Skip to content

Instantly share code, notes, and snippets.

@ncoblentz
Created December 6, 2024 14:56
Show Gist options
  • Save ncoblentz/dd8ea75fba52746a2cb8bfdff405c4b7 to your computer and use it in GitHub Desktop.
Save ncoblentz/dd8ea75fba52746a2cb8bfdff405c4b7 to your computer and use it in GitHub Desktop.
Sensitive Discoverer Rules.json
[{
"description": "Encapsulation boundary for data such as keys and certificates",
"regex": "-----BEGIN",
"sections": ["res_headers", "res_body"]
}, {
"description": "Generic API Key",
"regex": "(?i)api.{0,5}key[^&|;?,]{0,32}?['\\\"][a-zA-Z0-9_\\-+=\\/\\\\]{10,}['\\\"]",
"sections": ["res_headers", "res_body"]
}, {
"description": "Generic Secret",
"regex": "(?i)secret[^&|;?,]{0,32}?['\\\"][a-zA-Z0-9_\\-+=\\/\\\\]{10,}['\\\"]",
"sections": ["res_headers", "res_body"]
}, {
"description": "Environment configuration file",
"regex": "\\.env",
"sections": ["res_headers", "res_body"]
}, {
"description": "Private IPv4 address",
"regex": "1(0(\\.[0-2]\\d{0,2}){3}|27(\\.[0-2]\\d{0,2}){3}|92\\.168(\\.[0-2]\\d{0,2}){2}|72\\.(1[6-9]|2\\d|3[0-2])(\\.[0-2]\\d{0,2}){2})(?![\\d.])",
"sections": ["res_headers", "res_body"]
}, {
"description": "Email",
"regex": "[a-zA-Z0-9]@[a-zA-Z0-9\\-\\.]{3,128}\\.[a-zA-Z0-9]{2,32}(?![\\w\\\\])",
"refinerRegex": "[\\w\\-\\.+]{1,128}$",
"sections": ["res_headers", "res_body"]
}, {
"description": "AWS Access Key ID",
"regex": "A(BIA|CCA|GPA|I(DA|PA)|KIA|N(PA|VA)|PKA|ROA|S(CA|IA))[a-zA-Z0-9]{16,17}(?![a-zA-Z0-9+/=])",
"sections": ["res_headers", "res_body"]
}, {
"description": "AWS Secret Access Key",
"regex": "(?i)aws([^;]{0,32}?)['\"][0-9a-zA-Z/+=]{40}['\"]",
"sections": ["res_headers", "res_body"]
}, {
"description": "Amazon MWS Auth Token",
"regex": "(?i)amzn\\.mws\\.[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}",
"sections": ["res_headers", "res_body"]
}, {
"description": "Google API Key",
"regex": "AIza[0-9A-Za-z\\-_]{35}",
"sections": ["res_headers", "res_body"]
}, {
"description": "Google OAuth Access Token",
"regex": "ya29\\.[0-9A-Za-z\\-_]{32,48}",
"sections": ["res_headers", "res_body"]
}, {
"description": "Google OAuth Client ID",
"regex": "\\.apps\\.googleusercontent\\.com",
"refinerRegex": "\\d{1,20}-\\w{32}$",
"sections": ["res_headers", "res_body"]
}, {
"description": "Google OAuth Client Secret",
"regex": "GOCSPX-[0-9a-zA-Z\\-_]{28}",
"sections": ["res_headers", "res_body"]
}, {
"description": "MailGun API Key",
"regex": "key-[0-9a-f]{32}(?!\\w)",
"sections": ["res_headers", "res_body"]
}, {
"description": "NuGet API Key",
"regex": "oy2[a-z0-9]{43}(?![a-z0-9])",
"sections": ["res_headers", "res_body"]
}, {
"description": "SendGrid API Key",
"regex": "SG\\.[0-9A-Za-z\\-_]{22}\\.[0-9A-Za-z\\-_]{43}",
"sections": ["res_headers", "res_body"]
}, {
"description": "Slack Token",
"regex": "x(ox[psboare]|app)(-[a-zA-Z0-9]{1,64}){1,5}",
"refinerRegex": "xoxe\\.$",
"sections": ["res_headers", "res_body"]
}, {
"description": "Square Token",
"regex": "sq0(atp|csp|idp)-[0-9A-Za-z\\-_]{22,43}",
"sections": ["res_headers", "res_body"]
}, {
"description": "Stripe API Secret Key",
"regex": "[sr]k_(live|test)_[0-9a-zA-Z]{24}",
"sections": ["res_headers", "res_body"]
}, {
"description": "Stripe API Secret Key",
"regex": "whsec_[0-9a-zA-Z]{32}",
"sections": ["res_headers", "res_body"]
}, {
"description": "Twilio Account SID",
"regex": "SK[0-9a-zA-Z]{32}(?![a-zA-Z0-9+/=?_%)])",
"sections": ["res_headers", "res_body"]
}, {
"description": "Github Token",
"regex": "gh[pousr]_[A-Za-z0-9]{36}",
"sections": ["res_headers", "res_body"]
}, {
"description": "Github fine-grained personal access token",
"regex": "github_pat_[0-9a-zA-Z]{22}_[0-9a-zA-Z]{59}",
"sections": ["res_headers", "res_body"]
}, {
"description": "OpenAI API Key",
"regex": "sk-[a-zA-Z0-9]{40,128}(?![\\w\\-])",
"sections": ["res_headers", "res_body"]
}, {
"description": "Slack Webhook",
"regex": "hooks\\.slack\\.com/services/T[a-zA-Z0-9_]{8,10}/B[a-zA-Z0-9_]{8,10}/[a-zA-Z0-9_]{24}",
"sections": ["res_headers", "res_body"]
}, {
"description": "Microsoft Teams/Office 365 Connector - webhook",
"regex": "outlook\\.office(365)?\\.com/webhook/[\\w\\-@]{1,128}",
"sections": ["res_headers", "res_body"]
}, {
"description": "Microsoft Teams - Incoming webhook",
"regex": "\\.webhook\\.office\\.com",
"refinerRegex": "\\w+$",
"sections": ["res_headers", "res_body"]
}, {
"description": "Firebase database URL",
"regex": "\\.(firebase(io\\.com|database\\.app))",
"refinerRegex": "[0-9a-zA-Z\\.\\-]{1,64}$",
"sections": ["res_headers", "res_body"]
}, {
"description": "AWS S3 Bucket",
"regex": "s3(\\.dualstack|-acce(lerate|sspoint))?\\.([a-z]{1,8}-[a-z]{1,16}-\\d{1,3}\\.)?amazonaws\\.com",
"refinerRegex": "[a-z\\d\\-]{3,63}\\.$",
"sections": ["res_headers", "res_body"]
}, {
"description": "Azure Blob Storage",
"regex": "blob\\.core\\.windows\\.net",
"refinerRegex": "[a-z\\d\\-]{3,63}\\.$",
"sections": ["res_headers", "res_body"]
}, {
"description": "Google Cloud Storage",
"regex": "gs://[a-z\\d\\-]{3,63}",
"sections": ["res_headers", "res_body"]
}, {
"description": "Amazon ARN",
"regex": "arn:aws(-(cn|us-gov|iso-[bcd]))?:[\\w/.\\-]{1,63}:([\\w/.\\-]{0,63}:){2}([\\w:/.\\-]{0,1023})",
"sections": ["res_headers", "res_body"]
},
{
"description": "AWS API Key",
"regex": "AKIA[0-9A-Z]{16}",
"sections": ["res_headers", "res_body"]
},
{
"description": "AWS ARN",
"regex": "arn:aws:[a-z0-9-]+:[a-z]{2}-[a-z]+-[0-9]+:[0-9]+:.+",
"sections": ["res_headers", "res_body"]
},
{
"description": "AWS Access Key ID Value",
"regex": "(A3T[A-Z0-9]|AKIA|AGPA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}",
"sections": ["res_headers", "res_body"]
},
{
"description": "AWS AppSync GraphQL Key",
"regex": "da2-[a-z0-9]{26}",
"sections": ["res_headers", "res_body"]
},
{
"description": "AWS MWS key",
"regex": "amzn\\.mws\\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}",
"sections": ["res_headers", "res_body"]
},
{
"description": "AWS RDS",
"regex": "[0-9a-z._-]+.rds.amazonaws.com",
"sections": ["res_headers", "res_body"]
},
{
"description": "AWS S3 Bucket",
"regex": "s3://[0-9a-z._/-]+",
"sections": ["res_headers", "res_body"]
},
{
"description": "AWS cred file info",
"regex": "(aws_access_key_id|aws_secret_access_key)",
"sections": ["res_headers", "res_body"]
},
{
"description": "Abbysale",
"regex": "(?:abbysale).{0,40}\\b([a-z0-9A-Z]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Abstract",
"regex": "(?:abstract).{0,40}\\b([0-9a-z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Abuseipdb",
"regex": "(?:abuseipdb).{0,40}\\b([a-z0-9]{80})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Accuweather",
"regex": "(?:accuweather).{0,40}([a-z0-9A-Z\\%]{35})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Adafruitio",
"regex": "\\b(aio\\_[a-zA-Z0-9]{28})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Adobeio - 1",
"regex": "(?:adobe).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Adzuna - 1",
"regex": "(?:adzuna).{0,40}\\b([a-z0-9]{8})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Adzuna - 2",
"regex": "(?:adzuna).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Aeroworkflow - 1",
"regex": "(?:aeroworkflow).{0,40}\\b([0-9]{1,})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Aeroworkflow - 2",
"regex": "(?:aeroworkflow).{0,40}\\b([a-zA-Z0-9^!]{20})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Agora",
"regex": "(?:agora).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Airbrakeprojectkey - 1",
"regex": "(?:airbrake).{0,40}\\b([0-9]{6})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Airbrakeprojectkey - 2",
"regex": "(?:airbrake).{0,40}\\b([a-zA-Z-0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Airbrakeuserkey",
"regex": "(?:airbrake).{0,40}\\b([a-zA-Z-0-9]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Airship",
"regex": "(?:airship).{0,40}\\b([0-9Aa-zA-Z]{91})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Airvisual",
"regex": "(?:airvisual).{0,40}\\b([a-z0-9-]{36})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Alconost",
"regex": "(?:alconost).{0,40}\\b([0-9Aa-z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Alegra - 1",
"regex": "(?:alegra).{0,40}\\b([a-z0-9-]{20})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Alegra - 2",
"regex": "(?:alegra).{0,40}\\b([a-zA-Z0-9.-@]{25,30})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Aletheiaapi",
