Skip to content

Latest commit

 

History

History

RSA Keys

Generic RSA keys

version: v1.2

Comments / Notes:

  • Basic support for hardcoded strings in code with RSA private key

  • Includes keys hardcoded in strings with escaped line breaks

Pattern Format
--BEGIN (?:[A-Z]+ )?PRIVATE KEY--+(\\[nr]|[\r\n])+([a-zA-Z0-9+/=\s]|\\[rn])+(\\[rn]|[\r\n])+--+END (?:[A-Z]+ )?PRIVATE KEY--

SSH Private Keys

version: v0.1

Comments / Notes:

  • SSH Password: MyPassword
Pattern Format
--BEGIN OPENSSH PRIVATE KEY--+[a-zA-Z0-9+/=\s]+--+END OPENSSH PRIVATE KEY--

GPG Private Key

version: v0.1

Pattern Format
--BEGIN PGP PRIVATE KEY BLOCK--+(?:[\r\n]+((Version|Comment|MessageID|Hash|Charset): [^\r\n]+[\r\n]+)+[\r\n]+)?[a-zA-Z0-9+/=\s]+--+END PGP PRIVATE KEY BLOCK--

SSH Public Key

⚠️ WARNING: THIS RULE IS EXPERIMENTAL AND MIGHT CAUSE A HIGH FALSE POSITIVE RATE (test before commiting to org level) ⚠️

version: v0.2

Comments / Notes:

  • SSH Public Key (not a secret)

  • Ignores the name of the public key

Pattern Format
ssh-rsa\s+[a-zA-Z0-9/\+=]{20,}
End Pattern
\z|\s+[a-zA-Z0-9@-]+([\r\n]|\z)