Files
nuclei-templates/http/global-matchers/secrets-patterns-rules.yaml
Prince Chaddha ea7a5969c8 Revert "chore: update TemplateMan 🤖"
This reverts commit c31d574176.
2025-05-27 10:39:47 +08:00

4503 lines
118 KiB
YAML

id: secrets-patterns-rules
info:
name: Secrets Patterns (Rules)
author: dwisiswant0
reference:
- https://github.com/mazen160/secrets-patterns-db # db/rules-stable.yml (151eaf659f3bcac3f81161808765eaa91045f2c7)
severity: info
tags: global-matchers,exposure,token,key,api,secret,password,generic
http:
- global-matchers: true
extractors:
- type: regex
name: aws_api_key
regex:
- AKIA[0-9A-Z]{16}
part: body
- type: regex
name: aws_arn
regex:
- arn:aws:[a-z0-9-]+:[a-z]{2}-[a-z]+-[0-9]+:[0-9]+:.+
part: body
- type: regex
name: aws_access_key_id_value
regex:
- (A3T[A-Z0-9]|AKIA|AGPA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}
part: body
- type: regex
name: aws_appsync_graphql_key
regex:
- da2-[a-z0-9]{26}
part: body
- type: regex
name: aws_mws_key
regex:
- >-
amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}
part: body
- type: regex
name: aws_rds
regex:
- '[0-9a-z._-]+.rds.amazonaws.com'
part: body
- type: regex
name: aws_s3_bucket
regex:
- s3://[0-9a-z._/-]+
part: body
- type: regex
name: aws_cred_file_info
regex:
- (aws_access_key_id|aws_secret_access_key)
part: body
- type: regex
name: abbysale
regex:
- (?:abbysale).{0,40}\b([a-z0-9A-Z]{40})\b
part: body
- type: regex
name: abstract
regex:
- (?:abstract).{0,40}\b([0-9a-z]{32})\b
part: body
- type: regex
name: abuseipdb
regex:
- (?:abuseipdb).{0,40}\b([a-z0-9]{80})\b
part: body
- type: regex
name: accuweather
regex:
- (?:accuweather).{0,40}([a-z0-9A-Z\%]{35})\b
part: body
- type: regex
name: adafruitio
regex:
- \b(aio\_[a-zA-Z0-9]{28})\b
part: body
- type: regex
name: adobeio_1
regex:
- (?:adobe).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: adzuna_1
regex:
- (?:adzuna).{0,40}\b([a-z0-9]{8})\b
part: body
- type: regex
name: adzuna_2
regex:
- (?:adzuna).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: aeroworkflow_1
regex:
- (?:aeroworkflow).{0,40}\b([0-9]{1,})\b
part: body
- type: regex
name: aeroworkflow_2
regex:
- (?:aeroworkflow).{0,40}\b([a-zA-Z0-9^!]{20})\b
part: body
- type: regex
name: agora
regex:
- (?:agora).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: airbrakeprojectkey_1
regex:
- (?:airbrake).{0,40}\b([0-9]{6})\b
part: body
- type: regex
name: airbrakeprojectkey_2
regex:
- (?:airbrake).{0,40}\b([a-zA-Z-0-9]{32})\b
part: body
- type: regex
name: airbrakeuserkey
regex:
- (?:airbrake).{0,40}\b([a-zA-Z-0-9]{40})\b
part: body
- type: regex
name: airship
regex:
- (?:airship).{0,40}\b([0-9Aa-zA-Z]{91})\b
part: body
- type: regex
name: airvisual
regex:
- (?:airvisual).{0,40}\b([a-z0-9-]{36})\b
part: body
- type: regex
name: alconost
regex:
- (?:alconost).{0,40}\b([0-9Aa-z]{32})\b
part: body
- type: regex
name: alegra_1
regex:
- (?:alegra).{0,40}\b([a-z0-9-]{20})\b
part: body
- type: regex
name: alegra_2
regex:
- (?:alegra).{0,40}\b([a-zA-Z0-9.-@]{25,30})\b
part: body
- type: regex
name: aletheiaapi
regex:
- (?:aletheiaapi).{0,40}\b([A-Z0-9]{32})\b
part: body
- type: regex
name: alibaba_2
regex:
- \b(LTAI[a-zA-Z0-9]{17,21})[\"' ;\s]*
part: body
- type: regex
name: alienvault
regex:
- (?:alienvault).{0,40}\b([a-z0-9]{64})\b
part: body
- type: regex
name: allsports
regex:
- (?:allsports).{0,40}\b([0-9a-z]{64})\b
part: body
- type: regex
name: amadeus_1
regex:
- (?:amadeus).{0,40}\b([0-9A-Za-z]{32})\b
part: body
- type: regex
name: amadeus_2
regex:
- (?:amadeus).{0,40}\b([0-9A-Za-z]{16})\b
part: body
- type: regex
name: ambee
regex:
- (?:ambee).{0,40}\b([0-9a-f]{64})\b
part: body
- type: regex
name: amplitudeapikey
regex:
- (?:amplitude).{0,40}\b([a-f0-9]{32})
part: body
- type: regex
name: apacta
regex:
- (?:apacta).{0,40}\b([a-z0-9-]{36})\b
part: body
- type: regex
name: api2cart
regex:
- (?:api2cart).{0,40}\b([0-9a-f]{32})\b
part: body
- type: regex
name: apideck_1
regex:
- \b(sk_live_[a-z0-9A-Z-]{93})\b
part: body
- type: regex
name: apideck_2
regex:
- (?:apideck).{0,40}\b([a-z0-9A-Z]{40})\b
part: body
- type: regex
name: apiflash_1
regex:
- (?:apiflash).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: apiflash_2
regex:
- (?:apiflash).{0,40}\b([a-zA-Z0-9\S]{21,30})\b
part: body
- type: regex
name: apifonica
regex:
- >-
(?:apifonica).{0,40}\b([0-9a-z]{11}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{12})\b
part: body
- type: regex
name: apify
regex:
- \b(apify\_api\_[a-zA-Z-0-9]{36})\b
part: body
- type: regex
name: apimatic_1
regex:
- (?:apimatic).{0,40}\b([a-z0-9-\S]{8,32})\b
part: body
- type: regex
name: apimatic_2
regex:
- >-
(?:apimatic).{0,40}\b([a-zA-Z0-9]{3,20}@[a-zA-Z0-9]{2,12}.[a-zA-Z0-9]{2,5})\b
part: body
- type: regex
name: apiscience
regex:
- (?:apiscience).{0,40}\b([a-bA-Z0-9\S]{22})\b
part: body
- type: regex
name: apollo
regex:
- (?:apollo).{0,40}\b([a-zA-Z0-9]{22})\b
part: body
- type: regex
name: appcues_1
regex:
- (?:appcues).{0,40}\b([0-9]{5})\b
part: body
- type: regex
name: appcues_2
regex:
- (?:appcues).{0,40}\b([a-z0-9-]{36})\b
part: body
- type: regex
name: appcues_3
regex:
- (?:appcues).{0,40}\b([a-z0-9-]{39})\b
part: body
- type: regex
name: appfollow
regex:
- (?:appfollow).{0,40}\b([0-9A-Za-z]{20})\b
part: body
- type: regex
name: appsynergy
regex:
- (?:appsynergy).{0,40}\b([a-z0-9]{64})\b
part: body
- type: regex
name: apptivo_1
regex:
- (?:apptivo).{0,40}\b([a-z0-9-]{36})\b
part: body
- type: regex
name: apptivo_2
regex:
- (?:apptivo).{0,40}\b([a-zA-Z0-9-]{32})\b
part: body
- type: regex
name: artifactory_2
regex:
- \b([A-Za-z0-9](?:[A-Za-z0-9\-]{0,61}[A-Za-z0-9])\.jfrog\.io)
part: body
- type: regex
name: artsy_1
regex:
- (?:artsy).{0,40}\b([0-9a-zA-Z]{20})\b
part: body
- type: regex
name: artsy_2
regex:
- (?:artsy).{0,40}\b([0-9a-zA-Z]{32})\b
part: body
- type: regex
name: asanaoauth
regex:
- (?:asana).{0,40}\b([a-z\/:0-9]{51})\b
part: body
- type: regex
name: asanapersonalaccesstoken
regex:
- (?:asana).{0,40}\b([0-9]{1,}\/[0-9]{16,}:[A-Za-z0-9]{32,})\b
part: body
- type: regex
name: assemblyai
regex:
- (?:assemblyai).{0,40}\b([0-9a-z]{32})\b
part: body
- type: regex
name: asymmetric_private_key
regex:
- '-----BEGIN ((EC|PGP|DSA|RSA|OPENSSH) )?PRIVATE KEY( BLOCK)?-----'
part: body
- type: regex
name: audd
regex:
- (?:audd).{0,40}\b([a-z0-9-]{32})\b
part: body
- type: regex
name: auth0managementapitoken
regex:
- (?:auth0).{0,40}\b(ey[a-zA-Z0-9._-]+)\b
part: body
- type: regex
name: autodesk_1
regex:
- (?:autodesk).{0,40}\b([0-9A-Za-z]{32})\b
part: body
- type: regex
name: autodesk_2
regex:
- (?:autodesk).{0,40}\b([0-9A-Za-z]{16})\b
part: body
- type: regex
name: autoklose
regex:
- (?:autoklose).{0,40}\b([a-zA-Z0-9-]{32})\b
part: body
- type: regex
name: autopilot
regex:
- (?:autopilot).{0,40}\b([0-9a-f]{32})\b
part: body
- type: regex
name: avazapersonalaccesstoken
regex:
- (?:avaza).{0,40}\b([0-9]+-[0-9a-f]{40})\b
part: body
- type: regex
name: aviationstack
regex:
- (?:aviationstack).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: aws_1
regex:
- \b((?:AKIA|ABIA|ACCA|ASIA)[0-9A-Z]{16})\b
part: body
- type: regex
name: axonaut
regex:
- (?:axonaut).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: aylien_1
regex:
- (?:aylien).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: aylien_2
regex:
- (?:aylien).{0,40}\b([a-z0-9]{8})\b
part: body
- type: regex
name: ayrshare
regex:
- >-
(?:ayrshare).{0,40}\b([A-Z]{7}-[A-Z0-9]{7}-[A-Z0-9]{7}-[A-Z0-9]{7})\b
part: body
- type: regex
name: bannerbear
regex:
- (?:bannerbear).{0,40}\b([0-9a-zA-Z]{22}tt)\b
part: body
- type: regex
name: baremetrics
regex:
- (?:baremetrics).{0,40}\b([a-zA-Z0-9_]{25})\b
part: body
- type: regex
name: baseapiio
regex:
- >-
(?:baseapi|base-api).{0,40}\b([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\b
part: body
- type: regex
name: beamer
regex:
- (?:beamer).{0,40}\b([a-zA-Z0-9_+/]{45}=)
part: body
- type: regex
name: beebole
regex:
- (?:beebole).{0,40}\b([0-9a-z]{40})\b
part: body
- type: regex
name: besttime
regex:
- (?:besttime).{0,40}\b([0-9A-Za-z_]{36})\b
part: body
- type: regex
name: billomat_1
regex:
- (?:billomat).{0,40}\b([0-9a-z]{1,})\b
part: body
- type: regex
name: billomat_2
regex:
- (?:billomat).{0,40}\b([0-9a-z]{32})\b
part: body
- type: regex
name: bitbar
regex:
- (?:bitbar).{0,40}\b([0-9a-z]{32})\b
part: body
- type: regex
name: bitcoinaverage
regex:
- (?:bitcoinaverage).{0,40}\b([a-zA-Z0-9]{43})\b
part: body
- type: regex
name: bitfinex
regex:
- (?:bitfinex).{0,40}\b([A-Za-z0-9_-]{43})\b
part: body
- type: regex
name: bitly_secret_key
regex:
- R_[0-9a-f]{32}
part: body
- type: regex
name: bitlyaccesstoken
regex:
- (?:bitly).{0,40}\b([a-zA-Z-0-9]{40})\b
part: body
- type: regex
name: bitmex_1
regex:
- (?:bitmex).{0,40}([ \r\n]{1}[0-9a-zA-Z\-\_]{24}[ \r\n]{1})
part: body
- type: regex
name: bitmex_2
regex:
- (?:bitmex).{0,40}([ \r\n]{1}[0-9a-zA-Z\-\_]{48}[ \r\n]{1})
part: body
- type: regex
name: blablabus
regex:
- (?:blablabus).{0,40}\b([0-9A-Za-z]{22})\b
part: body
- type: regex
name: blazemeter
regex:
- >-
(?:blazemeter|runscope).{0,40}\b([0-9a-z]{8}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{12})\b
part: body
- type: regex
name: blitapp
regex:
- (?:blitapp).{0,40}\b([a-zA-Z0-9_-]{39})\b
part: body
- type: regex
name: bombbomb
regex:
- (?:bombbomb).{0,40}\b([a-zA-Z0-9-._]{704})\b
part: body
- type: regex
name: boostnote
regex:
- (?:boostnote).{0,40}\b([0-9a-f]{64})\b
part: body
- type: regex
name: borgbase
regex:
- (?:borgbase).{0,40}\b([a-zA-Z0-9/_.-]{148,152})\b
part: body
- type: regex
name: braintree_api_key
regex:
- access_token$production$[0-9a-z]{16}$[0-9a-f]{32}
part: body
- type: regex
name: brandfetch
regex:
- (?:brandfetch).{0,40}\b([0-9A-Za-z]{40})\b
part: body
- type: regex
name: browshot
regex:
- (?:browshot).{0,40}\b([a-zA-Z-0-9]{28})\b
part: body
- type: regex
name: buddyns
regex:
- (?:buddyns).{0,40}\b([0-9a-z]{40})\b
part: body
- type: regex
name: bugherd
regex:
- (?:bugherd).{0,40}\b([0-9a-z]{22})\b
part: body
- type: regex
name: bugsnag
regex:
- >-
(?:bugsnag).{0,40}\b([0-9a-z]{8}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{12})\b
part: body
- type: regex
name: buildkite
regex:
- (?:buildkite).{0,40}\b([a-z0-9]{40})\b
part: body
- type: regex
name: bulbul
regex:
- (?:bulbul).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: buttercms
regex:
- (?:buttercms).{0,40}\b([a-z0-9]{40})\b
part: body
- type: regex
name: caflou
regex:
- (?:caflou).{0,40}\b([a-bA-Z0-9\S]{155})\b
part: body
- type: regex
name: calendarific
regex:
- (?:calendarific).{0,40}\b([a-z0-9]{40})\b
part: body
- type: regex
name: calendlyapikey
regex:
- >-
(?:calendly).{0,40}\b([a-zA-Z-0-9]{20}.[a-zA-Z-0-9]{171}.[a-zA-Z-0-9_]{43})\b
part: body
- type: regex
name: calorieninja
regex:
- (?:calorieninja).{0,40}\b([0-9A-Za-z]{40})\b
part: body
