A-Za-z0-9_-]{64})\b
|
|
part: body
|
|
- type: regex
|
|
name: webflow
|
|
regex:
|
|
- (?:webflow).{0,40}\b([a-zA0-9]{64})\b
|
|
part: body
|
|
- type: regex
|
|
name: webscraper
|
|
regex:
|
|
- (?:webscraper).{0,40}\b([a-zA-Z0-9]{60})\b
|
|
part: body
|
|
- type: regex
|
|
name: webscraping
|
|
regex:
|
|
- (?:webscraping).{0,40}\b([0-9A-Za-z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: wepay_2
|
|
regex:
|
|
- (?:wepay).{0,40}\b([a-zA-Z0-9_?]{62})\b
|
|
part: body
|
|
- type: regex
|
|
name: whoxy
|
|
regex:
|
|
- (?:whoxy).{0,40}\b([0-9a-z]{33})\b
|
|
part: body
|
|
- type: regex
|
|
name: worksnaps
|
|
regex:
|
|
- (?:worksnaps).{0,40}\b([0-9A-Za-z]{40})\b
|
|
part: body
|
|
- type: regex
|
|
name: workstack
|
|
regex:
|
|
- (?:workstack).{0,40}\b([0-9Aa-zA-Z]{60})\b
|
|
part: body
|
|
- type: regex
|
|
name: worldcoinindex
|
|
regex:
|
|
- (?:worldcoinindex).{0,40}\b([a-zA-Z0-9]{35})\b
|
|
part: body
|
|
- type: regex
|
|
name: worldweather
|
|
regex:
|
|
- (?:worldweather).{0,40}\b([0-9a-z]{31})\b
|
|
part: body
|
|
- type: regex
|
|
name: wrike
|
|
regex:
|
|
- (?:wrike).{0,40}\b(ey[a-zA-Z0-9-._]{333})\b
|
|
part: body
|
|
- type: regex
|
|
name: yandex
|
|
regex:
|
|
- (?:yandex).{0,40}\b([a-z0-9A-Z.]{83})\b
|
|
part: body
|
|
- type: regex
|
|
name: youneedabudget
|
|
regex:
|
|
- (?:youneedabudget).{0,40}\b([0-9a-f]{64})\b
|
|
part: body
|
|
- type: regex
|
|
name: yousign
|
|
regex:
|
|
- (?:yousign).{0,40}\b([0-9a-z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: zapierwebhook
|
|
regex:
|
|
- (https:\/\/hooks.zapier.com\/hooks\/catch\/[A-Za-z0-9\/]{16})
|
|
part: body
|
|
- type: regex
|
|
name: zendeskapi_3
|
|
regex:
|
|
- (?:zendesk).{0,40}([A-Za-z0-9_-]{40})
|
|
part: body
|
|
- type: regex
|
|
name: zenkitapi
|
|
regex:
|
|
- (?:zenkit).{0,40}\b([0-9a-z]{8}\-[0-9A-Za-z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: zenscrape
|
|
regex:
|
|
- >-
|
|
(?:zenscrape).{0,40}\b([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\b
|
|
part: body
|
|
- type: regex
|
|
name: zenserp
|
|
regex:
|
|
- (?:zenserp).{0,40}\b([0-9a-z-]{36})\b
|
|
part: body
|
|
- type: regex
|
|
name: zeplin
|
|
regex:
|
|
- (?:zeplin).{0,40}\b([a-zA-Z0-9-.]{350,400})\b
|
|
part: body
|
|
- type: regex
|
|
name: zerobounce
|
|
regex:
|
|
- (?:zerobounce).{0,40}\b([a-z0-9]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: zipapi_1
|
|
regex:
|
|
- (?:zipapi).{0,40}\b([a-zA-Z0-9!=@#$%^]{7,})
|
|
part: body
|
|
- type: regex
|
|
name: zipapi_3
|
|
regex:
|
|
- (?:zipapi).{0,40}\b([0-9a-z]{32})\b
|
|
part: body
|
|
- type: regex
|
|
name: zipcodeapi
|
|
regex:
|
|
- (?:zipcodeapi).{0,40}\b([a-zA-Z0-9]{64})\b
|
|
part: body
|
|
- type: regex
|
|
name: zonkafeedback
|
|
regex:
|
|
- (?:zonka).{0,40}\b([A-Za-z0-9]{36})\b
|
|
part: body
|
|
- type: regex
|
|
name: amazon_secret_access_key
|
|
regex:
|
|
- amazon[_-]?secret[_-]?access[_-]?key(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: ansible_vault_password
|
|
regex:
|
|
- ansible[_-]?vault[_-]?password(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: chrome_client_secret
|
|
regex:
|
|
- chrome[_-]?client[_-]?secret(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: chrome_refresh_token
|
|
regex:
|
|
- chrome[_-]?refresh[_-]?token(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: ci_deploy_password
|
|
regex:
|
|
- ci[_-]?deploy[_-]?password(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: ci_project_url
|
|
regex:
|
|
- ci[_-]?project[_-]?url(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: ci_registry_user
|
|
regex:
|
|
- ci[_-]?registry[_-]?user(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: ci_server_name
|
|
regex:
|
|
- ci[_-]?server[_-]?name(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: cloud_api_key
|
|
regex:
|
|
- cloud[_-]?api[_-]?key(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: cloudflare_api_key
|
|
regex:
|
|
- cloudflare[_-]?api[_-]?key(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: cloudflare_auth_email
|
|
regex:
|
|
- cloudflare[_-]?auth[_-]?email(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: consumer_key
|
|
regex:
|
|
- consumer[_-]?key(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: database_username
|
|
regex:
|
|
- database[_-]?username(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: db_password
|
|
regex:
|
|
- db[_-]?password(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: db_pw
|
|
regex:
|
|
- db[_-]?pw(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: docker_hub_password
|
|
regex:
|
|
- docker[_-]?hub[_-]?password(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: docker_passwd
|
|
regex:
|
|
- docker[_-]?passwd(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: docker_password
|
|
regex:
|
|
- docker[_-]?password(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: docker_token
|
|
regex:
|
|
- docker[_-]?token(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: dockerhub_password
|
|
regex:
|
|
- dockerhub[_-]?password(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: doordash_auth_token
|
|
regex:
|
|
- doordash[_-]?auth[_-]?token(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: dropbox_oauth_bearer
|
|
regex:
|
|
- dropbox[_-]?oauth[_-]?bearer(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: droplet_travis_password
|
|
regex:
|
|
- droplet[_-]?travis[_-]?password(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: env_github_oauth_token
|
|
regex:
|
|
- env[_-]?github[_-]?oauth[_-]?token(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: env_heroku_api_key
|
|
regex:
|
|
- env[_-]?heroku[_-]?api[_-]?key(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: facebook_access_token
|
|
regex:
|
|
- (EAACEdEose0cBA[0-9A-Za-z]+)
|
|
part: body
|
|
- type: regex
|
|
name: firebase_api_json
|
|
regex:
|
|
- firebase[_-]?api[_-]?json(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: firebase_api_token
|
|
regex:
|
|
- firebase[_-]?api[_-]?token(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: firebase_key
|
|
regex:
|
|
- firebase[_-]?key(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: firebase_token
|
|
regex:
|
|
- firebase[_-]?token(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: firefox_secret
|
|
regex:
|
|
- firefox[_-]?secret(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: ftp_pw
|
|
regex:
|
|
- ftp[_-]?pw(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: gh_api_key
|
|
regex:
|
|
- gh[_-]?api[_-]?key(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: github_api_key
|
|
regex:
|
|
- github[_-]?api[_-]?key(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: github_oauth
|
|
regex:
|
|
- github[_-]?oauth(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: github_token
|
|
regex:
|
|
- github[_-]?token(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: github_tokens
|
|
regex:
|
|
- github[_-]?tokens(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: google_client_id
|
|
regex:
|
|
- google[_-]?client[_-]?id(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: google_client_secret
|
|
regex:
|
|
- google[_-]?client[_-]?secret(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: google_maps_api_key
|
|
regex:
|
|
- google[_-]?maps[_-]?api[_-]?key(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: google_oauth
|
|
regex:
|
|
- (ya29.[0-9A-Za-z-_]+)
|
|
part: body
|
|
- type: regex
|
|
name: mailchimp
|
|
regex:
|
|
- (W(?:[a-f0-9]{32}(-us[0-9]{1,2}))a-zA-Z0-9)
|
|
part: body
|
|
- type: regex
|
|
name: mailgun_priv_key
|
|
regex:
|
|
- mailgun[_-]?priv[_-]?key(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: mailgun_secret_api_key
|
|
regex:
|
|
- mailgun[_-]?secret[_-]?api[_-]?key(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: master_password
|
|
regex:
|
|
- (master_password).+
|
|
part: body
|
|
- type: regex
|
|
name: mg_public_api_key
|
|
regex:
|
|
- mg[_-]?public[_-]?api[_-]?key(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: mysql_root_password
|
|
regex:
|
|
- mysql[_-]?root[_-]?password(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: netlify_api_key
|
|
regex:
|
|
- netlify[_-]?api[_-]?key(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: rabbitmq_password
|
|
regex:
|
|
- rabbitmq[_-]?password(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: rediscloud_url
|
|
regex:
|
|
- rediscloud[_-]?url(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: release_gh_token
|
|
regex:
|
|
- release[_-]?gh[_-]?token(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: rubygems_auth_token
|
|
regex:
|
|
- rubygems[_-]?auth[_-]?token(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: travis_secure_env_vars
|
|
regex:
|
|
- travis[_-]?secure[_-]?env[_-]?vars(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: travis_token
|
|
regex:
|
|
- travis[_-]?token(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: twilio_api_key
|
|
regex:
|
|
- twilio[_-]?api[_-]?key(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: twilio_api_secret
|
|
regex:
|
|
- twilio[_-]?api[_-]?secret(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: twilio_chat_account_api_service
|
|
regex:
|
|
- twilio[_-]?chat[_-]?account[_-]?api[_-]?service(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: twilio_token
|
|
regex:
|
|
- twilio[_-]?token(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: twitter_consumer_key
|
|
regex:
|
|
- twitter[_-]?consumer[_-]?key(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: twitter_consumer_secret
|
|
regex:
|
|
- twitter[_-]?consumer[_-]?secret(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: twitteroauthaccesssecret
|
|
regex:
|
|
- twitteroauthaccesssecret(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: twitteroauthaccesstoken
|
|
regex:
|
|
- twitteroauthaccesstoken(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: urban_master_secret
|
|
regex:
|
|
- urban[_-]?master[_-]?secret(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: use_ssh
|
|
regex:
|
|
- use[_-]?ssh(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: user_assets_access_key_id
|
|
regex:
|
|
- user[_-]?assets[_-]?access[_-]?key[_-]?id(=| =|:| :)
|
|
part: body
|
|
- type: regex
|
|
name: virustotal_apikey
|
|
regex:
|
|
- virustotal[_-]?apikey(=| =|:| :)
|
|
part: body
|
|
# digest: 490a00463044022073e1bbd0f76b2de5f173ec157570e3cb695cdcd869766e016c36b07f791d4a7002205af4daa53077f262d437409394a250a3702a7b440af6cb4770102822b0491e2d:922c64590222798bb761d5b6d8e72950 |