forked from mirrors/kingfisher
455 lines
14 KiB
JSON
455 lines
14 KiB
JSON
{
|
|
"bash:testdata/shell_vulnerable.sh": [
|
|
"IPADDRESS = 8.8.8.8",
|
|
"PASSWORD = s3cr3tp@ssw0rd",
|
|
"PWD = a9lah209la81la3",
|
|
"PASSPHRASE = all along the watchtower",
|
|
"KEY = qpsbnoewdmdsoeg",
|
|
"SECRET_KEY = 402750613792034973",
|
|
"PRIVATE_KEY = ja4wALsaho20af21dS",
|
|
"another_password = blink182",
|
|
"backup_password = letmein123",
|
|
"API_KEY = 932"
|
|
],
|
|
"c:testdata/c_vulnerable.c": [
|
|
"id = 0",
|
|
"secret_key = my voice is my passport",
|
|
"employee_default = 0",
|
|
"employee_default = 8934#@hafRhzj13!d<2$F5q",
|
|
"age = 30",
|
|
"secret_key = John",
|
|
"strdup = John",
|
|
"password = Doe",
|
|
"strdup = Doe",
|
|
"msg = sunshine19",
|
|
"s1 = blink182",
|
|
"printf = values: %s; Age: %u\\n",
|
|
"age = 25",
|
|
"secret_key = 449a@QL#cha0213aKL:HF#@9;+_345Awd",
|
|
"strdup = 449a@QL#cha0213aKL:HF#@9;+_345Awd",
|
|
"printf = values: %s; Age: %u\\n",
|
|
"firstName = Marty",
|
|
"password = McFly",
|
|
"key_id = AKIA6ODU5DHT7VPXGCE4",
|
|
"aws_secret = eD4++rSUVbOmDrRI7EDLmskuwpAAddEA0WNwu+fI",
|
|
"printf = values: %s; Age: %u\\n"
|
|
],
|
|
"c_sharp:testdata/csharp_vulnerable.cs": [
|
|
"user = John",
|
|
"user = Doe",
|
|
"user = john@email.com",
|
|
"User = John",
|
|
"User = Doe",
|
|
"User = john@email.com",
|
|
"John = Doe",
|
|
"FirsName = Bob",
|
|
"ipAddress = 8.8.8.8",
|
|
"String = 8.8.8.8",
|
|
"password = s3cr3tp@ssw0rd",
|
|
"String = s3cr3tp@ssw0rd",
|
|
"passwd = 9043hfdlasf023",
|
|
"String = 9043hfdlasf023",
|
|
"pwd = a9lah209la81la3",
|
|
"String = a9lah209la81la3",
|
|
"password = all along the watchtower",
|
|
"String = all along the watchtower",
|
|
"key = qpsbnoewdmdsoeg",
|
|
"String = qpsbnoewdmdsoeg",
|
|
"secretKey = 402750613792034973",
|
|
"String = 402750613792034973",
|
|
"privateKey = ja4wALsaho20af21dS",
|
|
"String = ja4wALsaho20af21dS",
|
|
"ip = 8.8.8.8",
|
|
"pass = s3cr3tp@ssw0rd 2",
|
|
"password = 9043hfdlasf023",
|
|
"secret = a9lah209la81la3",
|
|
"phrase = all along the watchtower",
|
|
"myKey = qpsbnoewdmdsoeg",
|
|
"secretKey = 402750613792034973",
|
|
"privateKey = ja4wALsaho20af21dS",
|
|
"key_id = AKIA6ODU5DHT7VPXGCE4",
|
|
"aws_secret = eD4++rSUVbOmDrRI7EDLmskuwpAAddEA0WNwu+fI",
|
|
"hidden_passphrase = blink182",
|
|
"escaped = Hello \\\"World\\\"",
|
|
"name = John",
|
|
"firstName = John ",
|
|
"lastName = Doe",
|
|
"score = The score is {0}",
|
|
"score = 42",
|
|
"Format = The score is {0}",