- type: regex
name: campayn
regex:
- (?:campayn).{0,40}\b([a-z0-9]{64})\b
part: body
- type: regex
name: cannyio
regex:
- >-
(?:canny).{0,40}\b([a-z0-9]{8}-[a-z0-9]{4}-[a-z0-9]{4}-[0-9]{4}-[a-z0-9]{12})\b
part: body
- type: regex
name: capsulecrm
regex:
- (?:capsulecrm).{0,40}\b([a-zA-Z0-9-._+=]{64})\b
part: body
- type: regex
name: captaindata_1
regex:
- >-
(?:captaindata).{0,40}\b([0-9a-f]{8}\-[0-9a-f]{4}\-[0-9a-f]{4}\-[0-9a-f]{4}\-[0-9a-f]{12})\b
part: body
- type: regex
name: captaindata_2
regex:
- (?:captaindata).{0,40}\b([0-9a-f]{64})\b
part: body
- type: regex
name: carboninterface
regex:
- (?:carboninterface).{0,40}\b([a-zA-Z0-9]{21})\b
part: body
- type: regex
name: cashboard_1
regex:
- >-
(?:cashboard).{0,40}\b([0-9A-Z]{3}-[0-9A-Z]{3}-[0-9A-Z]{3}-[0-9A-Z]{3})\b
part: body
- type: regex
name: cashboard_2
regex:
- (?:cashboard).{0,40}\b([0-9a-z]{1,})\b
part: body
- type: regex
name: caspio_1
regex:
- (?:caspio).{0,40}\b([a-z0-9]{8})\b
part: body
- type: regex
name: caspio_2
regex:
- (?:caspio).{0,40}\b([a-z0-9]{50})\b
part: body
- type: regex
name: censys_1
regex:
- (?:censys).{0,40}\b([a-zA-Z0-9]{32})\b
part: body
- type: regex
name: censys_2
regex:
- (?:censys).{0,40}\b([a-z0-9-]{36})\b
part: body
- type: regex
name: centralstationcrm
regex:
- (?:centralstation).{0,40}\b([a-z0-9]{30})\b
part: body
- type: regex
name: cexio_1
regex:
- (?:cexio|cex.io).{0,40}\b([a-z]{2}[0-9]{9})\b
part: body
- type: regex
name: cexio_2
regex:
- (?:cexio|cex.io).{0,40}\b([0-9A-Za-z]{24,27})\b
part: body
- type: regex
name: chatbot
regex:
- (?:chatbot).{0,40}\b([a-zA-Z0-9_]{32})\b
part: body
- type: regex
name: chatfule
regex:
- (?:chatfuel).{0,40}\b([a-zA-Z0-9]{128})\b
part: body
- type: regex
name: checio
regex:
- (?:checio).{0,40}\b(pk_[a-z0-9]{45})\b
part: body
- type: regex
name: checklyhq
regex:
- (?:checklyhq).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: checkout_1
regex:
- >-
(?:checkout).{0,40}\b((sk_|sk_test_)[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})\b
part: body
- type: regex
name: checkout_2
regex:
- (?:checkout).{0,40}\b(cus_[0-9a-zA-Z]{26})\b
part: body
- type: regex
name: checkvist_1
regex:
- (?:checkvist).{0,40}\b([\w\.-]+@[\w-]+\.[\w\.-]{2,5})\b
part: body
- type: regex
name: checkvist_2
regex:
- (?:checkvist).{0,40}\b([0-9a-zA-Z]{14})\b
part: body
- type: regex
name: cicero
regex:
- (?:cicero).{0,40}\b([0-9a-z]{40})\b
part: body
- type: regex
name: clearbit
regex:
- (?:clearbit).{0,40}\b([0-9a-z_]{35})\b
part: body
- type: regex
name: clickhelp_1
regex:
- \b([0-9A-Za-z]{3,20}.try.clickhelp.co)\b
part: body
- type: regex
name: clickhelp_2
regex:
- (?:clickhelp).{0,40}\b([0-9A-Za-z]{24})\b
part: body
- type: regex
name: clicksendsms_2
regex:
- >-
(?:sms).{0,40}\b([a-zA-Z0-9]{3,20}@[a-zA-Z0-9]{2,12}.[a-zA-Z0-9]{2,5})\b
part: body
- type: regex
name: clickuppersonaltoken
regex:
- (?:clickup).{0,40}\b(pk_[0-9]{8}_[0-9A-Z]{32})\b
part: body
- type: regex
name: cliengo
regex:
- >-
(?:cliengo).{0,40}\b([0-9a-f]{8}\-[0-9a-f]{4}\-[0-9a-f]{4}\-[0-9a-f]{4}\-[0-9a-f]{12})\b
part: body
- type: regex
name: clinchpad
regex:
- (?:clinchpad).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: clockify
regex:
- (?:clockify).{0,40}\b([a-zA-Z0-9]{48})\b
part: body
- type: regex
name: clockworksms_1
regex:
- (?:clockwork|textanywhere).{0,40}\b([0-9a-zA-Z]{24})\b
part: body
- type: regex
name: clockworksms_2
regex:
- (?:clockwork|textanywhere).{0,40}\b([0-9]{5})\b
part: body
- type: regex
name: closecrm
regex:
- \b(api_[a-z0-9A-Z.]{45})\b
part: body
- type: regex
name: cloudelements_1
regex:
- (?:cloudelements).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: cloudelements_2
regex:
- (?:cloudelements).{0,40}\b([a-zA-Z0-9]{43})\b
part: body
- type: regex
name: cloudflarecakey
regex:
- (?:cloudflare).{0,40}\b(v[A-Za-z0-9._-]{173,})\b
part: body
- type: regex
name: cloudimage
regex:
- (?:cloudimage).{0,40}\b([a-z0-9_]{30})\b
part: body
- type: regex
name: cloudinary_credentials
regex:
- cloudinary://[0-9]+:[A-Za-z0-9\-_\.]+@[A-Za-z0-9\-_\.]+
part: body
- type: regex
name: cloudmersive
regex:
- (?:cloudmersive).{0,40}\b([a-z0-9-]{36})\b
part: body
- type: regex
name: cloudplan
regex:
- (?:cloudplan).{0,40}\b([A-Z0-9-]{32})\b
part: body
- type: regex
name: cloverly
regex:
- (?:cloverly).{0,40}\b([a-z0-9:_]{28})\b
part: body
- type: regex
name: cloze_1
regex:
- (?:cloze).{0,40}\b([0-9a-f]{32})\b
part: body
- type: regex
name: cloze_2
regex:
- (?:cloze).{0,40}\b([\w\.-]+@[\w-]+\.[\w\.-]{2,5})\b
part: body
- type: regex
name: clustdoc
regex:
- (?:clustdoc).{0,40}\b([0-9a-zA-Z]{60})\b
part: body
- type: regex
name: codacy
regex:
- (?:codacy).{0,40}\b([0-9A-Za-z]{20})\b
part: body
- type: regex
name: coinapi
regex:
- (?:coinapi).{0,40}\b([A-Z0-9-]{36})\b
part: body
- type: regex
name: coinbase
regex:
- (?:coinbase).{0,40}\b([a-zA-Z-0-9]{64})\b
part: body
- type: regex
name: coinlayer
regex:
- (?:coinlayer).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: coinlib
regex:
- (?:coinlib).{0,40}\b([a-z0-9]{16})\b
part: body
- type: regex
name: column
regex:
- (?:column).{0,40}\b((?:test|live)_[a-zA-Z0-9]{27})\b
part: body
- type: regex
name: commercejs
regex:
- (?:commercejs).{0,40}\b([a-z0-9_]{48})\b
part: body
- type: regex
name: commodities
regex:
- (?:commodities).{0,40}\b([a-zA-Z0-9]{60})\b
part: body
- type: regex
name: companyhub_1
regex:
- (?:companyhub).{0,40}\b([0-9a-zA-Z]{20})\b
part: body
- type: regex
name: companyhub_2
regex:
- (?:companyhub).{0,40}\b([a-zA-Z0-9$%^=-]{4,32})\b
part: body
- type: regex
name: confluent_1
regex:
- (?:confluent).{0,40}\b([a-zA-Z-0-9]{16})\b
part: body
- type: regex
name: confluent_2
regex:
- (?:confluent).{0,40}\b([a-zA-Z-0-9]{64})\b
part: body
- type: regex
name: convertkit
regex:
- (?:convertkit).{0,40}\b([a-z0-9A-Z_]{22})\b
part: body
- type: regex
name: convier
regex:
- (?:convier).{0,40}\b([0-9]{2}\|[a-zA-Z0-9]{40})\b
part: body
- type: regex
name: copper_2
regex:
- (?:copper).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: countrylayer
regex:
- (?:countrylayer).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: courier
regex:
- (?:courier).{0,40}\b(pk\_[a-zA-Z0-9]{1,}\_[a-zA-Z0-9]{28})\b
part: body
- type: regex
name: coveralls
regex:
- (?:coveralls).{0,40}\b([a-zA-Z0-9-]{37})\b
part: body
- type: regex
name: crowdin
regex:
- (?:crowdin).{0,40}\b([0-9A-Za-z]{80})\b
part: body
- type: regex
name: cryptocompare
regex:
- (?:cryptocompare).{0,40}\b([a-z-0-9]{64})\b
part: body
- type: regex
name: currencycloud_1
regex:
- (?:currencycloud).{0,40}\b([0-9a-z]{64})\b
part: body
- type: regex
name: currencyfreaks
regex:
- (?:currencyfreaks).{0,40}\b([0-9a-z]{32})\b
part: body
- type: regex
name: currencylayer
regex:
- (?:currencylayer).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: currencyscoop
regex:
- (?:currencyscoop).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: currentsapi
regex:
- (?:currentsapi).{0,40}\b([a-zA-Z0-9\S]{48})\b
part: body
- type: regex
name: customerguru_1
regex:
- (?:guru).{0,40}\b([a-z0-9A-Z]{50})\b
part: body
- type: regex
name: customerguru_2
regex:
- (?:guru).{0,40}\b([a-z0-9A-Z]{30})\b
part: body
- type: regex
name: d7network
regex:
- (?:d7network).{0,40}\b([a-zA-Z0-9\W\S]{23}\=)
part: body
- type: regex
name: dailyco
regex:
- (?:daily).{0,40}\b([0-9a-f]{64})\b
part: body
- type: regex
name: dandelion
regex:
- (?:dandelion).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: databricks
regex:
- dapi[a-f0-9]{32}\b
part: body
- type: regex
name: datafire
regex:
- (?:datafire).{0,40}\b([a-z0-9\S]{175,190})\b
part: body
- type: regex
name: datagov
regex:
- (?:data.gov).{0,40}\b([a-zA-Z0-9]{40})\b
part: body
- type: regex
name: deepai
regex:
- (?:deepai).{0,40}\b([a-z0-9-]{36})\b
part: body
- type: regex
name: deepgram
regex:
- (?:deepgram).{0,40}\b([0-9a-z]{40})\b
part: body
- type: regex
name: delighted
regex:
- (?:delighted).{0,40}\b([a-z0-9A-Z]{32})\b
part: body
- type: regex
name: deputy_1
regex:
- \b([0-9a-z]{1,}.as.deputy.com)\b
part: body
- type: regex
name: deputy_2
regex:
- (?:deputy).{0,40}\b([0-9a-z]{32})\b
part: body
- type: regex
name: detectlanguage
regex:
- (?:detectlanguage).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: dfuse
regex:
- \b(web\_[0-9a-z]{32})\b
part: body
- type: regex
name: diffbot
regex:
- (?:diffbot).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: digitaloceantoken
regex:
- (?:digitalocean).{0,40}\b([A-Za-z0-9_-]{64})\b
part: body
- type: regex
name: discord_webhook
regex:
- https://discordapp\.com/api/webhooks/[0-9]+/[A-Za-z0-9\-]+
part: body
- type: regex
name: discordbottoken_1
regex:
- >-
(?:discord).{0,40}\b([A-Za-z0-9_-]{24}\.[A-Za-z0-9_-]{6}\.[A-Za-z0-9_-]{27})\b
part: body
- type: regex
name: discordbottoken_2
regex:
- (?:discord).{0,40}\b([0-9]{17})\b
part: body
- type: regex
name: discordwebhook
regex:
- (https:\/\/discord.com\/api\/webhooks\/[0-9]{18}\/[0-9a-zA-Z-]{68})
part: body
- type: regex
name: ditto
regex:
- >-
(?:ditto).{0,40}\b([a-z0-9]{8}\-[a-z0-9]{4}\-[a-z0-9]{4}\-[a-z0-9]{4}\-[a-z0-9]{12}\.[a-z0-9]{40})\b
part: body
- type: regex
name: dnscheck_1
regex:
- (?:dnscheck).{0,40}\b([a-z0-9A-Z-]{36})\b
part: body
- type: regex
name: dnscheck_2
regex:
- (?:dnscheck).{0,40}\b([a-z0-9A-Z]{32})\b
part: body
- type: regex
name: documo
regex:
- \b(ey[a-zA-Z0-9]{34}.ey[a-zA-Z0-9]{154}.[a-zA-Z0-9_-]{43})\b
part: body
- type: regex
name: doppler
regex:
- \b(dp\.pt\.[a-zA-Z0-9]{43})\b
part: body
- type: regex
name: dotmailer_1
regex:
- (?:dotmailer).{0,40}\b(apiuser-[a-z0-9]{12}@apiconnector.com)\b
part: body
- type: regex
name: dotmailer_2
regex:
- (?:dotmailer).{0,40}\b([a-zA-Z0-9\S]{8,24})\b
part: body
- type: regex
name: dovico
regex:
- (?:dovico).{0,40}\b([0-9a-z]{32}\.[0-9a-z]{1,}\b)
part: body
- type: regex
name: dronahq
regex:
- (?:dronahq).{0,40}\b([a-z0-9]{50})\b
part: body
- type: regex
name: droneci
regex:
- (?:droneci).{0,40}\b([a-zA-Z0-9]{32})\b
part: body
- type: regex
name: dropbox
regex:
- \b(sl\.[A-Za-z0-9\-\_]{130,140})\b
part: body
- type: regex
name: dwolla
regex:
- (?:dwolla).{0,40}\b([a-zA-Z-0-9]{50})\b
part: body
- type: regex
name: dynalist
regex:
- (?:dynalist).{0,40}\b([a-zA-Z0-9-_]{128})\b
part: body
- type: regex
name: dynatrace_token
regex:
- dt0[a-zA-Z]{1}[0-9]{2}\.[A-Z0-9]{24}\.[A-Z0-9]{64}
part: body
- type: regex
name: dyspatch
regex:
- (?:dyspatch).{0,40}\b([A-Z0-9]{52})\b
part: body
- type: regex
name: ec
regex:
- '-----BEGIN EC PRIVATE KEY-----'
part: body
- type: regex
name: eagleeyenetworks_1
regex:
- >-
(?:eagleeyenetworks).{0,40}\b([a-zA-Z0-9]{3,20}@[a-zA-Z0-9]{2,12}.[a-zA-Z0-9]{2,5})\b
part: body
- type: regex
name: eagleeyenetworks_2
regex:
- (?:eagleeyenetworks).{0,40}\b([a-zA-Z0-9]{15})\b
part: body
- type: regex
name: easyinsight_1
regex:
- (?:easyinsight|easy-insight).{0,40}\b([a-zA-Z0-9]{20})\b
part: body
- type: regex
name: easyinsight_2
regex:
- (?:easyinsight|easy-insight).{0,40}\b([0-9Aa-zA-Z]{20})\b
part: body
- type: regex
name: edamam_1
regex:
- (?:edamam).{0,40}\b([0-9a-z]{32})\b
part: body
- type: regex
name: edamam_2
regex:
- (?:edamam).{0,40}\b([0-9a-z]{8})\b
part: body
- type: regex
name: edenai
regex:
- >-
(?:edenai).{0,40}\b([a-zA-Z0-9]{36}.[a-zA-Z0-9]{92}.[a-zA-Z0-9_]{43})\b
part: body
- type: regex
name: eightxeight_2
regex:
- (?:8x8).{0,40}\b([a-zA-Z0-9]{43})\b
part: body
- type: regex
name: elasticemail
regex:
- (?:elastic).{0,40}\b([A-Za-z0-9_-]{96})\b
part: body
- type: regex
name: enablex_1
regex:
- (?:enablex).{0,40}\b([a-zA-Z0-9]{36})\b
part: body
- type: regex
name: enablex_2
regex:
- (?:enablex).{0,40}\b([a-z0-9]{24})\b
part: body
- type: regex
name: enigma
regex:
- (?:enigma).{0,40}\b([a-zA-Z0-9]{40})\b
part: body
- type: regex
name: ethplorer
regex:
- (?:ethplorer).{0,40}\b([a-z0-9A-Z-]{22})\b
part: body
- type: regex
name: everhour
regex:
- >-
(?:everhour).{0,40}\b([0-9Aa-f]{4}-[0-9a-f]{4}-[0-9a-f]{6}-[0-9a-f]{6}-[0-9a-f]{8})\b
part: body
- type: regex
name: exchangerateapi
regex:
- (?:exchangerate).{0,40}\b([a-z0-9]{24})\b
part: body
- type: regex
name: exchangeratesapi
regex:
- (?:exchangerates).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: facebook_access_token
regex:
- EAACEdEose0cBA[0-9A-Za-z]+
part: body
- type: regex
name: faceplusplus
regex:
- (?:faceplusplus).{0,40}\b([0-9a-zA-Z_-]{32})\b
part: body
- type: regex
name: fakejson
regex:
- (?:fakejson).{0,40}\b([a-zA-Z0-9]{22})\b
part: body
- type: regex
name: fastforex
regex:
- (?:fastforex).{0,40}\b([a-z0-9-]{28})\b
part: body
- type: regex
name: fastlypersonaltoken
regex:
- (?:fastly).{0,40}\b([A-Za-z0-9_-]{32})\b
part: body
- type: regex
name: feedier
regex:
- (?:feedier).{0,40}\b([a-z0-9A-Z]{32})\b
part: body
- type: regex
name: fetchrss
regex:
- (?:fetchrss).{0,40}\b([0-9A-Za-z.]{40})\b
part: body
- type: regex
name: figmapersonalaccesstoken
regex:
- >-
(?:figma).{0,40}\b([0-9]{6}-[0-9a-z]{8}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{12})\b
part: body
- type: regex
name: fileio
regex:
- (?:fileio).{0,40}\b([A-Z0-9.-]{39})\b
part: body
- type: regex
name: finage
regex:
- \b(API_KEY[0-9A-Z]{32})\b
part: body
- type: regex
name: financialmodelingprep
regex:
- (?:financialmodelingprep).{0,40}\b([a-zA-Z0-9]{32})\b
part: body
- type: regex
name: findl
regex:
- >-
(?:findl).{0,40}\b([a-z0-9]{8}\-[a-z0-9]{4}\-[a-z0-9]{4}\-[a-z0-9]{4}\-[a-z0-9]{12})\b
part: body
- type: regex
name: finnhub
regex:
- (?:finnhub).{0,40}\b([0-9a-z]{20})\b
part: body
- type: regex
name: fixerio
regex:
- (?:fixer).{0,40}\b([A-Za-z0-9]{32})\b
part: body
- type: regex
name: flatio
regex:
- (?:flat).{0,40}\b([0-9a-z]{128})\b
part: body
- type: regex
name: fleetbase
regex:
- \b(flb_live_[0-9a-zA-Z]{20})\b
part: body
- type: regex
name: flickr
regex:
- (?:flickr).{0,40}\b([0-9a-z]{32})\b
part: body
- type: regex
name: flightapi
regex:
- (?:flightapi).{0,40}\b([a-z0-9]{24})\b
part: body
- type: regex
name: flightstats_1
regex:
- (?:flightstats).{0,40}\b([0-9a-z]{32})\b
part: body
- type: regex
name: flightstats_2
regex:
- (?:flightstats).{0,40}\b([0-9a-z]{8})\b
part: body
- type: regex
name: flowflu_2
regex:
- (?:flowflu).{0,40}\b([a-zA-Z0-9]{51})\b
part: body
- type: regex
name: flutterwave
regex:
- \b(FLWSECK-[0-9a-z]{32}-X)\b
part: body
- type: regex
name: fmfw_1
regex:
- (?:fmfw).{0,40}\b([a-zA-Z0-9-]{32})\b
part: body
- type: regex
name: fmfw_2
regex:
- (?:fmfw).{0,40}\b([a-zA-Z0-9_-]{32})\b
part: body
- type: regex
name: formbucket
regex:
- >-
(?:formbucket).{0,40}\b([0-9A-Za-z]{1,}.[0-9A-Za-z]{1,}\.[0-9A-Z-a-z\-_]{1,})
part: body
- type: regex
name: formio
regex:
- >-
(?:formio).{0,40}\b(eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9\.[0-9A-Za-z]{310}\.[0-9A-Z-a-z\-_]{43}[
\r\n]{1})
part: body
- type: regex
name: foursquare
regex:
- (?:foursquare).{0,40}\b([0-9A-Z]{48})\b
part: body
- type: regex
name: frameio
regex:
- \b(fio-u-[0-9a-zA-Z_-]{64})\b
part: body
- type: regex
name: freshbooks_1
regex:
- (?:freshbooks).{0,40}\b([0-9a-z]{64})\b
part: body
- type: regex
name: freshbooks_2
regex:
- (?:freshbooks).{0,40}\b(https://www.[0-9A-Za-z_-]{1,}.com)\b
part: body
- type: regex
name: freshdesk_1
regex:
- (?:freshdesk).{0,40}\b([0-9A-Za-z]{20})\b
part: body
- type: regex
name: freshdesk_2
regex:
- \b([0-9a-z-]{1,}.freshdesk.com)\b
part: body
- type: regex
name: front
regex:
- (?:front).{0,40}\b([0-9a-zA-Z]{36}.[0-9a-zA-Z\.\-\_]{188,244})\b
part: body
- type: regex
name: fulcrum
regex:
- (?:fulcrum).{0,40}\b([a-z0-9]{80})\b
part: body
- type: regex
name: fullstory
regex:
- (?:fullstory).{0,40}\b([a-zA-Z-0-9/+]{88})\b
part: body
- type: regex
name: fusebill
regex:
- (?:fusebill).{0,40}\b([a-zA-Z0-9]{88})\b
part: body
- type: regex
name: fxmarket
regex:
- (?:fxmarket).{0,40}\b([0-9Aa-zA-Z-_=]{20})\b
part: body
- type: regex
name: gcp
regex:
- \{[^{]+auth_provider_x509_cert_url[^}]+\}
part: body
- type: regex
name: geckoboard
regex:
- (?:geckoboard).{0,40}\b([a-zA-Z0-9]{44})\b
part: body
- type: regex
name: generic_1376
regex:
- jdbc:mysql(=| =|:| :)
part: body
- type: regex
name: generic_1700
regex:
- BEGIN OPENSSH PRIVATE KEY
part: body
- type: regex
name: generic_1701
regex:
- BEGIN PRIVATE KEY
part: body
- type: regex
name: generic_1702
regex:
- BEGIN RSA PRIVATE KEY
part: body
- type: regex
name: generic_1703
regex:
- BEGIN DSA PRIVATE KEY
part: body
- type: regex
name: generic_1704
regex:
- BEGIN EC PRIVATE KEY
part: body
- type: regex
name: generic_1705
regex:
- BEGIN PGP PRIVATE KEY BLOCK
part: body
- type: regex
name: generic_1710
regex:
- algolia_api_key
part: body
- type: regex
name: generic_1711
regex:
- asana_access_token
part: body
- type: regex
name: generic_1713
regex:
- azure_tenant
part: body
- type: regex
name: generic_1714
regex:
- bitly_access_token
part: body
- type: regex
name: generic_1716
regex:
- browserstack_access_key
part: body
- type: regex
name: generic_1717
regex:
- buildkite_access_token
part: body
- type: regex
name: generic_1718
regex:
- comcast_access_token
part: body
- type: regex
name: generic_1719
regex:
- datadog_api_key
part: body
- type: regex
name: generic_1720
regex:
- deviantart_secret
part: body
- type: regex
name: generic_1721
regex:
- deviantart_access_token
part: body
- type: regex
name: generic_1722
regex:
- dropbox_api_token
part: body
- type: regex
name: generic_1723
regex:
- facebook_appsecret
part: body
- type: regex
name: generic_1724
regex:
- facebook_access_token
part: body
- type: regex
name: generic_1725
regex:
- firebase_custom_token
part: body
- type: regex
name: generic_1726
regex:
- firebase_id_token
part: body
- type: regex
name: generic_1727
regex:
- github_client
part: body
- type: regex
name: generic_1728
regex:
- github_ssh_key
part: body
- type: regex
name: generic_1730
regex:
- gitlab_private_token
part: body
- type: regex
name: generic_1733
regex:
- heroku_api_key
part: body
- type: regex
name: generic_1734
regex:
- instagram_access_token
part: body
- type: regex
name: generic_1735
regex:
- mailchimp_api_key
part: body
- type: regex
name: generic_1736
regex:
- mailgun_api_key
part: body
- type: regex
name: generic_1739
regex:
- pagerduty_api_token
part: body
- type: regex
name: generic_1740
regex:
- paypal_key_sb
part: body
- type: regex
name: generic_1741
regex:
- paypal_key_live
part: body
- type: regex
name: generic_1742
regex:
- paypal_token_sb
part: body
- type: regex
name: generic_1743
regex:
- paypal_token_live
part: body
- type: regex
name: generic_1744
regex:
- pendo_integration_key
part: body
- type: regex
name: generic_1745
regex:
- salesforce_access_token
part: body
- type: regex
name: generic_1746
regex:
- saucelabs_ukey
part: body
- type: regex
name: generic_1747
regex:
- sendgrid_api_key
part: body
- type: regex
name: generic_1748
regex:
- slack_api_token
part: body
- type: regex
name: generic_1751
regex:
- square_auth_token
part: body
- type: regex
name: generic_1752
regex:
- travisci_api_token
part: body
- type: regex
name: generic_1754
regex:
- twitter_api_secret
part: body
- type: regex
name: generic_1755
regex:
- twitter_bearer_token
part: body
- type: regex
name: generic_1756
regex:
- spotify_access_token
part: body
- type: regex
name: generic_1757
regex:
- stripe_key_live
part: body
- type: regex
name: generic_1758
regex:
- wakatime_api_key
part: body
- type: regex
name: generic_1759
regex:
- wompi_auth_bearer_sb
part: body
- type: regex
name: generic_1760
regex:
- wompi_auth_bearer_live
part: body
- type: regex
name: generic_1761
regex:
- wpengine_api_key
part: body
- type: regex
name: generic_1763
regex:
- zendesk_access_token
part: body
- type: regex
name: generic_1764
regex:
- ssh-rsa
part: body
- type: regex
name: gengo
regex:
- >-
(?:gengo).{0,40}([ ]{0,1}[0-9a-zA-Z\[\]\-\(\)\{\}|_^@$=~]{64}[
\r\n]{1})
part: body
- type: regex
name: geoapify
regex:
- (?:geoapify).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: geocode
regex:
- (?:geocode).{0,40}\b([a-z0-9]{28})\b
part: body
- type: regex
name: geocodify
regex:
- (?:geocodify).{0,40}\b([0-9a-z]{40})\b
part: body
- type: regex
name: geocodio_2
regex:
- (?:geocod).{0,40}\b([a-z0-9]{39})\b
part: body
- type: regex
name: geoipifi
regex:
- (?:ipifi).{0,40}\b([a-z0-9A-Z_]{32})\b
part: body
- type: regex
name: getemail
regex:
- (?:getemail).{0,40}\b([a-zA-Z0-9-]{20})\b
part: body
- type: regex
name: getemails_1
regex:
- (?:getemails).{0,40}\b([a-z0-9-]{26})\b
part: body
- type: regex
name: getemails_2
regex:
- (?:getemails).{0,40}\b([a-z0-9-]{18})\b
part: body
- type: regex
name: getgeoapi
regex:
- (?:getgeoapi).{0,40}\b([0-9a-z]{40})\b
part: body
- type: regex
name: getgist
regex:
- (?:getgist).{0,40}\b([a-z0-9A-Z+=]{68})
part: body
- type: regex
name: getsandbox_1
regex:
- (?:getsandbox).{0,40}\b([a-z0-9-]{40})\b
part: body
- type: regex
name: getsandbox_2
regex:
- (?:getsandbox).{0,40}\b([a-z0-9-]{15,30})\b
part: body
- type: regex
name: github_2
regex:
- \b((?:ghp|gho|ghu|ghs|ghr)_[a-zA-Z0-9]{36,255}\b)
part: body
- type: regex
name: github_app_token
regex:
- (ghu|ghs)_[0-9a-zA-Z]{36}
part: body
- type: regex
name: github_oauth_access_token
regex:
- gho_[0-9a-zA-Z]{36}
part: body
- type: regex
name: github_personal_access_token
regex:
- ghp_[0-9a-zA-Z]{36}
part: body
- type: regex
name: github_refresh_token
regex:
- ghr_[0-9a-zA-Z]{76}
part: body
- type: regex
name: github_old
regex:
- (?:github)[^\.].{0,40}[ =:'"]+([a-f0-9]{40})\b
part: body
- type: regex
name: githubapp_2
regex:
- >-
(?:github).{0,40}(-----BEGIN RSA PRIVATE
KEY-----\s[A-Za-z0-9+\/\s]*\s-----END RSA PRIVATE KEY-----)
part: body
- type: regex
name: gitlabv2
regex:
- \b(glpat-[a-zA-Z0-9\-=_]{20,22})\b
part: body
- type: regex
name: gitter
regex:
- (?:gitter).{0,40}\b([a-z0-9-]{40})\b
