Skip to content

Instantly share code, notes, and snippets.

@securibee
Forked from tehryanx/trufflehog.json
Created September 15, 2020 14:51
Show Gist options
  • Save securibee/70596f302a2370b3a2049987406935d1 to your computer and use it in GitHub Desktop.
Save securibee/70596f302a2370b3a2049987406935d1 to your computer and use it in GitHub Desktop.
High signal patterns from trufflehog refactored to work with tomnomnom's gf
{
"flags": "-HnriE",
"patterns": [
"(xox[p|b|o|a]-[0-9]{12}-[0-9]{12}-[0-9]{12}-[a-z0-9]{32})",
"-----BEGIN RSA PRIVATE KEY-----",
"-----BEGIN DSA PRIVATE KEY-----",
"-----BEGIN EC PRIVATE KEY-----",
"-----BEGIN PGP PRIVATE KEY BLOCK-----",
"AKIA[0-9A-Z]{16}",
"amzn\\.mws\\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}",
"AKIA[0-9A-Z]{16}",
"EAACEdEose0cBA[0-9A-Za-z]+",
"[f|F][a|A][c|C][e|E][b|B][o|O][o|O][k|K].*['|\"][0-9a-f]{32}['|\"]",
"[g|G][i|I][t|T][h|H][u|U][b|B].*['|\"][0-9a-zA-Z]{35,40}['|\"]",
"[a|A][p|P][i|I][_]?[k|K][e|E][y|Y].*['|\"][0-9a-zA-Z]{32,45}['|\"]",
"[s|S][e|E][c|C][r|R][e|E][t|T].*['|\"][0-9a-zA-Z]{32,45}['|\"]",
"AIza[0-9A-Za-z\\-_]{35}",
"AIza[0-9A-Za-z\\-_]{35}",
"[0-9]+-[0-9A-Za-z_]{32}\\.apps\\.googleusercontent\\.com",
"AIza[0-9A-Za-z\\-_]{35}",
"[0-9]+-[0-9A-Za-z_]{32}\\.apps\\.googleusercontent\\.com",
"\"type\": \"service_account\"",
"AIza[0-9A-Za-z\\-_]{35}",
"[0-9]+-[0-9A-Za-z_]{32}\\.apps\\.googleusercontent\\.com",
"ya29\\.[0-9A-Za-z\\-_]+",
"AIza[0-9A-Za-z\\-_]{35}",
"[0-9]+-[0-9A-Za-z_]{32}\\.apps\\.googleusercontent\\.com",
"[h|H][e|E][r|R][o|O][k|K][u|U].*[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}",
"[0-9a-f]{32}-us[0-9]{1,2}",
"key-[0-9a-zA-Z]{32}",
"[a-zA-Z]{3,10}://[^/\\s:@]{3,20}:[^/\\s:@]{3,20}@.{1,100}[\"'\\s]",
"access_token\\$production\\$[0-9a-z]{16}\\$[0-9a-f]{32}",
"sk_live_[0-9a-z]{32}",
"https://hooks.slack.com/services/T[a-zA-Z0-9_]{8}/B[a-zA-Z0-9_]{8}/[a-zA-Z0-9_]{24}",
"sk_live_[0-9a-zA-Z]{24}",
"rk_live_[0-9a-zA-Z]{24}",
"sq0atp-[0-9A-Za-z\\-_]{22}",
"sq0csp-[0-9A-Za-z\\-_]{43}",
"SK[0-9a-fA-F]{32}",
"[t|T][w|W][i|I][t|T][t|T][e|E][r|R].*[1-9][0-9]+-[0-9a-zA-Z]{40}",
"[t|T][w|W][i|I][t|T][t|T][e|E][r|R].*['|\"][0-9a-zA-Z]{35,44}['|\"]"
]
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment