Skip to content

Instantly share code, notes, and snippets.

@felipecaon

felipecaon/jsluice_rules.json

Last active December 21, 2024 09:13
Show Gist options
  • Save felipecaon/f051fed987ae2af8050f9105acf13b30 to your computer and use it in GitHub Desktop.
Save felipecaon/f051fed987ae2af8050f9105acf13b30 to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. felipecaon revised this gist Sep 13, 2024. 1 changed file with 6540 additions and 6616 deletions.
    13,156 changes: 6,540 additions & 6,616 deletions jsluice_rules.json
    View file
    6,540 additions, 6,616 deletions not shown because the diff is too large. Please use a local Git client to view these changes.
  2. felipecaon revised this gist Jul 19, 2024. 1 changed file with 10 additions and 90 deletions.
    100 changes: 10 additions & 90 deletions jsluice_rules.json
    View file
    Original file line number Diff line number Diff line change
    @@ -172,11 +172,7 @@
    "value": "(?:algolia).{0,40}\\b([a-zA-Z0-9]{32})\\b"
    },
    {
    "name": "Alibaba - 1",
    "value": "\\b([a-zA-Z0-9]{30})\\b"
    },
    {
    "name": "Alibaba - 2",
    "name": "Alibaba",
    "value": "\\b(LTAI[a-zA-Z0-9]{17,21})[\\\"' ;\\s]*"
    },
    {
    @@ -208,13 +204,9 @@
    "value": "(?:amplitude).{0,40}\\b([a-f0-9]{32})"
    },
    {
    "name": "Anypoint - 1",
    "name": "Anypoint",
    "value": "(?:org).{0,40}\\b([0-9a-z]{8}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{12})\\b"
    },
    {
    "name": "Anypoint - 2",
    "value": "\\b([0-9a-z]{8}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{12})\\b"
    },
    {
    "name": "Apacta",
    "value": "(?:apacta).{0,40}\\b([a-z0-9-]{36})\\b"
    @@ -648,11 +640,7 @@
    "value": "(?:clickhelp).{0,40}\\b([0-9A-Za-z]{24})\\b"
    },
    {
    "name": "Clicksendsms - 1",
    "value": "\\b([A-Z0-9]{8}-[A-Z0-9]{4}-[A-Z0-9]{4}-[A-Z0-9]{4}-[A-Z0-9]{12})\\b"
    },
    {
    "name": "Clicksendsms - 2",
    "name": "Clicksendsms",
    "value": "(?:sms).{0,40}\\b([a-zA-Z0-9]{3,20}@[a-zA-Z0-9]{2,12}.[a-zA-Z0-9]{2,5})\\b"
    },
    {
    @@ -700,11 +688,7 @@
    "value": "(?:cloudflare).{0,40}\\b(v[A-Za-z0-9._-]{173,})\\b"
    },
    {
    "name": "Cloudflareglobalapikey - 1",
    "value": "\\b([a-zA-Z0-9+._-]+@[a-zA-Z0-9._-]+\\.[a-zA-Z0-9_-]+)\\b"
    },
    {
    "name": "Cloudflareglobalapikey - 2",
    "name": "Cloudflareglobalapikey",
    "value": "(?:cloudflare).{0,40}([A-Za-z0-9_-]{37})"
    },
    {
    @@ -800,11 +784,7 @@
    "value": "(?:convier).{0,40}\\b([0-9]{2}\\|[a-zA-Z0-9]{40})\\b"
    },
    {
    "name": "Copper - 1",
    "value": "\\b([a-z0-9]{4,25}@[a-zA-Z0-9]{2,12}.[a-zA-Z0-9]{2,6})\\b"
    },
    {
    "name": "Copper - 2",
    "name": "Copper",
    "value": "(?:copper).{0,40}\\b([a-z0-9]{32})\\b"
    },
    {
    @@ -1193,7 +1173,7 @@
    },
    {
    "name": "Flowflu - 1",
    "value": "(?:flowflu|account).{0,40}\\b([a-zA-Z0-9]{4,30})\\b"
    "value": "(?:flowflu).{0,40}\\b([a-zA-Z0-9]{4,30})\\b"
    },
    {
    "name": "Flowflu - 2",
    @@ -1303,10 +1283,6 @@
    "name": "Generic - 1695",
    "value": "(A|a)(P|p)(Ii)[\\-|_|A-Za-z0-9]*(\\''|\")?( )*(:|=)( )*(\\''|\")?[0-9A-Za-z\\-_]+(\\''|\")?"
    },
    {
    "name": "Generic - 1696",
    "value": "(K|k)(E|e)(Y|y)[\\-|_|A-Za-z0-9]*(\\''|\")?( )*(:|=)( )*(\\''|\")?[0-9A-Za-z\\-_]+(\\''|\")?"