"regex": "(?:aletheiaapi).{0,40}\\b([A-Z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Alibaba - 2",
"regex": "\\b(LTAI[a-zA-Z0-9]{17,21})[\\\"' ;\\s]*",
"sections": ["res_headers", "res_body"]
},
{
"description": "Alienvault",
"regex": "(?:alienvault).{0,40}\\b([a-z0-9]{64})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Allsports",
"regex": "(?:allsports).{0,40}\\b([0-9a-z]{64})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Amadeus - 1",
"regex": "(?:amadeus).{0,40}\\b([0-9A-Za-z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Amadeus - 2",
"regex": "(?:amadeus).{0,40}\\b([0-9A-Za-z]{16})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Ambee",
"regex": "(?:ambee).{0,40}\\b([0-9a-f]{64})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Amplitudeapikey",
"regex": "(?:amplitude).{0,40}\\b([a-f0-9]{32})",
"sections": ["res_headers", "res_body"]
},
{
"description": "Apacta",
"regex": "(?:apacta).{0,40}\\b([a-z0-9-]{36})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Api2cart",
"regex": "(?:api2cart).{0,40}\\b([0-9a-f]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Apideck - 1",
"regex": "\\b(sk_live_[a-z0-9A-Z-]{93})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Apideck - 2",
"regex": "(?:apideck).{0,40}\\b([a-z0-9A-Z]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Apiflash - 1",
"regex": "(?:apiflash).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Apiflash - 2",
"regex": "(?:apiflash).{0,40}\\b([a-zA-Z0-9\\S]{21,30})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Apifonica",
"regex": "(?:apifonica).{0,40}\\b([0-9a-z]{11}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{12})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Apify",
"regex": "\\b(apify\\_api\\_[a-zA-Z-0-9]{36})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Apimatic - 1",
"regex": "(?:apimatic).{0,40}\\b([a-z0-9-\\S]{8,32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Apimatic - 2",
"regex": "(?:apimatic).{0,40}\\b([a-zA-Z0-9]{3,20}@[a-zA-Z0-9]{2,12}.[a-zA-Z0-9]{2,5})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Apiscience",
"regex": "(?:apiscience).{0,40}\\b([a-bA-Z0-9\\S]{22})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Apollo",
"regex": "(?:apollo).{0,40}\\b([a-zA-Z0-9]{22})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Appcues - 1",
"regex": "(?:appcues).{0,40}\\b([0-9]{5})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Appcues - 2",
"regex": "(?:appcues).{0,40}\\b([a-z0-9-]{36})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Appcues - 3",
"regex": "(?:appcues).{0,40}\\b([a-z0-9-]{39})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Appfollow",
"regex": "(?:appfollow).{0,40}\\b([0-9A-Za-z]{20})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Appsynergy",
"regex": "(?:appsynergy).{0,40}\\b([a-z0-9]{64})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Apptivo - 1",
"regex": "(?:apptivo).{0,40}\\b([a-z0-9-]{36})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Apptivo - 2",
"regex": "(?:apptivo).{0,40}\\b([a-zA-Z0-9-]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Artifactory - 2",
"regex": "\\b([A-Za-z0-9](?:[A-Za-z0-9\\-]{0,61}[A-Za-z0-9])\\.jfrog\\.io)",
"sections": ["res_headers", "res_body"]
},
{
"description": "Artsy - 1",
"regex": "(?:artsy).{0,40}\\b([0-9a-zA-Z]{20})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Artsy - 2",
"regex": "(?:artsy).{0,40}\\b([0-9a-zA-Z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Asanaoauth",
"regex": "(?:asana).{0,40}\\b([a-z\\/:0-9]{51})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Asanapersonalaccesstoken",
"regex": "(?:asana).{0,40}\\b([0-9]{1,}\\/[0-9]{16,}:[A-Za-z0-9]{32,})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Assemblyai",
"regex": "(?:assemblyai).{0,40}\\b([0-9a-z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Asymmetric Private Key",
"regex": "-----BEGIN ((EC|PGP|DSA|RSA|OPENSSH) )?PRIVATE KEY( BLOCK)?-----",
"sections": ["res_headers", "res_body"]
},
{
"description": "Audd",
"regex": "(?:audd).{0,40}\\b([a-z0-9-]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Auth0managementapitoken",
"regex": "(?:auth0).{0,40}\\b(ey[a-zA-Z0-9._-]+)\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Autodesk - 1",
"regex": "(?:autodesk).{0,40}\\b([0-9A-Za-z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Autodesk - 2",
"regex": "(?:autodesk).{0,40}\\b([0-9A-Za-z]{16})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Autoklose",
"regex": "(?:autoklose).{0,40}\\b([a-zA-Z0-9-]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Autopilot",
"regex": "(?:autopilot).{0,40}\\b([0-9a-f]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Avazapersonalaccesstoken",
"regex": "(?:avaza).{0,40}\\b([0-9]+-[0-9a-f]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Aviationstack",
"regex": "(?:aviationstack).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Aws - 1",
"regex": "\\b((?:AKIA|ABIA|ACCA|ASIA)[0-9A-Z]{16})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Axonaut",
"regex": "(?:axonaut).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Aylien - 1",
"regex": "(?:aylien).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Aylien - 2",
"regex": "(?:aylien).{0,40}\\b([a-z0-9]{8})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Ayrshare",
"regex": "(?:ayrshare).{0,40}\\b([A-Z]{7}-[A-Z0-9]{7}-[A-Z0-9]{7}-[A-Z0-9]{7})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Bannerbear",
"regex": "(?:bannerbear).{0,40}\\b([0-9a-zA-Z]{22}tt)\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Baremetrics",
"regex": "(?:baremetrics).{0,40}\\b([a-zA-Z0-9_]{25})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Baseapiio",
"regex": "(?:baseapi|base-api).{0,40}\\b([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Beamer",
"regex": "(?:beamer).{0,40}\\b([a-zA-Z0-9_+/]{45}=)",
"sections": ["res_headers", "res_body"]
},
{
"description": "Beebole",
"regex": "(?:beebole).{0,40}\\b([0-9a-z]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Besttime",
"regex": "(?:besttime).{0,40}\\b([0-9A-Za-z_]{36})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Billomat - 1",
"regex": "(?:billomat).{0,40}\\b([0-9a-z]{1,})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Billomat - 2",
"regex": "(?:billomat).{0,40}\\b([0-9a-z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Bitbar",
"regex": "(?:bitbar).{0,40}\\b([0-9a-z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Bitcoinaverage",
"regex": "(?:bitcoinaverage).{0,40}\\b([a-zA-Z0-9]{43})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Bitfinex",
"regex": "(?:bitfinex).{0,40}\\b([A-Za-z0-9_-]{43})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Bitly Secret Key",
"regex": "R_[0-9a-f]{32}",
"sections": ["res_headers", "res_body"]
},
{
"description": "Bitlyaccesstoken",
"regex": "(?:bitly).{0,40}\\b([a-zA-Z-0-9]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Bitmex - 1",
"regex": "(?:bitmex).{0,40}([ \\r\\n]{1}[0-9a-zA-Z\\-\\_]{24}[ \\r\\n]{1})",
"sections": ["res_headers", "res_body"]
},
{
"description": "Bitmex - 2",
"regex": "(?:bitmex).{0,40}([ \\r\\n]{1}[0-9a-zA-Z\\-\\_]{48}[ \\r\\n]{1})",
"sections": ["res_headers", "res_body"]
},
{
"description": "Blablabus",
"regex": "(?:blablabus).{0,40}\\b([0-9A-Za-z]{22})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Blazemeter",
"regex": "(?:blazemeter|runscope).{0,40}\\b([0-9a-z]{8}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{12})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Blitapp",
"regex": "(?:blitapp).{0,40}\\b([a-zA-Z0-9_-]{39})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Bombbomb",
"regex": "(?:bombbomb).{0,40}\\b([a-zA-Z0-9-._]{704})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Boostnote",
"regex": "(?:boostnote).{0,40}\\b([0-9a-f]{64})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Borgbase",
"regex": "(?:borgbase).{0,40}\\b([a-zA-Z0-9/_.-]{148,152})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Braintree API Key",
"regex": "access_token$production$[0-9a-z]{16}$[0-9a-f]{32}",
"sections": ["res_headers", "res_body"]
},
{
"description": "Brandfetch",
"regex": "(?:brandfetch).{0,40}\\b([0-9A-Za-z]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Browshot",
"regex": "(?:browshot).{0,40}\\b([a-zA-Z-0-9]{28})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Buddyns",
"regex": "(?:buddyns).{0,40}\\b([0-9a-z]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Bugherd",