|
|
"Format = 42"
|
|
],
|
|
"cpp:testdata/cpp_vulnerable.cpp": [
|
|
"my_api_key = foo",
|
|
"setMyNum = 15",
|
|
"setMyString = p@ssw0rd123",
|
|
"setSecretKey = 23847601237597123230895",
|
|
"secret_pass = my voice is my passport",
|
|
"temp_password = short line for testing",
|
|
"s5 = 6",
|
|
"s5 = 4",
|
|
"6 = 4",
|
|
"szHackerProof = 15",
|
|
"szHackerProof = *",
|
|
"15 = *",
|
|
"strForFunc = Passing a string"
|
|
],
|
|
"css:testdata/css_vulnerable.css": [
|
|
"password = blink182",
|
|
"background-image = url(",
|
|
"background-image = all-along-the-watchtower",
|
|
"content = abcd1234abcd1234abcd1234abcd1234abcd1234abcd1234abcd1234abcd1234"
|
|
],
|
|
"go:testdata/go_vulnerable.go": [
|
|
"Println = hello world",
|
|
"ipAddress = 8.8.8.8",
|
|
"password = s3cr3tp@ssw0rd",
|
|
"passwd = 9043hfdlasf023",
|
|
"pwd = a9lah209la81la3",
|
|
"passphrase = all along the watchtower",
|
|
"key = qpsbnoewdmdsoeg",
|
|
"secret_key = 402750613792034973",
|
|
"private_key = ja4wALsaho20af21dS",
|
|
"ipAddress = 8.8.8.8",
|
|
"password = s3cr3tp@ssw0rd 2",
|
|
"passwd = 9043hfdlasf023",
|
|
"pwd = a9lah209la81la3",
|
|
"passphrase = all along the watchtower",
|
|
"key = qpsbnoewdmdsoeg",
|
|
"secret_key = 402750613792034973",
|
|
"private_key = ja4wALsaho20af21dS",
|
|
"ipAddress = 1a2w3eqwerty",
|
|
"password = space2001",
|
|
"passwd = space1958",
|
|
"pwd = qwertyuiop123",
|
|
"passphrase = trustno1",
|
|
"key_id = AKIA6ODU5DHT7VPXGCE4",
|
|
"aws_secret = eD4++rSUVbOmDrRI7EDLmskuwpAAddEA0WNwu+fI",
|
|
"hidden_passphrase = blink182",
|
|
"badPassword = sunshine123",
|
|
"goodPassword = kingpin987",
|
|
"bestPassword = kingpin987",
|
|
"Printf = %s %s %s %s %s %s %s %s",
|
|
"AccessKey = 924JSR1PGW2D4MNRZX45",
|
|
"SecretKey = wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY",
|
|
"Println = >>done<<"
|
|
],
|
|
"html:testdata/html_embedded_vulnerable.html": [
|
|
"content = abcd1234abcd1234abcd1234abcd1234abcd1234abcd1234abcd1234abcd1234",
|
|
"auth0_client_secret = abcd1234abcd1234abcd1234abcd1234abcd1234abcd1234abcd1234abcd1234",
|
|
"password = superSecret123"
|
|
],
|
|
"html:testdata/html_vulnerable.html": [
|
|
"html = hunter2",
|
|
"data-api-key = html-key-123",
|
|
"secret_key = all along the watchtower",
|
|
"body = hunter2",
|
|
"password = blink182",
|
|
"div = hunter2",
|
|
"name = auth0_client_secret",
|
|
"content = abcd1234abcd1234abcd1234abcd1234abcd1234abcd1234abcd1234abcd1234"
|
|
],
|
|
"java:testdata/java_vulnerable.java": [
|
|