    },
    {
    "name": "Generic - 1700",
    "value": "BEGIN OPENSSH PRIVATE KEY"
    @@ -1575,14 +1551,6 @@
    "name": "Generic key",
    "value": "(private|public|api|secret|password|pass|passphrase|access).+(key|token|secret|password).+"
    },
    {
    "name": "Generic secret text",
    "value": "secret.+"
    },
    {
    "name": "Generic token",
    "value": "token.+"
    },
    {
    "name": "Generic webhook secret",
    "value": "(webhook).+(secret|token|key).+"
    @@ -1751,10 +1719,6 @@
    "name": "Groovehq",
    "value": "(?:groove).{0,40}\\b([a-z0-9A-Z]{64})"
    },
    {
    "name": "Guardianapi",
    "value": "\\b([0-9Aa-z]{8}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{12})\\b"
    },
    {
    "name": "Guru - 1",
    "value": "(?:guru).{0,40}\\b([a-zA-Z0-9]{3,20}@[a-zA-Z0-9]{2,12}.[a-zA-Z0-9]{2,5})\\b"
    @@ -2276,13 +2240,9 @@
    "value": "(?:moosend).{0,40}\\b([0-9Aa-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\\b"
    },
    {
    "name": "Mrticktock - 1",
    "name": "Mrticktock ",
    "value": "(?:mrticktock).{0,40}\\b([a-zA-Z0-9!=@#$%()_^]{1,50})"
    },
    {
    "name": "Mrticktock - 2",
    "value": "\\b([a-zA-Z0-9._-]+@[a-zA-Z0-9._-]+\\.[a-z]+)\\b"
    },
    {
    "name": "Myfreshworks - 1",
    "value": "(?:freshworks).{0,40}\\b([a-zA-Z0-9-_]{2,20})\\b"
    @@ -3155,10 +3115,6 @@
    "name": "SonarQube Token",
    "value": "sonar.{0,50}(?:\"|'|`)?[0-9a-f]{40}(?:\"|'|`)?"
    },
    {
    "name": "Sparkpost",
    "value": "\\b([a-zA-Z0-9]{40})\\b"
    },
    {
    "name": "Splunkobservabilitytoken",
    "value": "(?:splunk).{0,40}\\b([a-z0-9A-Z]{22})\\b"
    @@ -3411,10 +3367,6 @@
    "name": "Terraformcloudpersonaltoken",
    "value": "\\b([A-Za-z0-9]{14}.atlasv1.[A-Za-z0-9]{67})\\b"
    },
    {
    "name": "Testdetector",
    "value": "\\b(test)\\b"
    },
    {
    "name": "Text2data",
    "value": "(?:text2data).{0,40}\\b([0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12})\\b"
    @@ -3503,14 +3455,6 @@
    "name": "Trelloapikey - 1",
    "value": "(?:trello).{0,40}\\b([a-zA-Z-0-9]{32})\\b"
    },
    {
    "name": "Tru - 1",
    "value": "(?:tru).{0,40}\\b([0-9a-z]{8}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{12})\\b"
    },
    {
    "name": "Tru - 2",
    "value": "(?:tru).{0,40}\\b([0-9a-zA-Z.-_]{26})\\b"
    },
    {
    "name": "Twelvedata",
    "value": "(?:twelvedata).{0,40}\\b([a-z0-9]{32})\\b"
    @@ -3603,10 +3547,6 @@
    "name": "Vatlayer",
    "value": "(?:vatlayer).{0,40}\\b([a-z0-9]{32})\\b"
    },
    {
    "name": "Vault Token",
    "value": "([sb]\\.[a-zA-Z0-9]{24})"
    },
    {
    "name": "Vercel",
    "value": "(?:vercel).{0,40}\\b([a-zA-Z0-9]{24})\\b"
    @@ -3704,11 +3644,7 @@
    "value": "(?:webscraping).{0,40}\\b([0-9A-Za-z]{32})\\b"
    },
    {
    "name": "Wepay - 1",
    "value": "\\b(\\d{6})\\b"
    },
    {
    "name": "Wepay - 2",
    "name": "Wepay",
    "value": "(?:wepay).{0,40}\\b([a-zA-Z0-9_?]{62})\\b"
    },
    {
    @@ -3769,10 +3705,6 @@
    },
    {
    "name": "Zendeskapi - 2",
    "value": "\\b([a-zA-Z-0-9-]{5,16}\\@[a-zA-Z-0-9]{4,16}\\.[a-zA-Z-0-9]{3,6})\\b"
    },
    {
    "name": "Zendeskapi - 3",
    "value": "(?:zendesk).{0,40}([A-Za-z0-9_-]{40})"
    },
    {
    @@ -3805,7 +3737,7 @@
    },
    {
    "name": "Zipbooks - 1",
    "value": "(?:zipbooks|password).{0,40}\\b([a-zA-Z0-9!=@#$%^]{8,})"
    "value": "(?:zipbooks).{0,40}\\b([a-zA-Z0-9!=@#$%^]{8,})"
    },
    {
    "name": "Zipcodeapi",
    @@ -4783,10 +4715,6 @@
    "name": "gcs_bucket",
    "value": "gcs[_-]?bucket(=| =|:| :)"
    },
    {
    "name": "generic password",
    "value": "password.+"
    },
    {
    "name": "gh_api_key",
    "value": "gh[_-]?api[_-]?key(=| =|:| :)"
    @@ -5508,13 +5436,9 @@
    "value": "npm[_-]?secret[_-]?key(=| =|:| :)"
    },
    {
    "name": "npm_token - 1",
    "name": "npm_token",
    "value": "npm[_-]?token(=| =|:| :)"
    },
    {
    "name": "npm_token - 2",
    "value": "([a-zA-Z0-9]{8}-[a-zA-Z0-9]{4}-[a-zA-Z0-9]{4}-[a-zA-Z0-9]{4}-[a-zA-Z0-9]{12})"
    },
    {
    "name": "nuget_api_key - 1",
    "value": "(oy2[a-z0-9]{43})"
    @@ -6359,10 +6283,6 @@
    "name": "tesco_api_key",
    "value": "tesco[_-]?api[_-]?key(=| =|:| :)"
    },
    {
    "name": "test",
    "value": "test"
    },
    {
    "name": "test_github_token",
    "value": "test[_-]?github[_-]?token(=| =|:| :)"
  3. felipecaon revised this gist Jul 19, 2023. 1 changed file with 0 additions and 4 deletions.
    4 changes: 0 additions & 4 deletions jsluice_rules.json
    View file
    Original file line number Diff line number Diff line change
    @@ -371,10 +371,6 @@
    "name": "Aws - 1",
    "value": "\\b((?:AKIA|ABIA|ACCA|ASIA)[0-9A-Z]{16})\\b"
    },
    {
    "name": "Aws - 2",
    "value": "\\b([A-Za-z0-9+/]{40})\\b"
    },
    {
    "name": "Axonaut",
    "value": "(?:axonaut).{0,40}\\b([a-z0-9]{32})\\b"
  4. felipecaon revised this gist Jul 19, 2023. 1 changed file with 2 additions and 18 deletions.
    20 changes: 2 additions & 18 deletions jsluice_rules.json
    View file
    Original file line number Diff line number Diff line change
    @@ -343,10 +343,6 @@
    "name": "Auth0oauth - 1",
    "value": "(?:auth0).{0,40}\\b([a-zA-Z0-9_-]{32,60})\\b"
    },
    {
    "name": "Auth0oauth - 2",
    "value": "\\b([a-zA-Z0-9_-]{64,})\\b"
    },
    {
    "name": "Autodesk - 1",
    "value": "(?:autodesk).{0,40}\\b([0-9A-Za-z]{32})\\b"
    @@ -1885,7 +1881,7 @@
    },
    {
    "name": "Instagram oauth",
    "value": "[0-9a-fA-F]{7}.[0-9a-fA-F]{32}"
    "value": "[0-9a-fA-F]{7}\\.[0-9a-fA-F]{32}"
    },
    {
    "name": "Integromat",
    @@ -2165,10 +2161,6 @@
    },
    {
    "name": "Mapbox - 1",
    "value": "([a-zA-Z-0-9]{4,32})"
    },
    {
    "name": "Mapbox - 2",
    "value": "\\b(sk\\.[a-zA-Z-0-9\\.]{80,240})\\b"
    },
    {
    @@ -3513,10 +3505,6 @@
    },
    {
    "name": "Trelloapikey - 1",
    "value": "\\b([a-zA-Z-0-9]{64})\\b"
    },
    {
    "name": "Trelloapikey - 2",
    "value": "(?:trello).{0,40}\\b([a-zA-Z-0-9]{32})\\b"
    },
    {
    @@ -4989,7 +4977,7 @@
    },
    {
    "name": "google_cloud_platform_api_key",
    "value": "(v[0-9]\\.)?[0-9a-f]{40}"
    "value": "(v[0-9]\\.)[0-9a-f]{40}"
    },
    {
    "name": "google_maps_api_key",
    @@ -6471,10 +6459,6 @@
    "name": "twine_password",
    "value": "twine[_-]?password(=| =|:| :)"
    },
    {
    "name": "twitter",
    "value": "([a-zA-Z0-9]{1,2}([a-zA-Z0-9]{50})[a-zA-Z0-9]{1,2})"
    },
    {
    "name": "twitter_consumer_key",
    "value": "twitter[_-]?consumer[_-]?key(=| =|:| :)"
  5. felipecaon created this gist Jul 17, 2023.
    6,718 changes: 6,718 additions & 0 deletions jsluice_rules.json
    View file
    6,718 additions, 0 deletions not shown because the diff is too large. Please use a local Git client to view these changes.