"regex": "(?:bugherd).{0,40}\\b([0-9a-z]{22})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Bugsnag",
"regex": "(?:bugsnag).{0,40}\\b([0-9a-z]{8}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{12})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Buildkite",
"regex": "(?:buildkite).{0,40}\\b([a-z0-9]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Bulbul",
"regex": "(?:bulbul).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Buttercms",
"regex": "(?:buttercms).{0,40}\\b([a-z0-9]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Caflou",
"regex": "(?:caflou).{0,40}\\b([a-bA-Z0-9\\S]{155})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Calendarific",
"regex": "(?:calendarific).{0,40}\\b([a-z0-9]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Calendlyapikey",
"regex": "(?:calendly).{0,40}\\b([a-zA-Z-0-9]{20}.[a-zA-Z-0-9]{171}.[a-zA-Z-0-9_]{43})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Calorieninja",
"regex": "(?:calorieninja).{0,40}\\b([0-9A-Za-z]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Campayn",
"regex": "(?:campayn).{0,40}\\b([a-z0-9]{64})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Cannyio",
"regex": "(?:canny).{0,40}\\b([a-z0-9]{8}-[a-z0-9]{4}-[a-z0-9]{4}-[0-9]{4}-[a-z0-9]{12})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Capsulecrm",
"regex": "(?:capsulecrm).{0,40}\\b([a-zA-Z0-9-._+=]{64})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Captaindata - 1",
"regex": "(?:captaindata).{0,40}\\b([0-9a-f]{8}\\-[0-9a-f]{4}\\-[0-9a-f]{4}\\-[0-9a-f]{4}\\-[0-9a-f]{12})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Captaindata - 2",
"regex": "(?:captaindata).{0,40}\\b([0-9a-f]{64})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Carboninterface",
"regex": "(?:carboninterface).{0,40}\\b([a-zA-Z0-9]{21})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Cashboard - 1",
"regex": "(?:cashboard).{0,40}\\b([0-9A-Z]{3}-[0-9A-Z]{3}-[0-9A-Z]{3}-[0-9A-Z]{3})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Cashboard - 2",
"regex": "(?:cashboard).{0,40}\\b([0-9a-z]{1,})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Caspio - 1",
"regex": "(?:caspio).{0,40}\\b([a-z0-9]{8})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Caspio - 2",
"regex": "(?:caspio).{0,40}\\b([a-z0-9]{50})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Censys - 1",
"regex": "(?:censys).{0,40}\\b([a-zA-Z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Censys - 2",
"regex": "(?:censys).{0,40}\\b([a-z0-9-]{36})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Centralstationcrm",
"regex": "(?:centralstation).{0,40}\\b([a-z0-9]{30})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Cexio - 1",
"regex": "(?:cexio|cex.io).{0,40}\\b([a-z]{2}[0-9]{9})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Cexio - 2",
"regex": "(?:cexio|cex.io).{0,40}\\b([0-9A-Za-z]{24,27})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Chatbot",
"regex": "(?:chatbot).{0,40}\\b([a-zA-Z0-9_]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Chatfule",
"regex": "(?:chatfuel).{0,40}\\b([a-zA-Z0-9]{128})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Checio",
"regex": "(?:checio).{0,40}\\b(pk_[a-z0-9]{45})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Checklyhq",
"regex": "(?:checklyhq).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Checkout - 1",
"regex": "(?:checkout).{0,40}\\b((sk_|sk_test_)[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Checkout - 2",
"regex": "(?:checkout).{0,40}\\b(cus_[0-9a-zA-Z]{26})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Checkvist - 1",
"regex": "(?:checkvist).{0,40}\\b([\\w\\.-]+@[\\w-]+\\.[\\w\\.-]{2,5})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Checkvist - 2",
"regex": "(?:checkvist).{0,40}\\b([0-9a-zA-Z]{14})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Cicero",
"regex": "(?:cicero).{0,40}\\b([0-9a-z]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Clearbit",
"regex": "(?:clearbit).{0,40}\\b([0-9a-z_]{35})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Clickhelp - 1",
"regex": "\\b([0-9A-Za-z]{3,20}.try.clickhelp.co)\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Clickhelp - 2",
"regex": "(?:clickhelp).{0,40}\\b([0-9A-Za-z]{24})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Clicksendsms - 2",
"regex": "(?:sms).{0,40}\\b([a-zA-Z0-9]{3,20}@[a-zA-Z0-9]{2,12}.[a-zA-Z0-9]{2,5})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Clickuppersonaltoken",
"regex": "(?:clickup).{0,40}\\b(pk_[0-9]{8}_[0-9A-Z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Cliengo",
"regex": "(?:cliengo).{0,40}\\b([0-9a-f]{8}\\-[0-9a-f]{4}\\-[0-9a-f]{4}\\-[0-9a-f]{4}\\-[0-9a-f]{12})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Clinchpad",
"regex": "(?:clinchpad).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Clockify",
"regex": "(?:clockify).{0,40}\\b([a-zA-Z0-9]{48})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Clockworksms - 1",
"regex": "(?:clockwork|textanywhere).{0,40}\\b([0-9a-zA-Z]{24})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Clockworksms - 2",
"regex": "(?:clockwork|textanywhere).{0,40}\\b([0-9]{5})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Closecrm",
"regex": "\\b(api_[a-z0-9A-Z.]{45})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Cloudelements - 1",
"regex": "(?:cloudelements).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Cloudelements - 2",
"regex": "(?:cloudelements).{0,40}\\b([a-zA-Z0-9]{43})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Cloudflarecakey",
"regex": "(?:cloudflare).{0,40}\\b(v[A-Za-z0-9._-]{173,})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Cloudimage",
"regex": "(?:cloudimage).{0,40}\\b([a-z0-9_]{30})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Cloudinary Credentials",
"regex": "cloudinary://[0-9]+:[A-Za-z0-9\\-_\\.]+@[A-Za-z0-9\\-_\\.]+",
"sections": ["res_headers", "res_body"]
},
{
"description": "Cloudmersive",
"regex": "(?:cloudmersive).{0,40}\\b([a-z0-9-]{36})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Cloudplan",
"regex": "(?:cloudplan).{0,40}\\b([A-Z0-9-]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Cloverly",
"regex": "(?:cloverly).{0,40}\\b([a-z0-9:_]{28})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Cloze - 1",
"regex": "(?:cloze).{0,40}\\b([0-9a-f]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Cloze - 2",
"regex": "(?:cloze).{0,40}\\b([\\w\\.-]+@[\\w-]+\\.[\\w\\.-]{2,5})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Clustdoc",
"regex": "(?:clustdoc).{0,40}\\b([0-9a-zA-Z]{60})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Codacy",
"regex": "(?:codacy).{0,40}\\b([0-9A-Za-z]{20})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Coinapi",
"regex": "(?:coinapi).{0,40}\\b([A-Z0-9-]{36})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Coinbase",
"regex": "(?:coinbase).{0,40}\\b([a-zA-Z-0-9]{64})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Coinlayer",
"regex": "(?:coinlayer).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Coinlib",
"regex": "(?:coinlib).{0,40}\\b([a-z0-9]{16})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Column",
"regex": "(?:column).{0,40}\\b((?:test|live)_[a-zA-Z0-9]{27})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Commercejs",
"regex": "(?:commercejs).{0,40}\\b([a-z0-9_]{48})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Commodities",
"regex": "(?:commodities).{0,40}\\b([a-zA-Z0-9]{60})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Companyhub - 1",
"regex": "(?:companyhub).{0,40}\\b([0-9a-zA-Z]{20})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Companyhub - 2",
"regex": "(?:companyhub).{0,40}\\b([a-zA-Z0-9$%^=-]{4,32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Confluent - 1",
"regex": "(?:confluent).{0,40}\\b([a-zA-Z-0-9]{16})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Confluent - 2",
"regex": "(?:confluent).{0,40}\\b([a-zA-Z-0-9]{64})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Convertkit",
"regex": "(?:convertkit).{0,40}\\b([a-z0-9A-Z_]{22})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Convier",
"regex": "(?:convier).{0,40}\\b([0-9]{2}\\|[a-zA-Z0-9]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Copper - 2",
"regex": "(?:copper).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Countrylayer",
"regex": "(?:countrylayer).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Courier",
"regex": "(?:courier).{0,40}\\b(pk\\_[a-zA-Z0-9]{1,}\\_[a-zA-Z0-9]{28})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Coveralls",
"regex": "(?:coveralls).{0,40}\\b([a-zA-Z0-9-]{37})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Crowdin",
"regex": "(?:crowdin).{0,40}\\b([0-9A-Za-z]{80})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Cryptocompare",
"regex": "(?:cryptocompare).{0,40}\\b([a-z-0-9]{64})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Currencycloud - 1",
"regex": "(?:currencycloud).{0,40}\\b([0-9a-z]{64})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Currencyfreaks",
"regex": "(?:currencyfreaks).{0,40}\\b([0-9a-z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Currencylayer",
"regex": "(?:currencylayer).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Currencyscoop",
"regex": "(?:currencyscoop).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Currentsapi",
"regex": "(?:currentsapi).{0,40}\\b([a-zA-Z0-9\\S]{48})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Customerguru - 1",
"regex": "(?:guru).{0,40}\\b([a-z0-9A-Z]{50})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Customerguru - 2",
"regex": "(?:guru).{0,40}\\b([a-z0-9A-Z]{30})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "D7network",
"regex": "(?:d7network).{0,40}\\b([a-zA-Z0-9\\W\\S]{23}\\=)",
"sections": ["res_headers", "res_body"]
},
{
"description": "Dailyco",
"regex": "(?:daily).{0,40}\\b([0-9a-f]{64})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Dandelion",
"regex": "(?:dandelion).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Databricks",
"regex": "dapi[a-f0-9]{32}\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Datafire",
"regex": "(?:datafire).{0,40}\\b([a-z0-9\\S]{175,190})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Datagov",
"regex": "(?:data.gov).{0,40}\\b([a-zA-Z0-9]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Deepai",
"regex": "(?:deepai).{0,40}\\b([a-z0-9-]{36})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Deepgram",
"regex": "(?:deepgram).{0,40}\\b([0-9a-z]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Delighted",
"regex": "(?:delighted).{0,40}\\b([a-z0-9A-Z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Deputy - 1",
"regex": "\\b([0-9a-z]{1,}.as.deputy.com)\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Deputy - 2",
"regex": "(?:deputy).{0,40}\\b([0-9a-z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Detectlanguage",
"regex": "(?:detectlanguage).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Dfuse",
"regex": "\\b(web\\_[0-9a-z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Diffbot",
"regex": "(?:diffbot).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Digitaloceantoken",
"regex": "(?:digitalocean).{0,40}\\b([A-Za-z0-9_-]{64})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Discord Webhook",
"regex": "https://discordapp\\.com/api/webhooks/[0-9]+/[A-Za-z0-9\\-]+",
"sections": ["res_headers", "res_body"]
},
{
"description": "Discordbottoken - 1",
"regex": "(?:discord).{0,40}\\b([A-Za-z0-9_-]{24}\\.[A-Za-z0-9_-]{6}\\.[A-Za-z0-9_-]{27})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Discordbottoken - 2",
"regex": "(?:discord).{0,40}\\b([0-9]{17})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Discordwebhook",
"regex": "(https:\\/\\/discord.com\\/api\\/webhooks\\/[0-9]{18}\\/[0-9a-zA-Z-]{68})",
"sections": ["res_headers", "res_body"]
},
{
"description": "Ditto",
"regex": "(?:ditto).{0,40}\\b([a-z0-9]{8}\\-[a-z0-9]{4}\\-[a-z0-9]{4}\\-[a-z0-9]{4}\\-[a-z0-9]{12}\\.[a-z0-9]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Dnscheck - 1",
"regex": "(?:dnscheck).{0,40}\\b([a-z0-9A-Z-]{36})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Dnscheck - 2",
"regex": "(?:dnscheck).{0,40}\\b([a-z0-9A-Z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Documo",
"regex": "\\b(ey[a-zA-Z0-9]{34}.ey[a-zA-Z0-9]{154}.[a-zA-Z0-9_-]{43})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Doppler",
"regex": "\\b(dp\\.pt\\.[a-zA-Z0-9]{43})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Dotmailer - 1",
"regex": "(?:dotmailer).{0,40}\\b(apiuser-[a-z0-9]{12}@apiconnector.com)\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Dotmailer - 2",
"regex": "(?:dotmailer).{0,40}\\b([a-zA-Z0-9\\S]{8,24})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Dovico",
"regex": "(?:dovico).{0,40}\\b([0-9a-z]{32}\\.[0-9a-z]{1,}\\b)",
"sections": ["res_headers", "res_body"]
},
{
"description": "Dronahq",
"regex": "(?:dronahq).{0,40}\\b([a-z0-9]{50})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Droneci",
"regex": "(?:droneci).{0,40}\\b([a-zA-Z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Dropbox",
"regex": "\\b(sl\\.[A-Za-z0-9\\-\\_]{130,140})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Dwolla",
"regex": "(?:dwolla).{0,40}\\b([a-zA-Z-0-9]{50})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Dynalist",
"regex": "(?:dynalist).{0,40}\\b([a-zA-Z0-9-_]{128})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Dynatrace token",
"regex": "dt0[a-zA-Z]{1}[0-9]{2}\\.[A-Z0-9]{24}\\.[A-Z0-9]{64}",
"sections": ["res_headers", "res_body"]
},
{
"description": "Dyspatch",
"regex": "(?:dyspatch).{0,40}\\b([A-Z0-9]{52})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "EC",
"regex": "-----BEGIN EC PRIVATE KEY-----",
"sections": ["res_headers", "res_body"]
},
{
"description": "Eagleeyenetworks - 1",
"regex": "(?:eagleeyenetworks).{0,40}\\b([a-zA-Z0-9]{3,20}@[a-zA-Z0-9]{2,12}.[a-zA-Z0-9]{2,5})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Eagleeyenetworks - 2",
"regex": "(?:eagleeyenetworks).{0,40}\\b([a-zA-Z0-9]{15})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Easyinsight - 1",
"regex": "(?:easyinsight|easy-insight).{0,40}\\b([a-zA-Z0-9]{20})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Easyinsight - 2",
"regex": "(?:easyinsight|easy-insight).{0,40}\\b([0-9Aa-zA-Z]{20})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Edamam - 1",
"regex": "(?:edamam).{0,40}\\b([0-9a-z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Edamam - 2",
"regex": "(?:edamam).{0,40}\\b([0-9a-z]{8})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Edenai",
"regex": "(?:edenai).{0,40}\\b([a-zA-Z0-9]{36}.[a-zA-Z0-9]{92}.[a-zA-Z0-9_]{43})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Eightxeight - 2",
"regex": "(?:8x8).{0,40}\\b([a-zA-Z0-9]{43})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Elasticemail",
"regex": "(?:elastic).{0,40}\\b([A-Za-z0-9_-]{96})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Enablex - 1",
"regex": "(?:enablex).{0,40}\\b([a-zA-Z0-9]{36})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Enablex - 2",
"regex": "(?:enablex).{0,40}\\b([a-z0-9]{24})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Enigma",
"regex": "(?:enigma).{0,40}\\b([a-zA-Z0-9]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Ethplorer",
"regex": "(?:ethplorer).{0,40}\\b([a-z0-9A-Z-]{22})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Everhour",
"regex": "(?:everhour).{0,40}\\b([0-9Aa-f]{4}-[0-9a-f]{4}-[0-9a-f]{6}-[0-9a-f]{6}-[0-9a-f]{8})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Exchangerateapi",
"regex": "(?:exchangerate).{0,40}\\b([a-z0-9]{24})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Exchangeratesapi",
"regex": "(?:exchangerates).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Facebook Access Token",
"regex": "EAACEdEose0cBA[0-9A-Za-z]+",
"sections": ["res_headers", "res_body"]
},
{
"description": "Faceplusplus",
"regex": "(?:faceplusplus).{0,40}\\b([0-9a-zA-Z_-]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Fakejson",
"regex": "(?:fakejson).{0,40}\\b([a-zA-Z0-9]{22})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Fastforex",
"regex": "(?:fastforex).{0,40}\\b([a-z0-9-]{28})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Fastlypersonaltoken",
"regex": "(?:fastly).{0,40}\\b([A-Za-z0-9_-]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Feedier",
"regex": "(?:feedier).{0,40}\\b([a-z0-9A-Z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Fetchrss",
"regex": "(?:fetchrss).{0,40}\\b([0-9A-Za-z.]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Figmapersonalaccesstoken",
"regex": "(?:figma).{0,40}\\b([0-9]{6}-[0-9a-z]{8}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{12})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Fileio",