part: body
- type: regex
name: glassnode
regex:
- (?:glassnode).{0,40}\b([0-9A-Za-z]{27})\b
part: body
- type: regex
name: gocanvas_1
regex:
- (?:gocanvas).{0,40}\b([0-9A-Za-z/+]{43}=[ \r\n]{1})
part: body
- type: regex
name: gocanvas_2
regex:
- (?:gocanvas).{0,40}\b([\w\.-]+@[\w-]+\.[\w\.-]{2,5})\b
part: body
- type: regex
name: gocardless
regex:
- \b(live_[0-9A-Za-z\_\-]{40}[ "'\r\n]{1})
part: body
- type: regex
name: goodday
regex:
- (?:goodday).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: google_gcp_service_account
regex:
- '"type": "service_account"'
part: body
- type: regex
name: google_api_key
regex:
- AIza[0-9a-z-_]{35}
part: body
- type: regex
name: google_calendar_uri
regex:
- https://www\.google\.com/calendar/embed\?src=[A-Za-z0-9%@&;=\-_\./]+
part: body
- type: regex
name: google_oauth_access_token
regex:
- ya29\.[0-9A-Za-z\-_]+
part: body
- type: regex
name: graphcms_1
regex:
- (?:graph).{0,40}\b([a-z0-9]{25})\b
part: body
- type: regex
name: graphcms_2
regex:
- \b(ey[a-zA-Z0-9]{73}.ey[a-zA-Z0-9]{365}.[a-zA-Z0-9_-]{683})\b
part: body
- type: regex
name: graphhopper
regex:
- (?:graphhopper).{0,40}\b([a-z0-9-]{36})\b
part: body
- type: regex
name: groovehq
regex:
- (?:groove).{0,40}\b([a-z0-9A-Z]{64})
part: body
- type: regex
name: guru_1
regex:
- >-
(?:guru).{0,40}\b([a-zA-Z0-9]{3,20}@[a-zA-Z0-9]{2,12}.[a-zA-Z0-9]{2,5})\b
part: body
- type: regex
name: guru_2
regex:
- >-
(?:guru).{0,40}\b([a-z0-9]{8}-[a-z0-9]{4}-[a-z0-9]{4}-[a-z0-9]{4}-[a-z0-9]{12})\b
part: body
- type: regex
name: gyazo
regex:
- (?:gyazo).{0,40}\b([0-9A-Za-z-]{43})\b
part: body
- type: regex
name: happi
regex:
- (?:happi).{0,40}\b([a-zA-Z0-9]{56})
part: body
- type: regex
name: happyscribe
regex:
- (?:happyscribe).{0,40}\b([0-9a-zA-Z]{24})\b
part: body
- type: regex
name: harvest_1
regex:
- (?:harvest).{0,40}\b([a-z0-9A-Z._]{97})\b
part: body
- type: regex
name: hellosign
regex:
- (?:hellosign).{0,40}\b([a-zA-Z-0-9/+]{64})\b
part: body
- type: regex
name: helpcrunch
regex:
- (?:helpcrunch).{0,40}\b([a-zA-Z-0-9+/=]{328})
part: body
- type: regex
name: helpscout
regex:
- (?:helpscout).{0,40}\b([A-Za-z0-9]{56})\b
part: body
- type: regex
name: hereapi
regex:
- (?:hereapi).{0,40}\b([a-zA-Z0-9\S]{43})\b
part: body
- type: regex
name: heroku
regex:
- >-
(?:heroku).{0,40}\b([0-9Aa-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\b
part: body
- type: regex
name: hive_2
regex:
- (?:hive).{0,40}\b([0-9A-Za-z]{17})\b
part: body
- type: regex
name: hiveage
regex:
- (?:hiveage).{0,40}\b([0-9A-Za-z\_\-]{20})\b
part: body
- type: regex
name: holidayapi
regex:
- (?:holidayapi).{0,40}\b([a-z0-9-]{36})\b
part: body
- type: regex
name: html2pdf
regex:
- (?:html2pdf).{0,40}\b([a-zA-Z0-9]{64})\b
part: body
- type: regex
name: hubspotapikey
regex:
- >-
(?:hubspot).{0,40}\b([A-Za-z0-9]{8}\-[A-Za-z0-9]{4}\-[A-Za-z0-9]{4}\-[A-Za-z0-9]{4}\-[A-Za-z0-9]{12})\b
part: body
- type: regex
name: humanity
regex:
- (?:humanity).{0,40}\b([0-9a-z]{40})\b
part: body
- type: regex
name: hypertrack_1
regex:
- (?:hypertrack).{0,40}\b([0-9a-zA-Z\_\-]{54})\b
part: body
- type: regex
name: hypertrack_2
regex:
- (?:hypertrack).{0,40}\b([0-9a-zA-Z\_\-]{27})\b
part: body
- type: regex
name: ibmclouduserkey
regex:
- (?:ibm).{0,40}\b([A-Za-z0-9_-]{44})\b
part: body
- type: regex
name: iconfinder
regex:
- (?:iconfinder).{0,40}\b([a-zA-Z0-9]{64})\b
part: body
- type: regex
name: iexcloud
regex:
- (?:iexcloud).{0,40}\b([a-z0-9_]{35})\b
part: body
- type: regex
name: imagekit
regex:
- (?:imagekit).{0,40}\b([a-zA-Z0-9_=]{36})
part: body
- type: regex
name: imagga
regex:
- (?:imagga).{0,40}\b([a-z0-9A-Z=]{72})
part: body
- type: regex
name: impala
regex:
- (?:impala).{0,40}\b([0-9A-Za-z_]{46})\b
part: body
- type: regex
name: insightly
regex:
- (?:insightly).{0,40}\b([a-z0-9-]{36})\b
part: body
- type: regex
name: integromat
regex:
- (?:integromat).{0,40}\b([a-z0-9-]{36})\b
part: body
- type: regex
name: intrinio
regex:
- (?:intrinio).{0,40}\b([a-zA-Z0-9]{44})\b
part: body
- type: regex
name: invoiceocean_1
regex:
- (?:invoiceocean).{0,40}\b([0-9A-Za-z]{20})\b
part: body
- type: regex
name: invoiceocean_2
regex:
- \b([0-9a-z]{1,}.invoiceocean.com)\b
part: body
- type: regex
name: ipapi
regex:
- (?:ipapi).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: ipgeolocation
regex:
- (?:ipgeolocation).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: ipify
regex:
- (?:ipify).{0,40}\b([a-zA-Z0-9_-]{32})\b
part: body
- type: regex
name: ipinfodb
regex:
- (?:ipinfodb).{0,40}\b([a-z0-9]{64})\b
part: body
- type: regex
name: ipquality
regex:
- (?:ipquality).{0,40}\b([0-9a-z]{32})\b
part: body
- type: regex
name: ipstack
regex:
- (?:ipstack).{0,40}\b([a-fA-f0-9]{32})\b
part: body
- type: regex
name: jdbc_connection_string
regex:
- jdbc:[a-z:]+://[A-Za-z0-9\.\-_:;=/@?,&]+
part: body
- type: regex
name: jiratoken_1
regex:
- (?:jira).{0,40}\b([a-zA-Z-0-9]{24})\b
part: body
- type: regex
name: jiratoken_2
regex:
- (?:jira).{0,40}\b([a-zA-Z-0-9]{5,24}\@[a-zA-Z-0-9]{3,16}\.com)\b
part: body
- type: regex
name: jotform
regex:
- (?:jotform).{0,40}\b([0-9Aa-z]{32})\b
part: body
- type: regex
name: jumpcloud
regex:
- (?:jumpcloud).{0,40}\b([a-zA-Z0-9]{40})\b
part: body
- type: regex
name: juro
regex:
- (?:juro).{0,40}\b([a-zA-Z0-9]{40})\b
part: body
- type: regex
name: kanban_1
regex:
- (?:kanban).{0,40}\b([0-9A-Z]{12})\b
part: body
- type: regex
name: kanban_2
regex:
- \b([0-9a-z]{1,}.kanbantool.com)\b
part: body
- type: regex
name: karmacrm
regex:
- (?:karma).{0,40}\b([a-zA-Z0-9]{20})\b
part: body
- type: regex
name: keenio_1
regex:
- (?:keen).{0,40}\b([0-9a-z]{24})\b
part: body
- type: regex
name: keenio_2
regex:
- (?:keen).{0,40}\b([0-9A-Z]{64})\b
part: body
- type: regex
name: kickbox
regex:
- (?:kickbox).{0,40}\b([a-zA-Z0-9_]+[a-zA-Z0-9]{64})\b
part: body
- type: regex
name: klipfolio
regex:
- (?:klipfolio).{0,40}\b([0-9a-f]{40})\b
part: body
- type: regex
name: kontent
regex:
- (?:kontent).{0,40}\b([a-z0-9-]{36})\b
part: body
- type: regex
name: kraken_1
regex:
- (?:kraken).{0,40}\b([0-9A-Za-z\/\+=]{56}[ "'\r\n]{1})
part: body
- type: regex
name: kraken_2
regex:
- (?:kraken).{0,40}\b([0-9A-Za-z\/\+=]{86,88}[ "'\r\n]{1})
part: body
- type: regex
name: kucoin_1
regex:
- (?:kucoin).{0,40}([ \r\n]{1}[!-~]{7,32}[ \r\n]{1})
part: body
- type: regex
name: kucoin_2
regex:
- >-
(?:kucoin).{0,40}\b([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\b
part: body
- type: regex
name: kucoin_3
regex:
- (?:kucoin).{0,40}\b([0-9a-f]{24})\b
part: body
- type: regex
name: kylas
regex:
- (?:kylas).{0,40}\b([a-z0-9-]{36})\b
part: body
- type: regex
name: languagelayer
regex:
- (?:languagelayer).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: lastfm
regex:
- (?:lastfm).{0,40}\b([0-9a-z]{32})\b
part: body
- type: regex
name: launchdarkly
regex:
- (?:launchdarkly).{0,40}\b([a-z0-9-]{40})\b
part: body
- type: regex
name: leadfeeder
regex:
- (?:leadfeeder).{0,40}\b([a-zA-Z0-9-]{43})\b
part: body
- type: regex
name: lendflow
regex:
- >-
(?:lendflow).{0,40}\b([a-zA-Z0-9]{36}\.[a-zA-Z0-9]{235}\.[a-zA-Z0-9]{32}\-[a-zA-Z0-9]{47}\-[a-zA-Z0-9_]{162}\-[a-zA-Z0-9]{42}\-[a-zA-Z0-9_]{40}\-[a-zA-Z0-9_]{66}\-[a-zA-Z0-9_]{59}\-[a-zA-Z0-9]{7}\-[a-zA-Z0-9_]{220})\b
part: body
- type: regex
name: lexigram
regex:
- (?:lexigram).{0,40}\b([a-zA-Z0-9\S]{301})\b
part: body
- type: regex
name: linearapi
regex:
- \b(lin_api_[0-9A-Za-z]{40})\b
part: body
- type: regex
name: linemessaging
regex:
- (?:line).{0,40}\b([A-Za-z0-9+/]{171,172})\b
part: body
- type: regex
name: linenotify
regex:
- (?:linenotify).{0,40}\b([0-9A-Za-z]{43})\b
part: body
- type: regex
name: linkpreview
regex:
- (?:linkpreview).{0,40}\b([a-zA-Z0-9]{32})\b
part: body
- type: regex
name: liveagent
regex:
- (?:liveagent).{0,40}\b([a-zA-Z0-9]{32})\b
part: body
- type: regex
name: livestorm
regex:
- >-
(?:livestorm).{0,40}\b(eyJhbGciOiJIUzI1NiJ9\.eyJhdWQiOiJhcGkubGl2ZXN0b3JtLmNvIiwianRpIjoi[0-9A-Z-a-z]{134}\.[0-9A-Za-z\-\_]{43}[
\r\n]{1})
part: body
- type: regex
name: locationiq
regex:
- \b(pk\.[a-zA-Z-0-9]{32})\b
part: body
- type: regex
name: loginradius
regex:
- >-
(?:loginradius).{0,40}\b([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\b
part: body
- type: regex
name: lokalisetoken
regex:
- (?:lokalise).{0,40}\b([a-z0-9]{40})\b
part: body
- type: regex
name: loyverse
regex:
- (?:loyverse).{0,40}\b([0-9-a-z]{32})\b
part: body
- type: regex
name: luno_1
regex:
- (?:luno).{0,40}\b([a-z0-9]{13})\b
part: body
- type: regex
name: luno_2
regex:
- (?:luno).{0,40}\b([a-zA-Z0-9_-]{43})\b
part: body
- type: regex
name: macaddress
regex:
- (?:macaddress).{0,40}\b([a-zA-Z0-9_]{32})\b
part: body
- type: regex
name: madkudu
regex:
- (?:madkudu).{0,40}\b([0-9a-f]{32})\b
part: body
- type: regex
name: magnetic
regex:
- >-
(?:magnetic).{0,40}\b([0-9Aa-z]{8}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{12})\b
part: body
- type: regex
name: mailchimp_api_key
regex:
- '[0-9a-f]{32}-us[0-9]{1,2}'
part: body
- type: regex
name: mailboxlayer
regex:
- (?:mailboxlayer).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: mailerlite
regex:
- (?:mailerlite).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: mailgun_2
regex:
- (?:mailgun).{0,40}\b([a-zA-Z-0-9]{72})\b
part: body
- type: regex
name: mailgun_api_key_1
regex:
- key-[0-9a-zA-Z]{32}
part: body
- type: regex
name: mailjetbasicauth
regex:
- (?:mailjet).{0,40}\b([A-Za-z0-9]{87}\=)
part: body
- type: regex
name: mailjetsms
regex:
- (?:mailjet).{0,40}\b([A-Za-z0-9]{32})\b
part: body
- type: regex
name: mailmodo
regex:
- >-
(?:mailmodo).{0,40}\b([A-Z0-9]{7}-[A-Z0-9]{7}-[A-Z0-9]{7}-[A-Z0-9]{7})\b
part: body
- type: regex
name: mailsac
regex:
- (?:mailsac).{0,40}\b(k_[0-9A-Za-z]{36,})\b
part: body
- type: regex
name: mandrill
regex:
- (?:mandrill).{0,40}\b([A-Za-z0-9_-]{22})\b
part: body
- type: regex
name: mapbox_2
regex:
- \b(sk\.[a-zA-Z-0-9\.]{80,240})\b
part: body
- type: regex
name: mapquest
regex:
- (?:mapquest).{0,40}\b([0-9A-Za-z]{32})\b
part: body
- type: regex
name: marketstack
regex:
- (?:marketstack).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: mattermostpersonaltoken_1
regex:
- (?:mattermost).{0,40}\b([A-Za-z0-9-_]{1,}.cloud.mattermost.com)\b
part: body
- type: regex
name: mattermostpersonaltoken_2
regex:
- (?:mattermost).{0,40}\b([a-z0-9]{26})\b
part: body
- type: regex
name: mavenlink
regex:
- (?:mavenlink).{0,40}\b([0-9a-z]{64})\b
part: body
- type: regex
name: maxmindlicense_1
regex:
- (?:maxmind|geoip).{0,40}\b([0-9A-Za-z]{16})\b
part: body
- type: regex
name: maxmindlicense_2
regex:
- (?:maxmind|geoip).{0,40}\b([0-9]{2,7})\b
part: body
- type: regex
name: meaningcloud
regex:
- (?:meaningcloud).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: mediastack
regex:
- (?:mediastack).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: meistertask
regex:
- (?:meistertask).{0,40}\b([a-zA-Z0-9]{43})\b
part: body
- type: regex
name: mesibo
regex:
- (?:mesibo).{0,40}\b([0-9A-Za-z]{64})\b
part: body
- type: regex
name: messagebird
regex:
- (?:messagebird).{0,40}\b([A-Za-z0-9_-]{25})\b
part: body
- type: regex
name: metaapi_1
regex:
- (?:metaapi|meta-api).{0,40}\b([0-9a-f]{64})\b
part: body
- type: regex
name: metaapi_2
regex:
- (?:metaapi|meta-api).{0,40}\b([0-9a-f]{24})\b
part: body
- type: regex
name: metrilo
regex:
- (?:metrilo).{0,40}\b([a-z0-9]{16})\b
part: body
- type: regex
name: microsoftteamswebhook
regex:
- >-
(https:\/\/[a-zA-Z-0-9]+\.webhook\.office\.com\/webhookb2\/[a-zA-Z-0-9]{8}-[a-zA-Z-0-9]{4}-[a-zA-Z-0-9]{4}-[a-zA-Z-0-9]{4}-[a-zA-Z-0-9]{12}\@[a-zA-Z-0-9]{8}-[a-zA-Z-0-9]{4}-[a-zA-Z-0-9]{4}-[a-zA-Z-0-9]{4}-[a-zA-Z-0-9]{12}\/IncomingWebhook\/[a-zA-Z-0-9]{32}\/[a-zA-Z-0-9]{8}-[a-zA-Z-0-9]{4}-[a-zA-Z-0-9]{4}-[a-zA-Z-0-9]{4}-[a-zA-Z-0-9]{12})
part: body
- type: regex
name: midise
regex:
- midi-662b69edd2[a-zA-Z0-9]{54}
part: body
- type: regex
name: mindmeister
regex:
- (?:mindmeister).{0,40}\b([a-zA-Z0-9]{43})\b
part: body
- type: regex
name: mite_1
regex:
- (?:mite).{0,40}\b([0-9a-z]{16})\b
part: body
- type: regex
name: mite_2
regex:
- \b([0-9a-z-]{1,}.mite.yo.lk)\b
part: body
- type: regex
name: mixmax
regex:
- (?:mixmax).{0,40}\b([a-zA-Z0-9_-]{36})\b
part: body
- type: regex
name: mixpanel_1
regex:
- (?:mixpanel).{0,40}\b([a-zA-Z0-9.-]{30,40})\b
part: body
- type: regex
name: mixpanel_2
regex:
- (?:mixpanel).{0,40}\b([a-zA-Z0-9-]{32})\b
part: body
- type: regex
name: moderation
regex:
- >-
(?:moderation).{0,40}\b([a-zA-Z0-9]{36}\.[a-zA-Z0-9]{115}\.[a-zA-Z0-9_]{43})\b
part: body
- type: regex
name: monday
regex:
- (?:monday).{0,40}\b(ey[a-zA-Z0-9_.]{210,225})\b
part: body
- type: regex
name: moonclerck
regex:
- (?:moonclerck).{0,40}\b([0-9a-z]{32})\b
part: body
- type: regex
name: moonclerk
regex:
- (?:moonclerk).{0,40}\b([0-9a-z]{32})\b
part: body
- type: regex
name: moosend
regex:
- >-
(?:moosend).{0,40}\b([0-9Aa-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\b
part: body
- type: regex
name: mrticktock_1
regex:
- (?:mrticktock).{0,40}\b([a-zA-Z0-9!=@#$%()_^]{1,50})
part: body
- type: regex
name: myintervals
regex:
- (?:myintervals).{0,40}\b([0-9a-z]{11})\b
part: body
- type: regex
name: nasdaqdatalink
regex:
- (?:nasdaq).{0,40}\b([a-zA-Z0-9_-]{20})\b
part: body
- type: regex
name: nethunt_1
regex:
- (?:nethunt).{0,40}\b([a-zA-Z0-9.-@]{25,30})\b
part: body
- type: regex
name: nethunt_2
regex:
- (?:nethunt).{0,40}\b([a-z0-9-\S]{36})\b
part: body
- type: regex
name: netlify
regex:
- (?:netlify).{0,40}\b([A-Za-z0-9_-]{43,45})\b
part: body
- type: regex
name: neutrinoapi_1
regex:
- (?:neutrinoapi).{0,40}\b([a-zA-Z0-9]{48})\b
part: body
- type: regex
name: neutrinoapi_2
regex:
- (?:neutrinoapi).{0,40}\b([a-zA-Z0-9]{6,24})\b
part: body
- type: regex
name: newrelic_admin_api_key
regex:
- NRAA-[a-f0-9]{27}
part: body
- type: regex
name: newrelic_insights_api_key
regex:
- NRI(?:I|Q)-[A-Za-z0-9\-_]{32}
part: body
- type: regex
name: newrelic_rest_api_key
regex:
- NRRA-[a-f0-9]{42}
part: body
- type: regex
name: newrelic_synthetics_location_key
regex:
- NRSP-[a-z]{2}[0-9]{2}[a-f0-9]{31}
part: body
- type: regex
name: newrelicpersonalapikey
regex:
- (?:newrelic).{0,40}\b([A-Za-z0-9_\.]{4}-[A-Za-z0-9_\.]{42})\b
part: body
- type: regex
name: newsapi
regex:
- (?:newsapi).{0,40}\b([a-z0-9]{32})
part: body
- type: regex
name: newscatcher
regex:
- (?:newscatcher).{0,40}\b([0-9A-Za-z_]{43})\b
part: body
- type: regex
name: nexmoapikey_1
regex:
- (?:nexmo).{0,40}\b([A-Za-z0-9_-]{8})\b
part: body
- type: regex
name: nexmoapikey_2
regex:
- (?:nexmo).{0,40}\b([A-Za-z0-9_-]{16})\b
part: body
- type: regex
name: nftport
regex:
- >-
(?:nftport).{0,40}\b([a-z0-9]{8}-[a-z0-9]{4}-[a-z0-9]{4}-[a-z0-9]{4}-[a-z0-9]{12})\b
part: body
- type: regex
name: nicereply
regex:
- (?:nicereply).{0,40}\b([0-9a-f]{40})\b
part: body
- type: regex
name: nimble
regex:
- (?:nimble).{0,40}\b([a-zA-Z0-9]{30})\b
part: body
- type: regex
name: nitro
regex:
- (?:nitro).{0,40}\b([0-9a-f]{32})\b
part: body
- type: regex
name: noticeable
regex:
- (?:noticeable).{0,40}\b([0-9a-zA-Z]{20})\b
part: body
- type: regex
name: notion
regex:
- \b(secret_[A-Za-z0-9]{43})\b
part: body
- type: regex
name: nozbeteams
regex:
- >-
(?:nozbe|nozbeteams).{0,40}\b([0-9A-Za-z]{16}_[0-9A-Za-z\-_]{64}[
\r\n]{1})
part: body
- type: regex
name: numverify
regex:
- (?:numverify).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: nutritionix_1
regex:
- (?:nutritionix).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: nutritionix_2
regex:
- (?:nutritionix).{0,40}\b([a-z0-9]{8})\b
part: body
- type: regex
name: nylas
regex:
- (?:nylas).{0,40}\b([0-9A-Za-z]{30})\b
part: body
- type: regex
name: oanda
regex:
- (?:oanda).{0,40}\b([a-zA-Z0-9]{24})\b
part: body
- type: regex
name: omnisend
regex:
- (?:omnisend).{0,40}\b([a-z0-9A-Z-]{75})\b
part: body
- type: regex
name: onedesk_1
regex:
- (?:onedesk).{0,40}\b([a-zA-Z0-9!=@#$%^]{8,64})
part: body
- type: regex
name: onelogin_2
regex:
- secret[a-zA-Z0-9_' "=]{0,20}([a-z0-9]{64})
part: body
- type: regex
name: onepagecrm_1
regex:
- (?:onepagecrm).{0,40}\b([a-zA-Z0-9=]{44})
part: body
- type: regex
name: onepagecrm_2
regex:
- (?:onepagecrm).{0,40}\b([a-z0-9]{24})\b
part: body
- type: regex
name: onwaterio
regex:
- (?:onwater).{0,40}\b([a-zA-Z0-9_-]{20})\b
part: body
- type: regex
name: oopspam
regex:
- (?:oopspam).{0,40}\b([a-zA-Z0-9]{40})\b
part: body
- type: regex
name: opencagedata
regex:
- (?:opencagedata).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: opengraphr
regex:
- (?:opengraphr).{0,40}\b([0-9Aa-zA-Z]{80})\b
part: body
- type: regex
name: openuv
regex:
- (?:openuv).{0,40}\b([0-9a-z]{32})\b
part: body
- type: regex
name: openweather
regex:
- (?:openweather).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: optimizely
regex:
- (?:optimizely).{0,40}\b([0-9A-Za-z-:]{54})\b
part: body
- type: regex
name: owlbot
regex:
- (?:owlbot).{0,40}\b([a-z0-9]{40})\b
part: body
- type: regex
name: pgp_private_key_block
regex:
- '-----BEGIN PGP PRIVATE KEY BLOCK-----'
part: body
- type: regex
name: pagerdutyapikey
regex:
- >-
(?:pagerduty).{0,40}\b([a-z]{1}\+[a-zA-Z]{9}\-[a-z]{2}\-[a-z0-9]{5})\b
part: body
- type: regex
name: pandadoc
regex:
- (?:pandadoc).{0,40}\b([a-zA-Z0-9]{40})\b
part: body
- type: regex
name: pandascore
regex:
- (?:pandascore).{0,40}([ \r\n]{0,1}[0-9A-Za-z\-\_]{51}[ \r\n]{1})
part: body
- type: regex
name: paralleldots
regex:
- (?:paralleldots).{0,40}\b([0-9A-Za-z]{43})\b
part: body
- type: regex
name: partnerstack
regex:
- (?:partnerstack).{0,40}\b([0-9A-Za-z]{64})\b
part: body
- type: regex
name: passbase
regex:
- (?:passbase).{0,40}\b([a-zA-Z0-9]{128})\b
part: body
- type: regex
name: password_in_url
regex:
- '[a-zA-Z]{3,10}://[^/\s:@]{3,20}:[^/\s:@]{3,20}@.{1,100}["''\s]'
part: body
- type: regex
name: pastebin
regex:
- (?:pastebin).{0,40}\b([a-zA-Z0-9_]{32})\b
part: body
- type: regex
name: paypal_braintree_access_token
regex:
- access_token\$production\$[0-9a-z]{16}\$[0-9a-f]{32}
part: body
- type: regex
name: paymoapp
regex:
- (?:paymoapp).{0,40}\b([a-zA-Z0-9]{44})\b
part: body
- type: regex
name: paymongo
regex:
- (?:paymongo).{0,40}\b([a-zA-Z0-9_]{32})\b
part: body
- type: regex
name: paystack
regex:
- \b(sk\_[a-z]{1,}\_[A-Za-z0-9]{40})\b
part: body
- type: regex
name: pdflayer
regex:
- (?:pdflayer).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: pdfshift
regex:
- (?:pdfshift).{0,40}\b([0-9a-f]{32})\b
part: body
- type: regex
name: peopledatalabs
regex:
- (?:peopledatalabs).{0,40}\b([a-z0-9]{64})\b
part: body
- type: regex
name: pepipost
regex:
- (?:pepipost|netcore).{0,40}\b([a-zA-Z-0-9]{32})\b
part: body
- type: regex
name: picatic_api_key
regex:
- sk_live_[0-9a-z]{32}
part: body
- type: regex
name: pipedream
regex:
- (?:pipedream).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: pipedrive
regex:
- (?:pipedrive).{0,40}\b([a-zA-Z0-9]{40})\b
part: body
- type: regex
name: pivotaltracker
regex:
- (?:pivotal).{0,40}([a-z0-9]{32})
part: body
- type: regex
name: pixabay
regex:
- (?:pixabay).{0,40}\b([a-z0-9-]{34})\b
part: body
- type: regex
name: plaidkey_1
regex:
- (?:plaid).{0,40}\b([a-z0-9]{24})\b
part: body
- type: regex
name: plaidkey_2
regex:
- (?:plaid).{0,40}\b([a-z0-9]{30})\b
part: body
- type: regex
name: planviewleankit_1
regex:
- (?:planviewleankit|planview).{0,40}\b([0-9a-f]{128})\b
part: body
- type: regex
name: planviewleankit_2
regex:
- >-
(?:planviewleankit|planview).{0,40}(?:subdomain).\b([a-zA-Z][a-zA-Z0-9.-]{1,23}[a-zA-Z0-9])\b
part: body
- type: regex
name: planyo
regex:
- (?:planyo).{0,40}\b([0-9a-z]{62})\b
part: body
- type: regex
name: plivo_1
regex:
- (?:plivo).{0,40}\b([A-Za-z0-9_-]{40})\b
part: body
- type: regex
name: plivo_2
regex:
- (?:plivo).{0,40}\b([A-Z]{20})\b
part: body
- type: regex
name: poloniex_1
regex:
- (?:poloniex).{0,40}\b([0-9a-f]{128})\b
part: body
- type: regex
name: poloniex_2
regex:
- >-
(?:poloniex).{0,40}\b([0-9A-Z]{8}-[0-9A-Z]{8}-[0-9A-Z]{8}-[0-9A-Z]{8})\b
part: body
- type: regex
name: polygon
regex:
- (?:polygon).{0,40}\b([a-z0-9A-Z]{32})\b
part: body
- type: regex
name: positionstack
regex:
- (?:positionstack).{0,40}\b([a-zA-Z0-9_]{32})\b
part: body
- type: regex
name: postageapp
regex:
- (?:postageapp).{0,40}\b([0-9A-Za-z]{32})\b
part: body
- type: regex
name: posthog
regex:
- \b(phc_[a-zA-Z0-9_]{43})\b
part: body
- type: regex
name: postman
regex:
- \b(PMAK-[a-zA-Z-0-9]{59})\b
part: body
- type: regex
name: postmark
regex:
- >-
(?:postmark).{0,40}\b([0-9a-z]{8}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{12})\b
part: body
- type: regex
name: powrbot
regex:
- (?:powrbot).{0,40}\b([a-z0-9A-Z]{40})\b
part: body
- type: regex
name: privatekey
regex:
- >-
-----\s*?BEGIN[ A-Z0-9_-]*?PRIVATE KEY\s*?-----[\s\S]*?----\s*?END[
A-Z0-9_-]*? PRIVATE KEY\s*?-----
part: body
- type: regex
name: prospectcrm
regex:
- (?:prospect).{0,40}\b([a-z0-9-]{32})\b
part: body
- type: regex
name: prospectio
regex:
- (?:prospect).{0,40}\b([a-z0-9A-Z-]{50})\b
part: body
- type: regex
name: protocolsio
regex:
- (?:protocols).{0,40}\b([a-z0-9]{64})\b
part: body
- type: regex
name: proxycrawl
regex:
- (?:proxycrawl).{0,40}\b([a-zA-Z0-9_]{22})\b
part: body
- type: regex
name: pubnubpublishkey_1
regex:
- >-
\b(sub-c-[0-9a-z]{8}-[a-z]{4}-[a-z0-9]{4}-[a-z0-9]{4}-[a-z0-9]{12})\b
part: body
- type: regex
name: pubnubpublishkey_2
regex:
- >-
\b(pub-c-[0-9a-z]{8}-[0-9a-z]{4}-[a-z0-9]{4}-[a-z0-9]{4}-[a-z0-9]{12})\b
part: body
- type: regex
name: purestake
regex:
- (?:purestake).{0,40}\b([a-zA-Z0-9]{40})\b
part: body
- type: regex
name: pushbulletapikey
regex:
- (?:pushbullet).{0,40}\b([A-Za-z0-9_\.]{34})\b
part: body
- type: regex
name: pusherchannelkey_2
regex:
- (?:pusher).{0,40}\b([a-z0-9]{20})\b
part: body
- type: regex
name: pusherchannelkey_3
regex:
- (?:pusher).{0,40}\b([0-9]{7})\b
part: body
- type: regex
name: pypi_upload_token
regex:
- pypi-AgEIcHlwaS5vcmc[A-Za-z0-9-_]{50,1000}
part: body
- type: regex
name: qualaroo
regex:
- (?:qualaroo).{0,40}\b([a-z0-9A-Z=]{64})
part: body
- type: regex
name: qubole
regex:
- (?:qubole).{0,40}\b([0-9a-z]{64})\b
part: body
- type: regex
name: quickmetrics
regex:
- (?:quickmetrics).{0,40}\b([a-zA-Z0-9_-]{22})\b
part: body
- type: regex
name: rkcs8
regex:
- '-----BEGIN PRIVATE KEY-----'
part: body
- type: regex
name: rsa_private_key
regex:
- '-----BEGIN RSA PRIVATE KEY-----'
part: body
- type: regex
name: rapidapi
regex:
- (?:rapidapi).{0,40}\b([A-Za-z0-9_-]{50})\b
part: body
- type: regex
name: raven
regex:
- (?:raven).{0,40}\b([A-Z0-9-]{16})\b
part: body
- type: regex
name: rawg
regex:
- (?:rawg).{0,40}\b([0-9Aa-z]{32})\b
part: body
- type: regex
name: razorpay_1
regex:
- \brzp_\w{2,6}_\w{10,20}\b
part: body
- type: regex
name: readme
regex:
- (?:readme).{0,40}\b([a-zA-Z0-9_]{32})\b
part: body
- type: regex
name: reallysimplesystems
regex:
- \b(ey[a-zA-Z0-9-._]{153}.ey[a-zA-Z0-9-._]{916,1000})\b
part: body
- type: regex
name: rebrandly
regex:
- (?:rebrandly).{0,40}\b([a-zA-Z0-9_]{32})\b
part: body
- type: regex
name: refiner
regex:
- >-
(?:refiner).{0,40}\b([0-9Aa-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\b
part: body
- type: regex
name: repairshopr_1
regex:
- (?:repairshopr).{0,40}\b([a-zA-Z0-9_.!+$#^*]{3,32})\b
part: body
- type: regex
name: repairshopr_2
regex:
- (?:repairshopr).{0,40}\b([a-zA-Z0-9-]{51})\b
part: body
- type: regex
name: restpack
regex:
- (?:restpack).{0,40}\b([a-zA-Z0-9]{48})\b
part: body
- type: regex
name: restpackhtmltopdfapi
regex:
- (?:restpack).{0,40}\b([0-9A-Za-z]{48})\b
part: body
- type: regex
name: rev_1
regex:
- (?:rev).{0,40}\b([0-9a-zA-Z\/\+]{27}\=[ \r\n]{1})
part: body
- type: regex
name: revampcrm_1
regex:
- (?:revamp).{0,40}\b([a-zA-Z0-9]{40}\b)
part: body
- type: regex
name: ringcentral_1
regex:
- (?:ringcentral).{0,40}\b(https://www.[0-9A-Za-z_-]{1,}.com)\b
part: body
- type: regex
name: ringcentral_2
regex:
- (?:ringcentral).{0,40}\b([0-9A-Za-z_-]{22})\b
part: body
- type: regex
name: ritekit
regex:
- (?:ritekit).{0,40}\b([0-9a-f]{44})\b
part: body
- type: regex
name: roaring
regex:
- (?:roaring).{0,40}\b([0-9A-Za-z_-]{28})\b
part: body
- type: regex
name: rocketreach
regex:
- (?:rocketreach).{0,40}\b([a-z0-9-]{39})\b
part: body
- type: regex
name: roninapp_2
regex:
- (?:ronin).{0,40}\b([0-9a-zA-Z]{26})\b
part: body
- type: regex
name: route4me
regex:
- (?:route4me).{0,40}\b([0-9A-Z]{32})\b
part: body
- type: regex
name: rownd_1
regex:
- >-
(?:rownd).{0,40}\b([a-z0-9]{8}\-[a-z0-9]{4}\-[a-z0-9]{4}\-[a-z0-9]{4}\-[a-z0-9]{12})\b
part: body
- type: regex
name: rownd_2
regex:
- (?:rownd).{0,40}\b([a-z0-9]{48})\b
part: body
- type: regex
name: rownd_3
regex:
- (?:rownd).{0,40}\b([0-9]{18})\b
part: body
- type: regex
name: rubygems
regex:
- \b(rubygems_[a-zA0-9]{48})\b
part: body
- type: regex
name: runrunit_1
regex:
- (?:runrunit).{0,40}\b([0-9a-f]{32})\b
part: body
- type: regex
name: runrunit_2
regex:
- (?:runrunit).{0,40}\b([0-9A-Za-z]{18,20})\b
part: body
- type: regex
name: ssh
regex:
- '-----BEGIN OPENSSH PRIVATE KEY-----'
part: body
- type: regex
name: ssh_dsa_private_key
regex:
- '-----BEGIN DSA PRIVATE KEY-----'
part: body
- type: regex
name: salesblink
regex:
- (?:salesblink).{0,40}\b([a-zA-Z]{16})\b
part: body
- type: regex
name: salescookie
regex:
- (?:salescookie).{0,40}\b([a-zA-z0-9]{32})\b
part: body
- type: regex
name: salesflare
regex:
- (?:salesflare).{0,40}\b([a-zA-Z0-9_]{45})\b
part: body
- type: regex
name: satismeterprojectkey_1
regex:
- >-
(?:satismeter).{0,40}\b([a-zA-Z0-9]{4,20}@[a-zA-Z0-9]{2,12}.[a-zA-Z0-9]{2,12})\b
part: body
- type: regex
name: satismeterprojectkey_2
regex:
- (?:satismeter).{0,40}\b([a-zA-Z0-9]{24})\b
part: body
- type: regex
name: satismeterprojectkey_3
regex:
- (?:satismeter).{0,40}\b([a-zA-Z0-9!=@#$%^]{6,32})
part: body
- type: regex
name: satismeterwritekey
regex:
- (?:satismeter).{0,40}\b([a-z0-9A-Z]{16})\b
part: body
- type: regex
name: saucelabs_1
regex:
- \b(oauth\-[a-z0-9]{8,}\-[a-z0-9]{5})\b
part: body
- type: regex
name: saucelabs_2
regex:
- >-
(?:saucelabs).{0,40}\b([a-z0-9]{8}\-[a-z0-9]{4}\-[a-z0-9]{4}\-[a-z0-9]{4}\-[a-z0-9]{12})\b
part: body
- type: regex
name: scalewaykey
regex:
- >-
(?:scaleway).{0,40}\b([0-9a-z]{8}-[a-z0-9]{4}-[a-z0-9]{4}-[0-9a-z]{4}-[0-9a-z]{12})\b
part: body
- type: regex
name: scrapeowl
regex:
- (?:scrapeowl).{0,40}\b([0-9a-z]{30})\b
part: body
- type: regex
name: scraperapi
regex:
- (?:scraperapi).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: scraperbox
regex:
- (?:scraperbox).{0,40}\b([A-Z0-9]{32})\b
part: body
- type: regex
name: scrapersite
regex:
- (?:scrapersite).{0,40}\b([a-zA-Z0-9]{45})\b
part: body
- type: regex
name: scrapestack
regex:
- (?:scrapestack).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: scrapfly
regex:
- (?:scrapfly).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: scrapingant
regex:
- (?:scrapingant).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: scrapingbee
regex:
- (?:scrapingbee).{0,40}\b([A-Z0-9]{80})\b
part: body
- type: regex
name: screenshotapi
regex:
- >-
(?:screenshotapi).{0,40}\b([0-9A-Z]{7}\-[0-9A-Z]{7}\-[0-9A-Z]{7}\-[0-9A-Z]{7})\b
part: body
- type: regex
name: screenshotlayer
regex:
- (?:screenshotlayer).{0,40}\b([a-zA-Z0-9_]{32})\b
part: body
- type: regex
name: securitytrails
regex:
- (?:securitytrails).{0,40}\b([a-zA-Z0-9]{32})\b
part: body
- type: regex
name: segmentapikey
regex:
- >-
(?:segment).{0,40}\b([A-Za-z0-9_\-a-zA-Z]{43}\.[A-Za-z0-9_\-a-zA-Z]{43})\b
part: body
- type: regex
name: selectpdf
regex:
- (?:selectpdf).{0,40}\b([a-z0-9-]{36})\b
part: body
- type: regex
name: semaphore
regex:
- (?:semaphore).{0,40}\b([0-9a-z]{32})\b
part: body
- type: regex
name: sendgrid_api_key
regex:
- SG\.[\w_]{16,32}\.[\w_]{16,64}
part: body
- type: regex
name: sendbird_1
regex:
- (?:sendbird).{0,40}\b([0-9a-f]{40})\b
part: body
- type: regex
name: sendbird_2
regex:
- >-
(?:sendbird).{0,40}\b([0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12})\b
part: body
- type: regex
name: sendbirdorganizationapi
regex:
- (?:sendbird).{0,40}\b([0-9a-f]{24})\b
part: body
- type: regex
name: sendgrid
regex:
- (?:sendgrid).{0,40}(SG\.[\w\-_]{20,24}\.[\w\-_]{39,50})\b
part: body
- type: regex
name: sendinbluev2
regex:
- \b(xkeysib\-[A-Za-z0-9_-]{81})\b
part: body
- type: regex
name: sentiment_1
regex:
- (?:sentiment).{0,40}\b([0-9]{17})\b
part: body
- type: regex
name: sentiment_2
regex:
- (?:sentiment).{0,40}\b([a-zA-Z0-9]{20})\b
part: body
- type: regex
name: sentrytoken
regex:
- (?:sentry).{0,40}\b([a-f0-9]{64})\b
part: body
- type: regex
name: serphouse
regex:
- (?:serphouse).{0,40}\b([0-9A-Za-z]{60})\b
part: body
- type: regex
name: serpstack
regex:
- (?:serpstack).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: sheety_1
regex:
- (?:sheety).{0,40}\b([0-9a-z]{32})\b
part: body
- type: regex
name: sheety_2
regex:
- (?:sheety).{0,40}\b([0-9a-z]{64})\b
part: body
- type: regex
name: sherpadesk
regex:
- (?:sherpadesk).{0,40}\b([0-9a-z]{32})\b
part: body
- type: regex
name: shipday
regex:
- (?:shipday).{0,40}\b([a-zA-Z0-9.]{11}[a-zA-Z0-9]{20})\b
part: body
- type: regex
name: shodankey
regex:
- (?:shodan).{0,40}\b([a-zA-Z0-9]{32})\b
part: body
- type: regex
name: shopify_access_token
regex:
- shpat_[a-fA-F0-9]{32}
part: body
- type: regex
name: shopify_custom_app_access_token
regex:
- shpca_[a-fA-F0-9]{32}
part: body
- type: regex
name: shopify_private_app_access_token
regex:
- shppa_[a-fA-F0-9]{32}
part: body
- type: regex
name: shopify_shared_secret
regex:
- shpss_[a-fA-F0-9]{32}
part: body
- type: regex
name: shortcut
regex:
- (?:shortcut).{0,40}\b([0-9a-f-]{36})\b
part: body
- type: regex
name: shotstack
regex:
- (?:shotstack).{0,40}\b([a-zA-Z0-9]{40})\b
part: body
- type: regex
name: shutterstockoauth
regex:
- (?:shutterstock).{0,40}\b(v2/[0-9A-Za-z]{388})\b
part: body
- type: regex
name: signalwire_1
regex:
- \b([0-9a-z-]{3,64}.signalwire.com)\b
part: body
- type: regex
name: signalwire_2
regex:
- >-
(?:signalwire).{0,40}\b([0-9a-z]{8}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{12})\b
part: body
- type: regex
name: signalwire_3
regex:
- (?:signalwire).{0,40}\b([0-9A-Za-z]{50})\b
part: body
- type: regex
name: signaturit
regex:
- (?:signaturit).{0,40}\b([0-9A-Za-z]{86})\b
part: body
- type: regex
name: signupgenius
regex:
- (?:signupgenius).{0,40}\b([0-9A-Za-z]{32})\b
part: body
- type: regex
name: sigopt
regex:
- (?:sigopt).{0,40}\b([A-Z0-9]{48})\b
part: body
- type: regex
name: simplesat
regex:
- (?:simplesat).{0,40}\b([a-z0-9]{40})
part: body
- type: regex
name: simplynoted
regex:
- (?:simplynoted).{0,40}\b([a-zA-Z0-9\S]{340,360})\b
part: body
- type: regex
name: simvoly
regex:
- (?:simvoly).{0,40}\b([a-z0-9]{33})\b
part: body
- type: regex
name: sinchmessage
regex:
- (?:sinch).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: sirv_1
regex:
- (?:sirv).{0,40}\b([a-zA-Z0-9\S]{88})
part: body
- type: regex
name: sirv_2
regex:
- (?:sirv).{0,40}\b([a-zA-Z0-9]{26})\b
part: body
- type: regex
name: siteleaf
regex:
- (?:siteleaf).{0,40}\b([0-9Aa-z]{32})\b
part: body
- type: regex
name: skrappio
regex:
- (?:skrapp).{0,40}\b([a-z0-9A-Z]{42})\b
part: body
- type: regex
name: skybiometry
regex:
- (?:skybiometry).{0,40}\b([0-9a-z]{25,26})\b
part: body
- type: regex
name: slack
regex:
- xox[baprs]-[0-9a-zA-Z]{10,48}
part: body
- type: regex
name: slack_token
regex:
- (xox[pborsa]-[0-9]{12}-[0-9]{12}-[0-9]{12}-[a-z0-9]{32})
part: body
- type: regex
name: slack_webhook
regex:
- >-
https://hooks.slack.com/services/T[a-zA-Z0-9_]{8,10}/B[a-zA-Z0-9_]{8,12}/[a-zA-Z0-9_]{23,24}
part: body
- type: regex
name: slack_access_token
regex:
- xoxb-[0-9A-Za-z\-]{51}
part: body
- type: regex
name: slackwebhook
regex:
- (https:\/\/hooks.slack.com\/services\/[A-Za-z0-9+\/]{44,46})
part: body
- type: regex
name: smartsheets
regex:
- (?:smartsheets).{0,40}\b([a-zA-Z0-9]{37})\b
part: body
- type: regex
name: smartystreets_1
regex:
- (?:smartystreets).{0,40}\b([a-zA-Z0-9]{20})\b
part: body
- type: regex
name: smartystreets_2
regex:
- (?:smartystreets).{0,40}\b([a-z0-9-]{36})\b
part: body
- type: regex
name: smooch_1
regex:
- (?:smooch).{0,40}\b(act_[0-9a-z]{24})\b
part: body
- type: regex
name: smooch_2
regex:
- (?:smooch).{0,40}\b([0-9a-zA-Z_-]{86})\b
part: body
- type: regex
name: snipcart
regex:
- (?:snipcart).{0,40}\b([0-9A-Za-z_]{75})\b
part: body
- type: regex
name: snykkey
regex:
- >-
(?:snyk).{0,40}\b([0-9a-z]{8}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{12})\b
part: body
- type: regex
name: sonarqube_token
regex:
- sonar.{0,50}(?:"|'|`)?[0-9a-f]{40}(?:"|'|`)?