"ipAddress = 8.8.8.8",
|
|
"String = 8.8.8.8",
|
|
"password = s3cr3tp@ssw0rd",
|
|
"String = s3cr3tp@ssw0rd",
|
|
"passwd = 9043hfdlasf023",
|
|
"String = 9043hfdlasf023",
|
|
"pwd = a9lah209la81la3",
|
|
"String = a9lah209la81la3",
|
|
"passphrase = all along the watchtower",
|
|
"String = all along the watchtower",
|
|
"key = qpsbnoewdmdsoeg",
|
|
"String = qpsbnoewdmdsoeg",
|
|
"secret_key = 402750613792034973",
|
|
"String = 402750613792034973",
|
|
"private_key = ja4wALsaho20af21dS",
|
|
"String = ja4wALsaho20af21dS",
|
|
"ipAddress = 8.8.8.8",
|
|
"password = s3cr3tp@ssw0rd 2",
|
|
"passwd = 9043hfdlasf023",
|
|
"pwd = a9lah209la81la3",
|
|
"passphrase = all along the watchtower",
|
|
"key = qpsbnoewdmdsoeg",
|
|
"secret_key = 402750613792034973",
|
|
"private_key = ja4wALsaho20af21dS",
|
|
"ipAddress = 1a2w3eqwerty",
|
|
"password = grape1999",
|
|
"passwd = grape2020",
|
|
"pwd = qwertyuiop123",
|
|
"passphrase = trustno1",
|
|
"key_id = AKIA6ODU5DHT7VPXGCE4",
|
|
"aws_secret = eD4++rSUVbOmDrRI7EDLmskuwpAAddEA0WNwu+fI",
|
|
"hidden_passphrase = blink182",
|
|
"println = Hello, World",
|
|
"strPassword = sunshine123",
|
|
"foobarPassword = kingpin987",
|
|
"horsePassword = kingpin987",
|
|
"ipAddress = 8.8.8.8",
|
|
"String = 8.8.8.8",
|
|
"password = s3cr3tp@ssw0rd",
|
|
"String = s3cr3tp@ssw0rd",
|
|
"passwd = 9043hfdlasf023",
|
|
"String = 9043hfdlasf023",
|
|
"pwd = a9lah209la81la3",
|
|
"String = a9lah209la81la3",
|
|
"passphrase = all along the watchtower",
|
|
"String = all along the watchtower",
|
|
"key = qpsbnoewdmdsoeg",
|
|
"String = qpsbnoewdmdsoeg",
|
|
"secret_key = 402750613792034973",
|
|
"String = 402750613792034973",
|
|
"private_key = ja4wALsaho20af21dS",
|
|
"String = ja4wALsaho20af21dS",
|
|
"ipAddress = 8.8.8.8",
|
|
"password = s3cr3tp@ssw0rd 2",
|
|
"passwd = 9043hfdlasf023",
|
|
"pwd = a9lah209la81la3",
|
|
"passphrase = all along the watchtower",
|
|
"key = qpsbnoewdmdsoeg",
|
|
"secret_key = 402750613792034973",
|
|
"private_key = ja4wALsaho20af21dS",
|
|
"ipAddress = 1a2w3eqwerty",
|
|
"password = grape87",
|
|
"passwd = grape2020",
|
|
"pwd = qwertyuiop123",
|
|
"passphrase = trustno1",
|
|
"println = Hello, World",
|
|
"put = 412389uSwYkRm1Tg!",
|
|
"put = fakefakefake@contoso.com",
|
|
"println = InitialDirContext"
|
|
],
|
|
"javascript:testdata/javascript_vulnerable.js": [
|
|
"name = chris",
|
|
"password = hunter2",
|
|
"password = foo123",
|
|
"person = Bob Doe",
|
|
"carName = Buick",
|
|
"price = 300",
|
|
"person = Bob Doe",
|
|
"person = Buick",
|
|
"person = 300",
|
|
"password = qwerty123",
|
|
"secret_key = this is a secret key",
|
|
"person = John Doe",
|
|
"person = John Doe",
|
|
"carName = Volvo",
|
|
"carName = Volvo",
|
|
"price = 200",
|
|
"this_password = correct horse battery staple",
|
|
"foobaz = 75",
|
|
"number = 42",
|
|
"newpassword = sunshine123",
|
|
"key_id = AKIA6ODU5DHT7VPXGCE4",
|
|
"aws_secret = eD4++rSUVbOmDrRI7EDLmskuwpAAddEA0WNwu+fI",
|
|
"hidden_passphrase = blink182"
|
|
],
|
|
"php:testdata/php_vulnerable.php": [
|
|
"id = 4",
|
|
"lang = grape123",
|
|
"password = this_is_my_passport",
|
|
"v = Berne",
|
|
"v = Berne",
|
|
"v = Zurich1",
|
|
"api_key = 9823yrdfijo239jd3wsad30dj2d",
|
|
"v = trustno1",
|
|
"v = Genf",
|
|
"v = Geneva",
|
|
"v = Genève",
|
|
"property1 = Value 1",
|
|
"property2 = Value 2",
|
|
"property1 = property2",
|
|
"password = kingpin987",
|
|
"set_password = hunter2",
|
|
"set_color = Red",
|
|
"location = Essex",
|
|
"key_id = AKIA6ODU5DHT7VPXGCE4",
|
|
"aws_secret = eD4++rSUVbOmDrRI7EDLmskuwpAAddEA0WNwu+fI",
|
|
"hidden_passphrase = blink182",
|
|
"sql = SELECT name, email FROM users WHERE id=$id",
|
|
"sql = SELECT name, email FROM users WHERE id=$id",
|
|
"color = beige",
|
|
"color = blue",
|
|
"comp = BMW",
|
|
"comp = Mercedes Benz"
|
|
],
|
|
"python:testdata/parsers/comment_only_context.py": [],
|
|
"python:testdata/python_vulnerable.py": [
|
|
"staticGroupID = 0",
|
|
"customClassUser = this_is_a_user_id",
|
|
"customClassPassword = rJl8QgApOjNfEiMWQUR",
|
|
"Accept = application/json",
|
|
"password = thisisabadpassword",
|
|
"print = Welcome to this demo program",
|
|
"default_password = qwerty123",
|
|
"AppPassword = b12c789b123bn12389",
|
|
"NotAnything = 12i7128931238912739712893",
|
|
"PleaseNoFalsePostive = joe123",
|
|
"another_password = blink182",
|
|
"another_password_again = blink182",
|
|
"backup_password = letmein123",
|
|
"name = Peter",
|
|
"age = 23",
|
|
"print = %s is %d years old",
|
|
"print = {} is {} years old",
|
|
"print = {name} is {age} years old",
|
|
"pypi_value_01 = pypi-AgEIcHlwaS5vcmcCAWEAAAYgNh9pJUqVF-EtMCwGaZYcStFR07RbE8hyb9h2vYxifO8",
|
|
"pypi_value_02 = pypi-AgEIcHlwaS5vcmcCAWIAAAYgxbyLvb9egSCECeOdB3qW3h4oXEoNC6kJI0NtaFOQlUY",
|
|
"pypi_value_03 = pypi-AgEIcHlwaS5vcmcCAWIAAAYgf_d_XvJfqkOhrkqbEBo-eW9UID46ABNJIdGfaO3n3_k",
|
|
"pypi_value_04 = pypi-AgEIcHlwaS5vcmcCAWIAAiV7InZlcnNpb24iOiAxLCAicGVybWlzc2lvbnMiOiAidXNlciJ9AAAGIBeIJGhXk8kPPref7vLuwlKbnSWusZKZivIh92GRUUX4",