"regex": "(?:fileio).{0,40}\\b([A-Z0-9.-]{39})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Finage",
"regex": "\\b(API_KEY[0-9A-Z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Financialmodelingprep",
"regex": "(?:financialmodelingprep).{0,40}\\b([a-zA-Z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Findl",
"regex": "(?:findl).{0,40}\\b([a-z0-9]{8}\\-[a-z0-9]{4}\\-[a-z0-9]{4}\\-[a-z0-9]{4}\\-[a-z0-9]{12})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Finnhub",
"regex": "(?:finnhub).{0,40}\\b([0-9a-z]{20})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Fixerio",
"regex": "(?:fixer).{0,40}\\b([A-Za-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Flatio",
"regex": "(?:flat).{0,40}\\b([0-9a-z]{128})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Fleetbase",
"regex": "\\b(flb_live_[0-9a-zA-Z]{20})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Flickr",
"regex": "(?:flickr).{0,40}\\b([0-9a-z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Flightapi",
"regex": "(?:flightapi).{0,40}\\b([a-z0-9]{24})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Flightstats - 1",
"regex": "(?:flightstats).{0,40}\\b([0-9a-z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Flightstats - 2",
"regex": "(?:flightstats).{0,40}\\b([0-9a-z]{8})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Flowflu - 2",
"regex": "(?:flowflu).{0,40}\\b([a-zA-Z0-9]{51})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Flutterwave",
"regex": "\\b(FLWSECK-[0-9a-z]{32}-X)\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Fmfw - 1",
"regex": "(?:fmfw).{0,40}\\b([a-zA-Z0-9-]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Fmfw - 2",
"regex": "(?:fmfw).{0,40}\\b([a-zA-Z0-9_-]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Formbucket",
"regex": "(?:formbucket).{0,40}\\b([0-9A-Za-z]{1,}.[0-9A-Za-z]{1,}\\.[0-9A-Z-a-z\\-_]{1,})",
"sections": ["res_headers", "res_body"]
},
{
"description": "Formio",
"regex": "(?:formio).{0,40}\\b(eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9\\.[0-9A-Za-z]{310}\\.[0-9A-Z-a-z\\-_]{43}[ \\r\\n]{1})",
"sections": ["res_headers", "res_body"]
},
{
"description": "Foursquare",
"regex": "(?:foursquare).{0,40}\\b([0-9A-Z]{48})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Frameio",
"regex": "\\b(fio-u-[0-9a-zA-Z_-]{64})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Freshbooks - 1",
"regex": "(?:freshbooks).{0,40}\\b([0-9a-z]{64})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Freshbooks - 2",
"regex": "(?:freshbooks).{0,40}\\b(https://www.[0-9A-Za-z_-]{1,}.com)\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Freshdesk - 1",
"regex": "(?:freshdesk).{0,40}\\b([0-9A-Za-z]{20})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Freshdesk - 2",
"regex": "\\b([0-9a-z-]{1,}.freshdesk.com)\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Front",
"regex": "(?:front).{0,40}\\b([0-9a-zA-Z]{36}.[0-9a-zA-Z\\.\\-\\_]{188,244})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Fulcrum",
"regex": "(?:fulcrum).{0,40}\\b([a-z0-9]{80})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Fullstory",
"regex": "(?:fullstory).{0,40}\\b([a-zA-Z-0-9/+]{88})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Fusebill",
"regex": "(?:fusebill).{0,40}\\b([a-zA-Z0-9]{88})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Fxmarket",
"regex": "(?:fxmarket).{0,40}\\b([0-9Aa-zA-Z-_=]{20})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Gcp",
"regex": "\\{[^{]+auth_provider_x509_cert_url[^}]+\\}",
"sections": ["res_headers", "res_body"]
},
{
"description": "Geckoboard",
"regex": "(?:geckoboard).{0,40}\\b([a-zA-Z0-9]{44})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1376",
"regex": "jdbc:mysql(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1700",
"regex": "BEGIN OPENSSH PRIVATE KEY",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1701",
"regex": "BEGIN PRIVATE KEY",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1702",
"regex": "BEGIN RSA PRIVATE KEY",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1703",
"regex": "BEGIN DSA PRIVATE KEY",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1704",
"regex": "BEGIN EC PRIVATE KEY",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1705",
"regex": "BEGIN PGP PRIVATE KEY BLOCK",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1710",
"regex": "algolia_api_key",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1711",
"regex": "asana_access_token",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1713",
"regex": "azure_tenant",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1714",
"regex": "bitly_access_token",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1716",
"regex": "browserstack_access_key",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1717",
"regex": "buildkite_access_token",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1718",
"regex": "comcast_access_token",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1719",
"regex": "datadog_api_key",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1720",
"regex": "deviantart_secret",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1721",
"regex": "deviantart_access_token",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1722",
"regex": "dropbox_api_token",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1723",
"regex": "facebook_appsecret",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1724",
"regex": "facebook_access_token",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1725",
"regex": "firebase_custom_token",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1726",
"regex": "firebase_id_token",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1727",
"regex": "github_client",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1728",
"regex": "github_ssh_key",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1730",
"regex": "gitlab_private_token",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1733",
"regex": "heroku_api_key",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1734",
"regex": "instagram_access_token",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1735",
"regex": "mailchimp_api_key",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1736",
"regex": "mailgun_api_key",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1739",
"regex": "pagerduty_api_token",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1740",
"regex": "paypal_key_sb",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1741",
"regex": "paypal_key_live",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1742",
"regex": "paypal_token_sb",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1743",
"regex": "paypal_token_live",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1744",
"regex": "pendo_integration_key",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1745",
"regex": "salesforce_access_token",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1746",
"regex": "saucelabs_ukey",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1747",
"regex": "sendgrid_api_key",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1748",
"regex": "slack_api_token",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1751",
"regex": "square_auth_token",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1752",
"regex": "travisci_api_token",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1754",
"regex": "twitter_api_secret",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1755",
"regex": "twitter_bearer_token",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1756",
"regex": "spotify_access_token",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1757",
"regex": "stripe_key_live",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1758",
"regex": "wakatime_api_key",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1759",
"regex": "wompi_auth_bearer_sb",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1760",
"regex": "wompi_auth_bearer_live",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1761",
"regex": "wpengine_api_key",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1763",
"regex": "zendesk_access_token",
"sections": ["res_headers", "res_body"]
},
{
"description": "Generic - 1764",
"regex": "ssh-rsa",
"sections": ["res_headers", "res_body"]
},
{
"description": "Gengo",
"regex": "(?:gengo).{0,40}([ ]{0,1}[0-9a-zA-Z\\[\\]\\-\\(\\)\\{\\}|_^@$=~]{64}[ \\r\\n]{1})",
"sections": ["res_headers", "res_body"]
},
{
"description": "Geoapify",
"regex": "(?:geoapify).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Geocode",
"regex": "(?:geocode).{0,40}\\b([a-z0-9]{28})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Geocodify",
"regex": "(?:geocodify).{0,40}\\b([0-9a-z]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Geocodio - 2",
"regex": "(?:geocod).{0,40}\\b([a-z0-9]{39})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Geoipifi",
"regex": "(?:ipifi).{0,40}\\b([a-z0-9A-Z_]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Getemail",
"regex": "(?:getemail).{0,40}\\b([a-zA-Z0-9-]{20})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Getemails - 1",
"regex": "(?:getemails).{0,40}\\b([a-z0-9-]{26})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Getemails - 2",
"regex": "(?:getemails).{0,40}\\b([a-z0-9-]{18})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Getgeoapi",
"regex": "(?:getgeoapi).{0,40}\\b([0-9a-z]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Getgist",
"regex": "(?:getgist).{0,40}\\b([a-z0-9A-Z+=]{68})",
"sections": ["res_headers", "res_body"]
},
{
"description": "Getsandbox - 1",
"regex": "(?:getsandbox).{0,40}\\b([a-z0-9-]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Getsandbox - 2",
"regex": "(?:getsandbox).{0,40}\\b([a-z0-9-]{15,30})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Github - 2",
"regex": "\\b((?:ghp|gho|ghu|ghs|ghr)_[a-zA-Z0-9]{36,255}\\b)",
"sections": ["res_headers", "res_body"]
},
{
"description": "Github App Token",
"regex": "(ghu|ghs)_[0-9a-zA-Z]{36}",
"sections": ["res_headers", "res_body"]
},
{
"description": "Github OAuth Access Token",
"regex": "gho_[0-9a-zA-Z]{36}",
"sections": ["res_headers", "res_body"]
},
{
"description": "Github Personal Access Token",
"regex": "ghp_[0-9a-zA-Z]{36}",
"sections": ["res_headers", "res_body"]
},
{
"description": "Github Refresh Token",
"regex": "ghr_[0-9a-zA-Z]{76}",
"sections": ["res_headers", "res_body"]
},
{
"description": "Github_old",
"regex": "(?:github)[^\\.].{0,40}[ =:'\"]+([a-f0-9]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Githubapp - 2",
"regex": "(?:github).{0,40}(-----BEGIN RSA PRIVATE KEY-----\\s[A-Za-z0-9+\\/\\s]*\\s-----END RSA PRIVATE KEY-----)",
"sections": ["res_headers", "res_body"]
},
{
"description": "Gitlabv2",
"regex": "\\b(glpat-[a-zA-Z0-9\\-=_]{20,22})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Gitter",
"regex": "(?:gitter).{0,40}\\b([a-z0-9-]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Glassnode",
"regex": "(?:glassnode).{0,40}\\b([0-9A-Za-z]{27})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Gocanvas - 1",
"regex": "(?:gocanvas).{0,40}\\b([0-9A-Za-z/+]{43}=[ \\r\\n]{1})",
"sections": ["res_headers", "res_body"]
},
{
"description": "Gocanvas - 2",
"regex": "(?:gocanvas).{0,40}\\b([\\w\\.-]+@[\\w-]+\\.[\\w\\.-]{2,5})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Gocardless",
"regex": "\\b(live_[0-9A-Za-z\\_\\-]{40}[ \"'\\r\\n]{1})",
"sections": ["res_headers", "res_body"]
},
{
"description": "Goodday",
"regex": "(?:goodday).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Google (GCP) Service Account",
"regex": "\"type\": \"service_account\"",
"sections": ["res_headers", "res_body"]
},
{
"description": "Google API Key",
"regex": "AIza[0-9a-z-_]{35}",
"sections": ["res_headers", "res_body"]
},
{
"description": "Google Calendar URI",
"regex": "https://www\\.google\\.com/calendar/embed\\?src=[A-Za-z0-9%@&;=\\-_\\./]+",
"sections": ["res_headers", "res_body"]
},
{
"description": "Google OAuth Access Token",
"regex": "ya29\\.[0-9A-Za-z\\-_]+",
"sections": ["res_headers", "res_body"]
},
{
"description": "Graphcms - 1",
"regex": "(?:graph).{0,40}\\b([a-z0-9]{25})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Graphcms - 2",
"regex": "\\b(ey[a-zA-Z0-9]{73}.ey[a-zA-Z0-9]{365}.[a-zA-Z0-9_-]{683})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Graphhopper",
"regex": "(?:graphhopper).{0,40}\\b([a-z0-9-]{36})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Groovehq",
"regex": "(?:groove).{0,40}\\b([a-z0-9A-Z]{64})",
"sections": ["res_headers", "res_body"]
},
{
"description": "Guru - 1",
"regex": "(?:guru).{0,40}\\b([a-zA-Z0-9]{3,20}@[a-zA-Z0-9]{2,12}.[a-zA-Z0-9]{2,5})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Guru - 2",
"regex": "(?:guru).{0,40}\\b([a-z0-9]{8}-[a-z0-9]{4}-[a-z0-9]{4}-[a-z0-9]{4}-[a-z0-9]{12})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Gyazo",
"regex": "(?:gyazo).{0,40}\\b([0-9A-Za-z-]{43})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Happi",
"regex": "(?:happi).{0,40}\\b([a-zA-Z0-9]{56})",
"sections": ["res_headers", "res_body"]
},
{
"description": "Happyscribe",
"regex": "(?:happyscribe).{0,40}\\b([0-9a-zA-Z]{24})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Harvest - 1",
"regex": "(?:harvest).{0,40}\\b([a-z0-9A-Z._]{97})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Hellosign",
"regex": "(?:hellosign).{0,40}\\b([a-zA-Z-0-9/+]{64})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Helpcrunch",
"regex": "(?:helpcrunch).{0,40}\\b([a-zA-Z-0-9+/=]{328})",
"sections": ["res_headers", "res_body"]
},
{
"description": "Helpscout",
"regex": "(?:helpscout).{0,40}\\b([A-Za-z0-9]{56})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Hereapi",
"regex": "(?:hereapi).{0,40}\\b([a-zA-Z0-9\\S]{43})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Heroku",
"regex": "(?:heroku).{0,40}\\b([0-9Aa-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Hive - 2",
"regex": "(?:hive).{0,40}\\b([0-9A-Za-z]{17})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Hiveage",
"regex": "(?:hiveage).{0,40}\\b([0-9A-Za-z\\_\\-]{20})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Holidayapi",
"regex": "(?:holidayapi).{0,40}\\b([a-z0-9-]{36})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Html2pdf",
"regex": "(?:html2pdf).{0,40}\\b([a-zA-Z0-9]{64})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Hubspotapikey",
"regex": "(?:hubspot).{0,40}\\b([A-Za-z0-9]{8}\\-[A-Za-z0-9]{4}\\-[A-Za-z0-9]{4}\\-[A-Za-z0-9]{4}\\-[A-Za-z0-9]{12})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Humanity",
"regex": "(?:humanity).{0,40}\\b([0-9a-z]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Hypertrack - 1",
"regex": "(?:hypertrack).{0,40}\\b([0-9a-zA-Z\\_\\-]{54})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Hypertrack - 2",
"regex": "(?:hypertrack).{0,40}\\b([0-9a-zA-Z\\_\\-]{27})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Ibmclouduserkey",
"regex": "(?:ibm).{0,40}\\b([A-Za-z0-9_-]{44})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Iconfinder",
"regex": "(?:iconfinder).{0,40}\\b([a-zA-Z0-9]{64})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Iexcloud",
"regex": "(?:iexcloud).{0,40}\\b([a-z0-9_]{35})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Imagekit",
"regex": "(?:imagekit).{0,40}\\b([a-zA-Z0-9_=]{36})",
"sections": ["res_headers", "res_body"]
},
{
"description": "Imagga",
"regex": "(?:imagga).{0,40}\\b([a-z0-9A-Z=]{72})",
"sections": ["res_headers", "res_body"]
},
{
"description": "Impala",
"regex": "(?:impala).{0,40}\\b([0-9A-Za-z_]{46})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Insightly",
"regex": "(?:insightly).{0,40}\\b([a-z0-9-]{36})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Integromat",
"regex": "(?:integromat).{0,40}\\b([a-z0-9-]{36})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Intrinio",
"regex": "(?:intrinio).{0,40}\\b([a-zA-Z0-9]{44})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Invoiceocean - 1",
"regex": "(?:invoiceocean).{0,40}\\b([0-9A-Za-z]{20})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Invoiceocean - 2",
"regex": "\\b([0-9a-z]{1,}.invoiceocean.com)\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Ipapi",
"regex": "(?:ipapi).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Ipgeolocation",
"regex": "(?:ipgeolocation).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Ipify",
"regex": "(?:ipify).{0,40}\\b([a-zA-Z0-9_-]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Ipinfodb",
"regex": "(?:ipinfodb).{0,40}\\b([a-z0-9]{64})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Ipquality",
"regex": "(?:ipquality).{0,40}\\b([0-9a-z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Ipstack",
"regex": "(?:ipstack).{0,40}\\b([a-fA-f0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "JDBC Connection String",
