forked from mirrors/kingfisher
28 lines
709 B
YAML
28 lines
709 B
YAML
rules:
|
|
- name: IBM DB2 / AS400 Credentials
|
|
id: kingfisher.db2.1
|
|
pattern: |
|
|
(?xi)
|
|
\b
|
|
(?:db2|as400)
|
|
(?:.|[\n\r]){0,64}?
|
|
\b(?:password|passwd|pass|pwd)\b
|
|
(?:.|[\n\r]){0,16}?
|
|
[=:"'\s]
|
|
['"]*
|
|
(
|
|
[^\s"']{6,128}
|
|
)
|
|
['"\s]
|
|
pattern_requirements:
|
|
min_digits: 1
|
|
min_entropy: 2.8
|
|
confidence: medium
|
|
examples:
|
|
- "db2.password=mY5ecureP4ss\n"
|
|
- "db.url=jdbc:db2://db.example.com/dev\ndb.password=sup3rs3cr3t\n"
|
|
- "as400.pass=r4ndP@ssw0rd\n"
|
|
references:
|
|
- https://www.ibm.com/products/db2
|
|
# No public validation endpoint: DB2 is self-hosted;
|
|
# the host and port are instance-specific.
|