Enhancement: file/keys/amazon/amazon-session-token.yaml by md

patch-1
MostInterestingBotInTheWorld 2023-05-04 12:28:46 -04:00
parent accb8cbfbf
commit aa23cf0870
1 changed files with 9 additions and 2 deletions

View File

@ -1,11 +1,16 @@
id: amazon-session-token
info:
name: Amazon Session Token
name: Amazon Session Token - Detect
author: DhiyaneshDK
severity: info
description: Amazon session token was detected.
reference:
- https://github.com/praetorian-inc/noseyparker/blob/main/data/default/rules/aws.yml
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
cvss-score: 0.0
cwe-id: CWE-200
metadata:
verified: "true"
tags: aws,amazon,token,file,session
@ -18,4 +23,6 @@ file:
- type: regex
part: body
regex:
- '(?i)(?:aws.?session|aws.?session.?token|aws.?token)["''`]?\s{0,30}(?::|=>|=)\s{0,30}["''`]?([a-z0-9/+=]{16,200})[^a-z0-9/+=]'
- '(?i)(?:aws.?session|aws.?session.?token|aws.?token)["''`]?\s{0,30}(?::|=>|=)\s{0,30}["''`]?([a-z0-9/+=]{16,200})[^a-z0-9/+=]'
# Enhanced by md on 2023/05/04