forked from mirrors/kingfisher
- Skip reporting MongoDB and Postgres findings when their connection strings cannot be parsed, even when validation is disabled.
- Improve MySQL detection by broadening URI coverage and adding live validation that skips clearly invalid connection strings.
This commit is contained in:
parent
6e0e8fd2c9
commit
f159dac5ab
4 changed files with 12 additions and 7 deletions
|
|
@ -46,6 +46,7 @@ rules:
|
|||
\b
|
||||
adobe
|
||||
(?:.|[\n\r]){0,64}?
|
||||
\b
|
||||
(
|
||||
[a-z0-9]{12}
|
||||
)
|
||||
|
|
|
|||
|
|
@ -49,7 +49,7 @@ rules:
|
|||
(?xi)
|
||||
\b
|
||||
(
|
||||
[a-z0-9-]+
|
||||
[a-z0-9-]{3,32}
|
||||
\.openai\.azure\.com
|
||||
)
|
||||
\b
|
||||
|
|
|
|||
|
|
@ -100,12 +100,12 @@ rules:
|
|||
- name: Grafana Domain
|
||||
id: kingfisher.grafana.4
|
||||
pattern: |
|
||||
(?xi)
|
||||
(?:https?://)?
|
||||
(?:[A-Z0-9-]+\.)*
|
||||
grafana\.[A-Z0-9.-]+
|
||||
(?::\d{2,5})?
|
||||
(?:[/?\#]\S*)?
|
||||
(?xi)
|
||||
(?:https?://)?
|
||||
(?:[A-Z0-9-]+\.){0,32}
|
||||
grafana\.[A-Z0-9.-]{3,32}
|
||||
(?::\d{2,5})?
|
||||
(?:[/?\#]\S*)?
|
||||
min_entropy: 3.0
|
||||
visible: false
|
||||
confidence: medium
|
||||
|
|
|
|||
|
|
@ -10,6 +10,10 @@ rules:
|
|||
:
|
||||
[^\s"'<>,(){}\[\]]{10,448}
|
||||
)
|
||||
pattern_requirements:
|
||||
ignore_if_contains:
|
||||
- "*****"
|
||||
- "xxxxx"
|
||||
min_entropy: 3.3
|
||||
confidence: medium
|
||||
validation:
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue