kingfisher/crates/kingfisher-rules/data/rules/detectify.yml
2026-04-14 22:56:19 -07:00

37 lines
937 B
YAML

rules:
- name: Detectify API Key
id: kingfisher.detectify.1
pattern: |
(?xi)
\b
detectify
(?:.|[\n\r]){0,32}?
(?:API[_-]?KEY|SECRET|TOKEN|KEY)
(?:.|[\n\r]){0,16}?
\b
(
[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}
)
\b
pattern_requirements:
min_digits: 4
min_entropy: 3.5
confidence: medium
examples:
- 'DETECTIFY_API_KEY=2230dbea-051a-47f1-bc1d-c1b73b609420'
references:
- https://developer.detectify.com/
validation:
type: Http
content:
request:
method: GET
url: https://api.detectify.com/rest/v3/ips?limit=1
headers:
Accept: application/json
Authorization: "{{ TOKEN }}"
response_matcher:
- report_response: true
- type: StatusMatch
status: [200]
- type: JsonValid