|
|
"pypi_value_05 = pypi-AgEIcHlwaS5vcmcCAWIAAi97InZlcnNpb24iOiAxLCAicGVybWlzc2lvbnMiOiB7InByb2plY3RzIjogW119fQAABiBWHBa1jsbY-iN-Swf3JCrxy8Q8eRCxMrc_1KkkDuB6KQ",
|
|
"pypi_value_06 = pypi-AgENdGVzdC5weXBpLm9yZwIBYgACL3sidmVyc2lvbiI6IDEsICJwZXJtaXNzaW9ucyI6IHsicHJvamVjdHMiOiBbXX19AAAGIFYcFrWOxtj6I35LB_ckKvHLxDx5ELEytz_UqSQO4Hop"
|
|
],
|
|
"ruby:testdata/ruby_vulnerable.rb": [
|
|
"my_name = Roger Rabbit",
|
|
"my_number = 27",
|
|
"foo = My name is #{my_name} and my favorite number is #{my_number}.",
|
|
"foo = My name is #{my_name} and my favorite number is #{my_number}.",
|
|
"password = My voice is my passport:",
|
|
"password = Verify me ",
|
|
"password = MongoDB123",
|
|
"concat = Mongo",
|
|
"concat = DB",
|
|
"this_number = 23",
|
|
"this_word = rolling stone",
|
|
"aUser = Bicylops",
|
|
"aUser = Fleck",
|
|
"aUser = 260",
|
|
"aUser = Bicylops",
|
|
"aUser = Fleck",
|
|
"aUser = 260",
|
|
"new = Bicylops",
|
|
"new = Fleck",
|
|
"new = 260",
|
|
"Bicylops = Fleck",
|
|
"password = , ",
|
|
"password = , ",
|
|
"password = 123",
|
|
"send = password=",
|
|
"send = secret123",
|
|
"password= = secret123",
|
|
"my_api_key = 1",
|
|
"my_api_key = 1",
|
|
"my_api_key = SGwJgqnZYzH945UBWnauBuKXKLEhq5Le",
|
|
"my_api_key = 3",
|
|
"bVal = 88df97769ab3185f2c0b2a73fdae1b27d89409ca",
|
|
"bVal = 88df97769ab3185f2c0b2a73fdae1b27d89409ca",
|
|
"bVal = 3",
|
|
"bVal = car",
|
|
"GITHUB_KEY = 17df97169af3785f2c0b2a73dhba1c46f33928de",
|
|
"GITHUB_CLIENT_ID = Iv1.3e3354ce147fd412",
|
|
"GITHUB_APP_SECRET = 895b1da4051440395f90e1411c4a1150e423c922",
|
|
"key_id = AKIA6ODU5DHT7VPXGCE4",
|
|
"aws_secret = eD4++rSUVbOmDrRI7EDLmskuwpAAddEA0WNwu+fI",
|
|
"hidden_passphrase = blink182"
|
|
],
|
|
"rust:testdata/rust_vulnerable.rs": [
|
|
"user = John",
|
|
"user = Doe",
|
|
"user = john@email.com",
|
|
"new = John",
|
|
"new = Doe",
|
|
"new = john@email.com",
|
|
"John = Doe",
|
|
"first_name = Bob",
|
|
"from = Bob",
|
|
"ip = 8.8.8.8",
|
|
"str = 8.8.8.8",
|
|
"pass = s3cr3tp@ssw0rd 2",
|
|
"str = s3cr3tp@ssw0rd 2",
|
|
"api_key = Hello \\\"World\\\"",
|
|
"str = Hello \\\"World\\\"",
|
|
"multiline = This is a \\nmultiline string literal",
|
|
"str = This is a \\nmultiline string literal",
|
|
"key_id = AKIA6ODU5DHT7VPXGCE4",
|
|
"str = AKIA6ODU5DHT7VPXGCE4",
|
|
"aws_secret = eD4++rSUVbOmDrRI7EDLmskuwpAAddEA0WNwu+fI",
|
|
"str = eD4++rSUVbOmDrRI7EDLmskuwpAAddEA0WNwu+fI",
|
|
"hidden_passphrase = blink182",
|
|
"str = blink182",
|
|
"name = John",
|
|
"str = John",