part: body
- type: regex
name: splunkobservabilitytoken
regex:
- (?:splunk).{0,40}\b([a-z0-9A-Z]{22})\b
part: body
- type: regex
name: spoonacular
regex:
- (?:spoonacular).{0,40}\b([0-9a-z]{32})\b
part: body
- type: regex
name: sportsmonk
regex:
- (?:sportsmonk).{0,40}\b([0-9a-zA-Z]{60})\b
part: body
- type: regex
name: square
regex:
- (?:square).{0,40}(EAAA[a-zA-Z0-9\-\+\=]{60})
part: body
- type: regex
name: square_oauth_secret
regex:
- sq0csp-[0-9A-Za-z\-_]{43}
part: body
- type: regex
name: square_access_token
regex:
- sq0atp-[0-9A-Za-z\-_]{22}
part: body
- type: regex
name: squareapp_1
regex:
- '[\w\-]*sq0i[a-z]{2}-[0-9A-Za-z\-_]{22,43}'
part: body
- type: regex
name: squareapp_2
regex:
- '[\w\-]*sq0c[a-z]{2}-[0-9A-Za-z\-_]{40,50}'
part: body
- type: regex
name: squarespace
regex:
- >-
(?:squarespace).{0,40}\b([0-9Aa-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\b
part: body
- type: regex
name: squareup
regex:
- \b(sq0idp-[0-9A-Za-z]{22})\b
part: body
- type: regex
name: sslmate
regex:
- (?:sslmate).{0,40}\b([a-zA-Z0-9]{36})\b
part: body
- type: regex
name: stitchdata
regex:
- (?:stitchdata).{0,40}\b([0-9a-z_]{35})\b
part: body
- type: regex
name: stockdata
regex:
- (?:stockdata).{0,40}\b([0-9A-Za-z]{40})\b
part: body
- type: regex
name: storecove
regex:
- (?:storecove).{0,40}\b([a-zA-Z0-9_-]{43})\b
part: body
- type: regex
name: stormglass
regex:
- (?:stormglass).{0,40}\b([0-9Aa-z-]{73})\b
part: body
- type: regex
name: storyblok
regex:
- (?:storyblok).{0,40}\b([0-9A-Za-z]{22}t{2})\b
part: body
- type: regex
name: storychief
regex:
- (?:storychief).{0,40}\b([a-zA-Z0-9_\-.]{940,1000})
part: body
- type: regex
name: strava_1
regex:
- (?:strava).{0,40}\b([0-9]{5})\b
part: body
- type: regex
name: strava_2
regex:
- (?:strava).{0,40}\b([0-9a-z]{40})\b
part: body
- type: regex
name: streak
regex:
- (?:streak).{0,40}\b([0-9Aa-f]{32})\b
part: body
- type: regex
name: stripe
regex:
- '[rs]k_live_[a-zA-Z0-9]{20,30}'
part: body
- type: regex
name: stripe_api_key_1
regex:
- sk_live_[0-9a-zA-Z]{24}
part: body
- type: regex
name: stripe_api_key_2
regex:
- stripe[sr]k_live_[0-9a-zA-Z]{24}
part: body
- type: regex
name: stripe_api_key_3
regex:
- stripe[sk|rk]_live_[0-9a-zA-Z]{24}
part: body
- type: regex
name: stripe_public_live_key
regex:
- pk_live_[0-9a-z]{24}
part: body
- type: regex
name: stripe_public_test_key
regex:
- pk_test_[0-9a-z]{24}
part: body
- type: regex
name: stripe_restriced_key
regex:
- rk_(?:live|test)_[0-9a-zA-Z]{24}
part: body
- type: regex
name: stripe_restricted_api_key
regex:
- rk_live_[0-9a-zA-Z]{24}
part: body
- type: regex
name: stripe_secret_key
regex:
- sk_(?:live|test)_[0-9a-zA-Z]{24}
part: body
- type: regex
name: stripe_secret_live_key
regex:
- (sk|rk)_live_[0-9a-z]{24}
part: body
- type: regex
name: stripe_secret_test_key
regex:
- (sk|rk)_test_[0-9a-z]{24}
part: body
- type: regex
name: stytch_1
regex:
- (?:stytch).{0,40}\b([a-zA-Z0-9-_]{47}=)
part: body
- type: regex
name: stytch_2
regex:
- (?:stytch).{0,40}\b([a-z0-9-]{49})\b
part: body
- type: regex
name: sugester_1
regex:
- (?:sugester).{0,40}\b([a-zA-Z0-9_.!+$#^*%]{3,32})\b
part: body
- type: regex
name: sugester_2
regex:
- (?:sugester).{0,40}\b([a-zA-Z0-9]{32})\b
part: body
- type: regex
name: sumologickey_1
regex:
- (?:sumo).{0,40}\b([A-Za-z0-9]{14})\b
part: body
- type: regex
name: sumologickey_2
regex:
- (?:sumo).{0,40}\b([A-Za-z0-9]{64})\b
part: body
- type: regex
name: supernotesapi
regex:
- (?:supernotes).{0,40}([ \r\n]{0,1}[0-9A-Za-z\-_]{43}[ \r\n]{1})
part: body
- type: regex
name: surveybot
regex:
- (?:surveybot).{0,40}\b([A-Za-z0-9-]{80})\b
part: body
- type: regex
name: surveysparrow
regex:
- (?:surveysparrow).{0,40}\b([a-zA-Z0-9-_]{88})\b
part: body
- type: regex
name: survicate
regex:
- (?:survicate).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: swell_2
regex:
- (?:swell).{0,40}\b([a-zA-Z0-9]{32})\b
part: body
- type: regex
name: swiftype
regex:
- >-
(?:swiftype).{0,40}\b([a-zA-z-0-9]{6}\_[a-zA-z-0-9]{6}\-[a-zA-z-0-9]{6})\b
part: body
- type: regex
name: tallyfy
regex:
- >-
(?:tallyfy).{0,40}\b([0-9A-Za-z]{36}\.[0-9A-Za-z]{264}\.[0-9A-Za-z\-\_]{683})\b
part: body
- type: regex
name: tatumio
regex:
- (?:tatum).{0,40}\b([0-9a-z-]{36})\b
part: body
- type: regex
name: taxjar
regex:
- (?:taxjar).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: teamgate_1
regex:
- (?:teamgate).{0,40}\b([a-z0-9]{40})\b
part: body
- type: regex
name: teamgate_2
regex:
- (?:teamgate).{0,40}\b([a-zA-Z0-9]{80})\b
part: body
- type: regex
name: teamworkcrm
regex:
- >-
(?:teamwork|teamworkcrm).{0,40}\b(tkn\.v1_[0-9A-Za-z]{71}=[
\r\n]{1})
part: body
- type: regex
name: teamworkdesk
regex:
- >-
(?:teamwork|teamworkdesk).{0,40}\b(tkn\.v1_[0-9A-Za-z]{71}=[
\r\n]{1})
part: body
- type: regex
name: teamworkspaces
regex:
- >-
(?:teamwork|teamworkspaces).{0,40}\b(tkn\.v1_[0-9A-Za-z]{71}=[
\r\n]{1})
part: body
- type: regex
name: technicalanalysisapi
regex:
- (?:technicalanalysisapi).{0,40}\b([A-Z0-9]{48})\b
part: body
- type: regex
name: telegram_bot_api_key
regex:
- '[0-9]+:AA[0-9A-Za-z\-_]{33}'
part: body
- type: regex
name: telegram_secret
regex:
- d{5,}:A[0-9a-z_-]{34,34}
part: body
- type: regex
name: telegrambottoken
regex:
- (?:telegram).{0,40}\b([0-9]{8,10}:[a-zA-Z0-9_-]{35})\b
part: body
- type: regex
name: telnyx
regex:
- (?:telnyx).{0,40}\b(KEY[0-9A-Za-z_-]{55})\b
part: body
- type: regex
name: terraformcloudpersonaltoken
regex:
- \b([A-Za-z0-9]{14}.atlasv1.[A-Za-z0-9]{67})\b
part: body
- type: regex
name: text2data
regex:
- >-
(?:text2data).{0,40}\b([0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12})\b
part: body
- type: regex
name: textmagic_1
regex:
- (?:textmagic).{0,40}\b([0-9A-Za-z]{30})\b
part: body
- type: regex
name: textmagic_2
regex:
- (?:textmagic).{0,40}\b([0-9A-Za-z]{1,25})\b
part: body
- type: regex
name: theoddsapi
regex:
- (?:theoddsapi|the-odds-api).{0,40}\b([0-9a-f]{32})\b
part: body
- type: regex
name: thinkific_1
regex:
- (?:thinkific).{0,40}\b([0-9a-f]{32})\b
part: body
- type: regex
name: thinkific_2
regex:
- (?:thinkific).{0,40}\b([0-9A-Za-z]{4,40})\b
part: body
- type: regex
name: thousandeyes_1
regex:
- (?:thousandeyes).{0,40}\b([a-zA-Z0-9]{32})\b
part: body
- type: regex
name: thousandeyes_2
regex:
- >-
(?:thousandeyes).{0,40}\b([a-zA-Z0-9]{3,20}@[a-zA-Z0-9]{2,12}.[a-zA-Z0-9]{2,5})\b
part: body
- type: regex
name: ticketmaster
regex:
- (?:ticketmaster).{0,40}\b([a-zA-Z0-9]{32})\b
part: body
- type: regex
name: tiingo
regex:
- (?:tiingo).{0,40}\b([0-9a-z]{40})\b
part: body
- type: regex
name: timezoneapi
regex:
- (?:timezoneapi).{0,40}\b([a-zA-Z0-9]{20})\b
part: body
- type: regex
name: tly
regex:
- (?:tly).{0,40}\b([0-9A-Za-z]{60})\b
part: body
- type: regex
name: tmetric
regex:
- (?:tmetric).{0,40}\b([0-9A-Z]{64})\b
part: body
- type: regex
name: todoist
regex:
- (?:todoist).{0,40}\b([0-9a-z]{40})\b
part: body
- type: regex
name: toggltrack
regex:
- (?:toggl).{0,40}\b([0-9Aa-z]{32})\b
part: body
- type: regex
name: tomorrowio
regex:
- (?:tomorrow).{0,40}\b([a-zA-Z0-9]{32})\b
part: body
- type: regex
name: tomtom
regex:
- (?:tomtom).{0,40}\b([0-9Aa-zA-Z]{32})\b
part: body
- type: regex
name: tradier
regex:
- (?:tradier).{0,40}\b([a-zA-Z0-9]{28})\b
part: body
- type: regex
name: travelpayouts
regex:
- (?:travelpayouts).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: travisci
regex:
- (?:travis).{0,40}\b([a-zA-Z0-9A-Z_]{22})\b
part: body
- type: regex
name: trello_url
regex:
- https://trello.com/b/[0-9a-z]/[0-9a-z_-]+
part: body
- type: regex
name: trelloapikey_2
regex:
- (?:trello).{0,40}\b([a-zA-Z-0-9]{32})\b
part: body
- type: regex
name: twelvedata
regex:
- (?:twelvedata).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: twilio_1
regex:
- \bAC[0-9a-f]{32}\b
part: body
- type: regex
name: twilio_api_key
regex:
- SK[0-9a-fA-F]{32}
part: body
- type: regex
name: twitter_client_id
regex:
- twitter[0-9a-z]{18,25}
part: body
- type: regex
name: twitter_secret_key
regex:
- twitter[0-9a-z]{35,44}
part: body
- type: regex
name: tyntec
regex:
- (?:tyntec).{0,40}\b([a-zA-Z0-9]{32})\b
part: body
- type: regex
name: typeform
regex:
- (?:typeform).{0,40}\b([0-9A-Za-z]{44})\b
part: body
- type: regex
name: ubidots
regex:
- \b(BBFF-[0-9a-zA-Z]{30})\b
part: body
- type: regex
name: unifyid
regex:
- (?:unify).{0,40}\b([0-9A-Za-z_=-]{44})
part: body
- type: regex
name: unplugg
regex:
- (?:unplu).{0,40}\b([a-z0-9]{64})\b
part: body
- type: regex
name: unsplash
regex:
- (?:unsplash).{0,40}\b([0-9A-Za-z_]{43})\b
part: body
- type: regex
name: upcdatabase
regex:
- (?:upcdatabase).{0,40}\b([A-Z0-9]{32})\b
part: body
- type: regex
name: uplead
regex:
- (?:uplead).{0,40}\b([a-z0-9-]{32})\b
part: body
- type: regex
name: uploadcare
regex:
- (?:uploadcare).{0,40}\b([a-z0-9]{20})\b
part: body
- type: regex
name: upwave
regex:
- (?:upwave).{0,40}\b([0-9a-z]{32})\b
part: body
- type: regex
name: urlscan
regex:
- (?:urlscan).{0,40}\b([a-z0-9-]{36})\b
part: body
- type: regex
name: userstack
regex:
- (?:userstack).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: vatlayer
regex:
- (?:vatlayer).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: vercel
regex:
- (?:vercel).{0,40}\b([a-zA-Z0-9]{24})\b
part: body
- type: regex
name: verifier_1
regex:
- >-
(?:verifier).{0,40}\b([a-zA-Z-0-9-]{5,16}\@[a-zA-Z-0-9]{4,16}\.[a-zA-Z-0-9]{3,6})\b
part: body
- type: regex
name: verifier_2
regex:
- (?:verifier).{0,40}\b([a-z0-9]{96})\b
part: body
- type: regex
name: verimail
regex:
- (?:verimail).{0,40}\b([A-Z0-9]{32})\b
part: body
- type: regex
name: veriphone
regex:
- (?:veriphone).{0,40}\b([0-9A-Z]{32})\b
part: body
- type: regex
name: versioneye
regex:
- (?:versioneye).{0,40}\b([a-zA-Z0-9-]{40})\b
part: body
- type: regex
name: viewneo
regex:
- >-
(?:viewneo).{0,40}\b([a-z0-9A-Z]{120,300}.[a-z0-9A-Z]{150,300}.[a-z0-9A-Z-_]{600,800})
part: body
- type: regex
name: virustotal
regex:
- (?:virustotal).{0,40}\b([a-f0-9]{64})\b
part: body
- type: regex
name: visualcrossing
regex:
- (?:visualcrossing).{0,40}\b([0-9A-Z]{25})\b
part: body
- type: regex
name: voicegain
regex:
- >-
(?:voicegain).{0,40}\b(ey[0-9a-zA-Z_-]{34}.ey[0-9a-zA-Z_-]{108}.[0-9a-zA-Z_-]{43})\b
part: body
- type: regex
name: vouchery_1
regex:
- (?:vouchery).{0,40}\b([a-z0-9-]{36})\b
part: body
- type: regex
name: vouchery_2
regex:
- (?:vouchery).{0,40}\b([a-zA-Z0-9-\S]{2,20})\b
part: body
- type: regex
name: vpnapi
regex:
- (?:vpnapi).{0,40}\b([a-z0-9A-Z]{32})\b
part: body
- type: regex
name: vultrapikey
regex:
- (?:vultr).{0,40} \b([A-Z0-9]{36})\b
part: body
- type: regex
name: vyte
regex:
- (?:vyte).{0,40}\b([0-9a-z]{50})\b
part: body
- type: regex
name: walkscore
regex:
- (?:walkscore).{0,40}\b([0-9a-z]{32})\b
part: body
- type: regex
name: weatherbit
regex:
- (?:weatherbit).{0,40}\b([0-9a-z]{32})\b
part: body
- type: regex
name: weatherstack
regex:
- (?:weatherstack).{0,40}\b([0-9a-z]{32})\b
part: body
- type: regex
name: webex_1
regex:
- (?:error).{0,40}(redirect_uri_mismatch)
part: body
- type: regex
name: webex_2
regex:
- (?:webex).{0,40}\b([A-Za-z0-9_-]{65})\b
part: body
- type: regex
name: webex_3
regex:
- (?:webex).{0,40}\b([A-Za-z0-9_-]{64})\b
part: body
- type: regex
name: webflow
regex:
- (?:webflow).{0,40}\b([a-zA0-9]{64})\b
part: body
- type: regex
name: webscraper
regex:
- (?:webscraper).{0,40}\b([a-zA-Z0-9]{60})\b
part: body
- type: regex
name: webscraping
regex:
- (?:webscraping).{0,40}\b([0-9A-Za-z]{32})\b
part: body
- type: regex
name: wepay_2
regex:
- (?:wepay).{0,40}\b([a-zA-Z0-9_?]{62})\b
part: body
- type: regex
name: whoxy
regex:
- (?:whoxy).{0,40}\b([0-9a-z]{33})\b
part: body
- type: regex
name: worksnaps
regex:
- (?:worksnaps).{0,40}\b([0-9A-Za-z]{40})\b
part: body
- type: regex
name: workstack
regex:
- (?:workstack).{0,40}\b([0-9Aa-zA-Z]{60})\b
part: body
- type: regex
name: worldcoinindex
regex:
- (?:worldcoinindex).{0,40}\b([a-zA-Z0-9]{35})\b
part: body
- type: regex
name: worldweather
regex:
- (?:worldweather).{0,40}\b([0-9a-z]{31})\b
part: body
- type: regex
name: wrike
regex:
- (?:wrike).{0,40}\b(ey[a-zA-Z0-9-._]{333})\b
part: body
- type: regex
name: yandex
regex:
- (?:yandex).{0,40}\b([a-z0-9A-Z.]{83})\b
part: body
- type: regex
name: youneedabudget
regex:
- (?:youneedabudget).{0,40}\b([0-9a-f]{64})\b
part: body
- type: regex
name: yousign
regex:
- (?:yousign).{0,40}\b([0-9a-z]{32})\b
part: body
- type: regex
name: zapierwebhook
regex:
- (https:\/\/hooks.zapier.com\/hooks\/catch\/[A-Za-z0-9\/]{16})
part: body
- type: regex
name: zendeskapi_3
regex:
- (?:zendesk).{0,40}([A-Za-z0-9_-]{40})
part: body
- type: regex
name: zenkitapi
regex:
- (?:zenkit).{0,40}\b([0-9a-z]{8}\-[0-9A-Za-z]{32})\b
part: body
- type: regex
name: zenscrape
regex:
- >-
(?:zenscrape).{0,40}\b([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\b
part: body
- type: regex
name: zenserp
regex:
- (?:zenserp).{0,40}\b([0-9a-z-]{36})\b
part: body
- type: regex
name: zeplin
regex:
- (?:zeplin).{0,40}\b([a-zA-Z0-9-.]{350,400})\b
part: body
- type: regex
name: zerobounce
regex:
- (?:zerobounce).{0,40}\b([a-z0-9]{32})\b
part: body
- type: regex
name: zipapi_1
regex:
- (?:zipapi).{0,40}\b([a-zA-Z0-9!=@#$%^]{7,})
part: body
- type: regex
name: zipapi_3
regex:
- (?:zipapi).{0,40}\b([0-9a-z]{32})\b
part: body
- type: regex
name: zipcodeapi
regex:
- (?:zipcodeapi).{0,40}\b([a-zA-Z0-9]{64})\b
part: body
- type: regex
name: zonkafeedback
regex:
- (?:zonka).{0,40}\b([A-Za-z0-9]{36})\b
part: body
- type: regex
name: amazon_secret_access_key
regex:
- amazon[_-]?secret[_-]?access[_-]?key(=| =|:| :)
part: body
- type: regex
name: ansible_vault_password
regex:
- ansible[_-]?vault[_-]?password(=| =|:| :)
part: body
- type: regex
name: chrome_client_secret
regex:
- chrome[_-]?client[_-]?secret(=| =|:| :)
part: body
- type: regex
name: chrome_refresh_token
regex:
- chrome[_-]?refresh[_-]?token(=| =|:| :)
part: body
- type: regex
name: ci_deploy_password
regex:
- ci[_-]?deploy[_-]?password(=| =|:| :)
part: body
- type: regex
name: ci_project_url
regex:
- ci[_-]?project[_-]?url(=| =|:| :)
part: body
- type: regex
name: ci_registry_user
regex:
- ci[_-]?registry[_-]?user(=| =|:| :)
part: body
- type: regex
name: ci_server_name
regex:
- ci[_-]?server[_-]?name(=| =|:| :)
part: body
- type: regex
name: cloud_api_key
regex:
- cloud[_-]?api[_-]?key(=| =|:| :)
part: body
- type: regex
name: cloudflare_api_key
regex:
- cloudflare[_-]?api[_-]?key(=| =|:| :)
part: body
- type: regex
name: cloudflare_auth_email
regex:
- cloudflare[_-]?auth[_-]?email(=| =|:| :)
part: body
- type: regex
name: consumer_key
regex:
- consumer[_-]?key(=| =|:| :)
part: body
- type: regex
name: database_username
regex:
- database[_-]?username(=| =|:| :)
part: body
- type: regex
name: db_password
regex:
- db[_-]?password(=| =|:| :)
part: body
- type: regex
name: db_pw
regex:
- db[_-]?pw(=| =|:| :)
part: body
- type: regex
name: docker_hub_password
regex:
- docker[_-]?hub[_-]?password(=| =|:| :)
part: body
- type: regex
name: docker_passwd
regex:
- docker[_-]?passwd(=| =|:| :)
part: body
- type: regex
name: docker_password
regex:
- docker[_-]?password(=| =|:| :)
part: body
- type: regex
name: docker_token
regex:
- docker[_-]?token(=| =|:| :)
part: body
- type: regex
name: dockerhub_password
regex:
- dockerhub[_-]?password(=| =|:| :)
part: body
- type: regex
name: doordash_auth_token
regex:
- doordash[_-]?auth[_-]?token(=| =|:| :)
part: body
- type: regex
name: dropbox_oauth_bearer
regex:
- dropbox[_-]?oauth[_-]?bearer(=| =|:| :)
part: body
- type: regex
name: droplet_travis_password
regex:
- droplet[_-]?travis[_-]?password(=| =|:| :)
part: body
- type: regex
name: env_github_oauth_token
regex:
- env[_-]?github[_-]?oauth[_-]?token(=| =|:| :)
part: body
- type: regex
name: env_heroku_api_key
regex:
- env[_-]?heroku[_-]?api[_-]?key(=| =|:| :)
part: body
- type: regex
name: facebook_access_token
regex:
- (EAACEdEose0cBA[0-9A-Za-z]+)
part: body
- type: regex
name: firebase_api_json
regex:
- firebase[_-]?api[_-]?json(=| =|:| :)
part: body
- type: regex
name: firebase_api_token
regex:
- firebase[_-]?api[_-]?token(=| =|:| :)
part: body
- type: regex
name: firebase_key
regex:
- firebase[_-]?key(=| =|:| :)
part: body
- type: regex
name: firebase_token
regex:
- firebase[_-]?token(=| =|:| :)
part: body
- type: regex
name: firefox_secret
regex:
- firefox[_-]?secret(=| =|:| :)
part: body
- type: regex
name: ftp_pw
regex:
- ftp[_-]?pw(=| =|:| :)
part: body
- type: regex
name: gh_api_key
regex:
- gh[_-]?api[_-]?key(=| =|:| :)
part: body
- type: regex
name: github_api_key
regex:
- github[_-]?api[_-]?key(=| =|:| :)
part: body
- type: regex
name: github_oauth
regex:
- github[_-]?oauth(=| =|:| :)
part: body
- type: regex
name: github_token
regex:
- github[_-]?token(=| =|:| :)
part: body
- type: regex
name: github_tokens
regex:
- github[_-]?tokens(=| =|:| :)
part: body
- type: regex
name: google_client_id
regex:
- google[_-]?client[_-]?id(=| =|:| :)
part: body
- type: regex
name: google_client_secret
regex:
- google[_-]?client[_-]?secret(=| =|:| :)
part: body
- type: regex
name: google_maps_api_key
regex:
- google[_-]?maps[_-]?api[_-]?key(=| =|:| :)
part: body
- type: regex
name: google_oauth
regex:
- (ya29.[0-9A-Za-z-_]+)
part: body
- type: regex
name: mailchimp
regex:
- (W(?:[a-f0-9]{32}(-us[0-9]{1,2}))a-zA-Z0-9)
part: body
- type: regex
name: mailgun_priv_key
regex:
- mailgun[_-]?priv[_-]?key(=| =|:| :)
part: body
- type: regex
name: mailgun_secret_api_key
regex:
- mailgun[_-]?secret[_-]?api[_-]?key(=| =|:| :)
part: body
- type: regex
name: master_password
regex:
- (master_password).+
part: body
- type: regex
name: mg_public_api_key
regex:
- mg[_-]?public[_-]?api[_-]?key(=| =|:| :)
part: body
- type: regex
name: mysql_root_password
regex:
- mysql[_-]?root[_-]?password(=| =|:| :)
part: body
- type: regex
name: netlify_api_key
regex:
- netlify[_-]?api[_-]?key(=| =|:| :)
part: body
- type: regex
name: rabbitmq_password
regex:
- rabbitmq[_-]?password(=| =|:| :)
part: body
- type: regex
name: rediscloud_url
regex:
- rediscloud[_-]?url(=| =|:| :)
part: body
- type: regex
name: release_gh_token
regex:
- release[_-]?gh[_-]?token(=| =|:| :)
part: body
- type: regex
name: rubygems_auth_token
regex:
- rubygems[_-]?auth[_-]?token(=| =|:| :)
part: body
- type: regex
name: travis_secure_env_vars
regex:
- travis[_-]?secure[_-]?env[_-]?vars(=| =|:| :)
part: body
- type: regex
name: travis_token
regex:
- travis[_-]?token(=| =|:| :)
part: body
- type: regex
name: twilio_api_key
regex:
- twilio[_-]?api[_-]?key(=| =|:| :)
part: body
- type: regex
name: twilio_api_secret
regex:
- twilio[_-]?api[_-]?secret(=| =|:| :)
part: body
- type: regex
name: twilio_chat_account_api_service
regex:
- twilio[_-]?chat[_-]?account[_-]?api[_-]?service(=| =|:| :)
part: body
- type: regex
name: twilio_token
regex:
- twilio[_-]?token(=| =|:| :)
part: body
- type: regex
name: twitter_consumer_key
regex:
- twitter[_-]?consumer[_-]?key(=| =|:| :)
part: body
- type: regex
name: twitter_consumer_secret
regex:
- twitter[_-]?consumer[_-]?secret(=| =|:| :)
part: body
- type: regex
name: twitteroauthaccesssecret
regex:
- twitteroauthaccesssecret(=| =|:| :)
part: body
- type: regex
name: twitteroauthaccesstoken
regex:
- twitteroauthaccesstoken(=| =|:| :)
part: body
- type: regex
name: urban_master_secret
regex:
- urban[_-]?master[_-]?secret(=| =|:| :)
part: body
- type: regex
name: use_ssh
regex:
- use[_-]?ssh(=| =|:| :)
part: body
- type: regex
name: user_assets_access_key_id
regex:
- user[_-]?assets[_-]?access[_-]?key[_-]?id(=| =|:| :)
part: body
- type: regex
name: virustotal_apikey
regex:
- virustotal[_-]?apikey(=| =|:| :)
part: body
# digest: 490a00463044022073e1bbd0f76b2de5f173ec157570e3cb695cdcd869766e016c36b07f791d4a7002205af4daa53077f262d437409394a250a3702a7b440af6cb4770102822b0491e2d:922c64590222798bb761d5b6d8e72950