diff --git a/file/js/js-analyse.yaml b/file/js/js-analyse.yaml index 4730f4e553..7a26564911 100644 --- a/file/js/js-analyse.yaml +++ b/file/js/js-analyse.yaml @@ -31,8 +31,66 @@ file: name: extracted-uri regex: - "(?i)([a-z]{2,10}):(//|/)[a-z0-9\\./?&-_=:]+" + - type: regex - name: AMAZON-ACCES-KEY + name: amazon-access-key regex: - "(?i)(A3T[A-Z0-9]|AKIA|AGPA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}" -# digest: 4a0a0047304502200738658ef4985c1261c662fd545a23504b402343ad994af584866d74d37e11ac022100c8213e439b8a574bee55ce0881363c0964830df8255bcd89249d37a778f038ba:922c64590222798bb761d5b6d8e72950 \ No newline at end of file + + - type: regex + name: amazon-s3-url + regex: + - "(?i)([a-z0-9_\\-\\.]+\\.s3\\.amazonaws\\.com)" + - "(?i)([a-z0-9\\.-]+\\.s3-[a-z0-9-\\.]+\\.amazonaws\\.com)" + - "(?i)[a-z0-9\\.-]+\\.s3-website[\\.-](eu|ap|us|ca|sa|cn)" + - "(?i)(s3://[a-z0-9_\\-\\./]+)" + - "(?i)(s3\\.amazonaws\\.com/[a-z0-9/_\\-\\.]+)" + - "(?i)(s3\\.console\\.aws\\.com/s3/buckets/[a-z0-9/_\\-\\.]+)" + - "(?i)(s3-[a-z0-9-\\.]\\.amazonaws\\.com/[a-z0-9/_\\-\\.]+)" + + - type: regex + name: github-personal-access-token + regex: + - "(?i)(ghp_[a-z0-9]{36}|github_pat_[a-z0-9]{82})" + + - type: regex + name: github-oauth-access-token + regex: + - "(?i)(gho_[a-zA-Z0-9]{36})" + + - type: regex + name: github-app-token + regex: + - "\b((?:ghu|ghs)_[a-zA-Z0-9]{36})\b" + + - type: regex + name: authorization-basic + regex: + - "(?i)(Authorization:\\sbasic\\s+[a-z0-9=:_\\-+/]{5,100})" + + - type: regex + name: authorization-bearer + regex: + - "(?i)(Authorization:\\sbearer\\s+[a-z0-9=:_\\-\\.+/]{5,100})" + + - type: regex + name: rsa-private-key + regex: + - "(?i)(-----BEGIN RSA PRIVATE KEY-----)" + + - type: regex + name: ssh-dsa-private-key + regex: + - "(?i)(-----BEGIN DSA PRIVATE KEY-----)" + + - type: regex + name: ssh-ec-private-key + regex: + - "(?i)(-----BEGIN EC PRIVATE KEY-----)" + + - type: regex + name: potential-ajax-request + regex: + - "(?i)(new\\s+xmlhttprequest\\(\\)|\\$\\.ajax\\(\\{)" + +# digest: 4a0a0047304502200738658ef4985c1261c662fd545a23504b402343ad994af584866d74d37e11ac022100c8213e439b8a574bee55ce0881363c0964830df8255bcd89249d37a778f038ba:922c64590222798bb761d5b6d8e72950