|
|
"first_name = John ",
|
|
"str = John ",
|
|
"last_name = Doe",
|
|
"str = Doe"
|
|
],
|
|
"toml:testdata/toml_vulnerable.toml": [
|
|
"name = vvp.auth.oidc.registration.clientSecret",
|
|
"valueFrom.secretKeyRef.name = mysecrets",
|
|
"valueFrom.secretKeyRef.key = oidc",
|
|
"name = spring.datasource.password",
|
|
"valueFrom.secretKeyRef.name = mysecrets",
|
|
"valueFrom.secretKeyRef.key = jdbc",
|
|
"name = vvp.auth.bootstrapToken.token",
|
|
"valueFrom.secretKeyRef.name = mysecrets",
|
|
"valueFrom.secretKeyRef.key = blink182",
|
|
"private_key = all along the watchtower",
|
|
"my_private_key = ja4wALsaho20af21dS",
|
|
"kind = Opaque",
|
|
"password = dG9wLVNlY3JldA==",
|
|
"jdbc = dG9wLVNlY3JldA==",
|
|
"my_unique_authorization_key = dG9wLVNlY3JldA==",
|
|
"aws_key_id = AKIA6ODU5DHT7VPXGCE4",
|
|
"aws_secret = eD4++rSUVbOmDrRI7EDLmskuwpAAddEA0WNwu+fI"
|
|
],
|
|
"typescript:testdata/typescript_vulnerable.ts": [
|
|
"say = a bird in hand > two in the bush",
|
|
"html = <div> I would just like to say : ${say}</div>",
|
|
"bob_password = allthesecretsarehere",
|
|
"sally_password = superSecret123",
|
|
"i = 0",
|
|
"i = 0",
|
|
"i = +",
|
|
"i = +",
|
|
"for = 0",
|
|
"for = +",
|
|
"for = +",
|
|
"0 = +",
|
|
"replace = &",
|
|
"replace = /g, ",
|
|
"replace = 39",
|
|
"replace = <",
|
|
"replace = >",
|
|
"result = -",
|
|
"result = 1",
|
|
"password = chicken",
|
|
"person = Bob Doe",
|
|
"carName = Buick",
|
|
"price = 300",
|
|
"person = Bob Doe",
|
|
"person = Buick",
|
|
"person = 300",
|
|
"password = qwerty123",
|
|
"secret_key = this is a secret key",
|
|
"person = John Doe",
|
|
"person = John Doe",
|
|
"carName = Volvo",
|
|
"carName = Volvo",
|
|
"price = 200",
|
|
"this_password = correct horse battery staple",
|
|
"newpassword = sunshine123"
|
|
],
|
|
"yaml:testdata/yaml_vulnerable.yaml": [
|
|
"name = vvp.auth.oidc.registration.clientSecret",
|
|
"name = mysecrets",
|
|
"key = oidc",
|
|
"name = spring.datasource.password",
|
|
"name = mysecrets",
|
|
"key = jdbc",
|
|
"name = vvp.auth.bootstrapToken.token",
|
|
"name = mysecrets",
|
|
"key = blink182",
|
|
"apiVersion = v1",
|
|
"kind = Secret",
|
|
"private_key = all along the watchtower",
|
|
"my_private_key = ja4wALsaho20af21dS",
|
|
"type = Opaque",
|
|
"password = dG9wLVNlY3JldA==",
|
|
"jdbc = dG9wLVNlY3JldA==",
|
|
"my_unique_authorization_key = dG9wLVNlY3JldA==",
|
|
"aws_key_id = AKIA6ODU5DHT7VPXGCE4",
|
|
"aws_secret = eD4++rSUVbOmDrRI7EDLmskuwpAAddEA0WNwu+fI"
|
|
]
|
|
}
|