kingfisher/data/rules/uri.yml
2025-06-24 17:17:16 -07:00

31 lines
800 B
YAML

rules:
- name: URI with Username and Secret
id: kingfisher.uri.1
pattern: |
(?xi)
(https?)://
[a-z][a-z0-9+\-.]*
:
[a-z0-9\-._~%!$&'()*,;=]+
@
(?:[a-z0-9\-._~%]+|\[[a-f0-9:.]+\]|\[v[a-f0-9][a-z0-9\-._~%!$&'()*,;=:]+\])
(:?[0-9]+)?
(?:/[a-z0-9\-._~%!$&'()*,;=:@]*)* # Match path
/?
(?:\?[a-z0-9\-._~%!$&'()*,;=:@/?]*)?
(?:\#[a-z0-9\-._~%!$&'()*,;=:@/?]*)?
min_entropy: 4.0
confidence: medium
examples:
- https://username:secret@example.com/path
validation:
type: Http
content:
request:
method: GET
url: '{{ TOKEN }}'
response_matcher:
- report_response: true
type: StatusMatch
status:
- 200