"regex": "jdbc:[a-z:]+://[A-Za-z0-9\\.\\-_:;=/@?,&]+",
"sections": ["res_headers", "res_body"]
},
{
"description": "Jiratoken - 1",
"regex": "(?:jira).{0,40}\\b([a-zA-Z-0-9]{24})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Jiratoken - 2",
"regex": "(?:jira).{0,40}\\b([a-zA-Z-0-9]{5,24}\\@[a-zA-Z-0-9]{3,16}\\.com)\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Jotform",
"regex": "(?:jotform).{0,40}\\b([0-9Aa-z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Jumpcloud",
"regex": "(?:jumpcloud).{0,40}\\b([a-zA-Z0-9]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Juro",
"regex": "(?:juro).{0,40}\\b([a-zA-Z0-9]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Kanban - 1",
"regex": "(?:kanban).{0,40}\\b([0-9A-Z]{12})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Kanban - 2",
"regex": "\\b([0-9a-z]{1,}.kanbantool.com)\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Karmacrm",
"regex": "(?:karma).{0,40}\\b([a-zA-Z0-9]{20})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Keenio - 1",
"regex": "(?:keen).{0,40}\\b([0-9a-z]{24})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Keenio - 2",
"regex": "(?:keen).{0,40}\\b([0-9A-Z]{64})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Kickbox",
"regex": "(?:kickbox).{0,40}\\b([a-zA-Z0-9_]+[a-zA-Z0-9]{64})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Klipfolio",
"regex": "(?:klipfolio).{0,40}\\b([0-9a-f]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Kontent",
"regex": "(?:kontent).{0,40}\\b([a-z0-9-]{36})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Kraken - 1",
"regex": "(?:kraken).{0,40}\\b([0-9A-Za-z\\/\\+=]{56}[ \"'\\r\\n]{1})",
"sections": ["res_headers", "res_body"]
},
{
"description": "Kraken - 2",
"regex": "(?:kraken).{0,40}\\b([0-9A-Za-z\\/\\+=]{86,88}[ \"'\\r\\n]{1})",
"sections": ["res_headers", "res_body"]
},
{
"description": "Kucoin - 1",
"regex": "(?:kucoin).{0,40}([ \\r\\n]{1}[!-~]{7,32}[ \\r\\n]{1})",
"sections": ["res_headers", "res_body"]
},
{
"description": "Kucoin - 2",
"regex": "(?:kucoin).{0,40}\\b([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Kucoin - 3",
"regex": "(?:kucoin).{0,40}\\b([0-9a-f]{24})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Kylas",
"regex": "(?:kylas).{0,40}\\b([a-z0-9-]{36})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Languagelayer",
"regex": "(?:languagelayer).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Lastfm",
"regex": "(?:lastfm).{0,40}\\b([0-9a-z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Launchdarkly",
"regex": "(?:launchdarkly).{0,40}\\b([a-z0-9-]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Leadfeeder",
"regex": "(?:leadfeeder).{0,40}\\b([a-zA-Z0-9-]{43})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Lendflow",
"regex": "(?:lendflow).{0,40}\\b([a-zA-Z0-9]{36}\\.[a-zA-Z0-9]{235}\\.[a-zA-Z0-9]{32}\\-[a-zA-Z0-9]{47}\\-[a-zA-Z0-9_]{162}\\-[a-zA-Z0-9]{42}\\-[a-zA-Z0-9_]{40}\\-[a-zA-Z0-9_]{66}\\-[a-zA-Z0-9_]{59}\\-[a-zA-Z0-9]{7}\\-[a-zA-Z0-9_]{220})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Lexigram",
"regex": "(?:lexigram).{0,40}\\b([a-zA-Z0-9\\S]{301})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Linearapi",
"regex": "\\b(lin_api_[0-9A-Za-z]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Linemessaging",
"regex": "(?:line).{0,40}\\b([A-Za-z0-9+/]{171,172})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Linenotify",
"regex": "(?:linenotify).{0,40}\\b([0-9A-Za-z]{43})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Linkpreview",
"regex": "(?:linkpreview).{0,40}\\b([a-zA-Z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Liveagent",
"regex": "(?:liveagent).{0,40}\\b([a-zA-Z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Livestorm",
"regex": "(?:livestorm).{0,40}\\b(eyJhbGciOiJIUzI1NiJ9\\.eyJhdWQiOiJhcGkubGl2ZXN0b3JtLmNvIiwianRpIjoi[0-9A-Z-a-z]{134}\\.[0-9A-Za-z\\-\\_]{43}[ \\r\\n]{1})",
"sections": ["res_headers", "res_body"]
},
{
"description": "Locationiq",
"regex": "\\b(pk\\.[a-zA-Z-0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Loginradius",
"regex": "(?:loginradius).{0,40}\\b([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Lokalisetoken",
"regex": "(?:lokalise).{0,40}\\b([a-z0-9]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Loyverse",
"regex": "(?:loyverse).{0,40}\\b([0-9-a-z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Luno - 1",
"regex": "(?:luno).{0,40}\\b([a-z0-9]{13})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Luno - 2",
"regex": "(?:luno).{0,40}\\b([a-zA-Z0-9_-]{43})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Macaddress",
"regex": "(?:macaddress).{0,40}\\b([a-zA-Z0-9_]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Madkudu",
"regex": "(?:madkudu).{0,40}\\b([0-9a-f]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Magnetic",
"regex": "(?:magnetic).{0,40}\\b([0-9Aa-z]{8}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{12})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "MailChimp API Key",
"regex": "[0-9a-f]{32}-us[0-9]{1,2}",
"sections": ["res_headers", "res_body"]
},
{
"description": "Mailboxlayer",
"regex": "(?:mailboxlayer).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Mailerlite",
"regex": "(?:mailerlite).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Mailgun - 2",
"regex": "(?:mailgun).{0,40}\\b([a-zA-Z-0-9]{72})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Mailgun API Key - 1",
"regex": "key-[0-9a-zA-Z]{32}",
"sections": ["res_headers", "res_body"]
},
{
"description": "Mailjetbasicauth",
"regex": "(?:mailjet).{0,40}\\b([A-Za-z0-9]{87}\\=)",
"sections": ["res_headers", "res_body"]
},
{
"description": "Mailjetsms",
"regex": "(?:mailjet).{0,40}\\b([A-Za-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Mailmodo",
"regex": "(?:mailmodo).{0,40}\\b([A-Z0-9]{7}-[A-Z0-9]{7}-[A-Z0-9]{7}-[A-Z0-9]{7})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Mailsac",
"regex": "(?:mailsac).{0,40}\\b(k_[0-9A-Za-z]{36,})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Mandrill",
"regex": "(?:mandrill).{0,40}\\b([A-Za-z0-9_-]{22})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Mapbox - 2",
"regex": "\\b(sk\\.[a-zA-Z-0-9\\.]{80,240})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Mapquest",
"regex": "(?:mapquest).{0,40}\\b([0-9A-Za-z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Marketstack",
"regex": "(?:marketstack).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Mattermostpersonaltoken - 1",
"regex": "(?:mattermost).{0,40}\\b([A-Za-z0-9-_]{1,}.cloud.mattermost.com)\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Mattermostpersonaltoken - 2",
"regex": "(?:mattermost).{0,40}\\b([a-z0-9]{26})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Mavenlink",
"regex": "(?:mavenlink).{0,40}\\b([0-9a-z]{64})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Maxmindlicense - 1",
"regex": "(?:maxmind|geoip).{0,40}\\b([0-9A-Za-z]{16})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Maxmindlicense - 2",
"regex": "(?:maxmind|geoip).{0,40}\\b([0-9]{2,7})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Meaningcloud",
"regex": "(?:meaningcloud).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Mediastack",
"regex": "(?:mediastack).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Meistertask",
"regex": "(?:meistertask).{0,40}\\b([a-zA-Z0-9]{43})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Mesibo",
"regex": "(?:mesibo).{0,40}\\b([0-9A-Za-z]{64})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Messagebird",
"regex": "(?:messagebird).{0,40}\\b([A-Za-z0-9_-]{25})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Metaapi - 1",
"regex": "(?:metaapi|meta-api).{0,40}\\b([0-9a-f]{64})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Metaapi - 2",
"regex": "(?:metaapi|meta-api).{0,40}\\b([0-9a-f]{24})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Metrilo",
"regex": "(?:metrilo).{0,40}\\b([a-z0-9]{16})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Microsoftteamswebhook",
"regex": "(https:\\/\\/[a-zA-Z-0-9]+\\.webhook\\.office\\.com\\/webhookb2\\/[a-zA-Z-0-9]{8}-[a-zA-Z-0-9]{4}-[a-zA-Z-0-9]{4}-[a-zA-Z-0-9]{4}-[a-zA-Z-0-9]{12}\\@[a-zA-Z-0-9]{8}-[a-zA-Z-0-9]{4}-[a-zA-Z-0-9]{4}-[a-zA-Z-0-9]{4}-[a-zA-Z-0-9]{12}\\/IncomingWebhook\\/[a-zA-Z-0-9]{32}\\/[a-zA-Z-0-9]{8}-[a-zA-Z-0-9]{4}-[a-zA-Z-0-9]{4}-[a-zA-Z-0-9]{4}-[a-zA-Z-0-9]{12})",
"sections": ["res_headers", "res_body"]
},
{
"description": "Midise",
"regex": "midi-662b69edd2[a-zA-Z0-9]{54}",
"sections": ["res_headers", "res_body"]
},
{
"description": "Mindmeister",
"regex": "(?:mindmeister).{0,40}\\b([a-zA-Z0-9]{43})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Mite - 1",
"regex": "(?:mite).{0,40}\\b([0-9a-z]{16})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Mite - 2",
"regex": "\\b([0-9a-z-]{1,}.mite.yo.lk)\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Mixmax",
"regex": "(?:mixmax).{0,40}\\b([a-zA-Z0-9_-]{36})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Mixpanel - 1",
"regex": "(?:mixpanel).{0,40}\\b([a-zA-Z0-9.-]{30,40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Mixpanel - 2",
"regex": "(?:mixpanel).{0,40}\\b([a-zA-Z0-9-]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Moderation",
"regex": "(?:moderation).{0,40}\\b([a-zA-Z0-9]{36}\\.[a-zA-Z0-9]{115}\\.[a-zA-Z0-9_]{43})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Monday",
"regex": "(?:monday).{0,40}\\b(ey[a-zA-Z0-9_.]{210,225})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Moonclerck",
"regex": "(?:moonclerck).{0,40}\\b([0-9a-z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Moonclerk",
"regex": "(?:moonclerk).{0,40}\\b([0-9a-z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Moosend",
"regex": "(?:moosend).{0,40}\\b([0-9Aa-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Mrticktock - 1",
"regex": "(?:mrticktock).{0,40}\\b([a-zA-Z0-9!=@#$%()_^]{1,50})",
"sections": ["res_headers", "res_body"]
},
{
"description": "Myintervals",
"regex": "(?:myintervals).{0,40}\\b([0-9a-z]{11})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Nasdaqdatalink",
"regex": "(?:nasdaq).{0,40}\\b([a-zA-Z0-9_-]{20})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Nethunt - 1",
"regex": "(?:nethunt).{0,40}\\b([a-zA-Z0-9.-@]{25,30})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Nethunt - 2",
"regex": "(?:nethunt).{0,40}\\b([a-z0-9-\\S]{36})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Netlify",
"regex": "(?:netlify).{0,40}\\b([A-Za-z0-9_-]{43,45})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Neutrinoapi - 1",
"regex": "(?:neutrinoapi).{0,40}\\b([a-zA-Z0-9]{48})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Neutrinoapi - 2",
"regex": "(?:neutrinoapi).{0,40}\\b([a-zA-Z0-9]{6,24})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Newrelic Admin API Key",
"regex": "NRAA-[a-f0-9]{27}",
"sections": ["res_headers", "res_body"]
},
{
"description": "Newrelic Insights API Key",
"regex": "NRI(?:I|Q)-[A-Za-z0-9\\-_]{32}",
"sections": ["res_headers", "res_body"]
},
{
"description": "Newrelic REST API Key",
"regex": "NRRA-[a-f0-9]{42}",
"sections": ["res_headers", "res_body"]
},
{
"description": "Newrelic Synthetics Location Key",
"regex": "NRSP-[a-z]{2}[0-9]{2}[a-f0-9]{31}",
"sections": ["res_headers", "res_body"]
},
{
"description": "Newrelicpersonalapikey",
"regex": "(?:newrelic).{0,40}\\b([A-Za-z0-9_\\.]{4}-[A-Za-z0-9_\\.]{42})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Newsapi",
"regex": "(?:newsapi).{0,40}\\b([a-z0-9]{32})",
"sections": ["res_headers", "res_body"]
},
{
"description": "Newscatcher",
"regex": "(?:newscatcher).{0,40}\\b([0-9A-Za-z_]{43})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Nexmoapikey - 1",
"regex": "(?:nexmo).{0,40}\\b([A-Za-z0-9_-]{8})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Nexmoapikey - 2",
"regex": "(?:nexmo).{0,40}\\b([A-Za-z0-9_-]{16})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Nftport",
"regex": "(?:nftport).{0,40}\\b([a-z0-9]{8}-[a-z0-9]{4}-[a-z0-9]{4}-[a-z0-9]{4}-[a-z0-9]{12})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Nicereply",
"regex": "(?:nicereply).{0,40}\\b([0-9a-f]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Nimble",
"regex": "(?:nimble).{0,40}\\b([a-zA-Z0-9]{30})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Nitro",
"regex": "(?:nitro).{0,40}\\b([0-9a-f]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Noticeable",
"regex": "(?:noticeable).{0,40}\\b([0-9a-zA-Z]{20})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Notion",
"regex": "\\b(secret_[A-Za-z0-9]{43})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Nozbeteams",
"regex": "(?:nozbe|nozbeteams).{0,40}\\b([0-9A-Za-z]{16}_[0-9A-Za-z\\-_]{64}[ \\r\\n]{1})",
"sections": ["res_headers", "res_body"]
},
{
"description": "Numverify",
"regex": "(?:numverify).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Nutritionix - 1",
"regex": "(?:nutritionix).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Nutritionix - 2",
"regex": "(?:nutritionix).{0,40}\\b([a-z0-9]{8})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Nylas",
"regex": "(?:nylas).{0,40}\\b([0-9A-Za-z]{30})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Oanda",
"regex": "(?:oanda).{0,40}\\b([a-zA-Z0-9]{24})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Omnisend",
"regex": "(?:omnisend).{0,40}\\b([a-z0-9A-Z-]{75})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Onedesk - 1",
"regex": "(?:onedesk).{0,40}\\b([a-zA-Z0-9!=@#$%^]{8,64})",
"sections": ["res_headers", "res_body"]
},
{
"description": "Onelogin - 2",
"regex": "secret[a-zA-Z0-9_' \"=]{0,20}([a-z0-9]{64})",
"sections": ["res_headers", "res_body"]
},
{
"description": "Onepagecrm - 1",
"regex": "(?:onepagecrm).{0,40}\\b([a-zA-Z0-9=]{44})",
"sections": ["res_headers", "res_body"]
},
{
"description": "Onepagecrm - 2",
"regex": "(?:onepagecrm).{0,40}\\b([a-z0-9]{24})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Onwaterio",
"regex": "(?:onwater).{0,40}\\b([a-zA-Z0-9_-]{20})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Oopspam",
"regex": "(?:oopspam).{0,40}\\b([a-zA-Z0-9]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Opencagedata",
"regex": "(?:opencagedata).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Opengraphr",
"regex": "(?:opengraphr).{0,40}\\b([0-9Aa-zA-Z]{80})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Openuv",
"regex": "(?:openuv).{0,40}\\b([0-9a-z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Openweather",
"regex": "(?:openweather).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Optimizely",
"regex": "(?:optimizely).{0,40}\\b([0-9A-Za-z-:]{54})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Owlbot",
"regex": "(?:owlbot).{0,40}\\b([a-z0-9]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "PGP private key block",
"regex": "-----BEGIN PGP PRIVATE KEY BLOCK-----",
"sections": ["res_headers", "res_body"]
},
{
"description": "Pagerdutyapikey",
"regex": "(?:pagerduty).{0,40}\\b([a-z]{1}\\+[a-zA-Z]{9}\\-[a-z]{2}\\-[a-z0-9]{5})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Pandadoc",
"regex": "(?:pandadoc).{0,40}\\b([a-zA-Z0-9]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Pandascore",
"regex": "(?:pandascore).{0,40}([ \\r\\n]{0,1}[0-9A-Za-z\\-\\_]{51}[ \\r\\n]{1})",
"sections": ["res_headers", "res_body"]
},
{
"description": "Paralleldots",
"regex": "(?:paralleldots).{0,40}\\b([0-9A-Za-z]{43})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Partnerstack",
"regex": "(?:partnerstack).{0,40}\\b([0-9A-Za-z]{64})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Passbase",
"regex": "(?:passbase).{0,40}\\b([a-zA-Z0-9]{128})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Password in URL",
"regex": "[a-zA-Z]{3,10}://[^/\\s:@]{3,20}:[^/\\s:@]{3,20}@.{1,100}[\"'\\s]",
"sections": ["res_headers", "res_body"]
},
{
"description": "Pastebin",
"regex": "(?:pastebin).{0,40}\\b([a-zA-Z0-9_]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "PayPal Braintree access token",
"regex": "access_token\\$production\\$[0-9a-z]{16}\\$[0-9a-f]{32}",
"sections": ["res_headers", "res_body"]
},
{
"description": "Paymoapp",
"regex": "(?:paymoapp).{0,40}\\b([a-zA-Z0-9]{44})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Paymongo",
"regex": "(?:paymongo).{0,40}\\b([a-zA-Z0-9_]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Paystack",
"regex": "\\b(sk\\_[a-z]{1,}\\_[A-Za-z0-9]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Pdflayer",
"regex": "(?:pdflayer).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Pdfshift",
"regex": "(?:pdfshift).{0,40}\\b([0-9a-f]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Peopledatalabs",
"regex": "(?:peopledatalabs).{0,40}\\b([a-z0-9]{64})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Pepipost",
"regex": "(?:pepipost|netcore).{0,40}\\b([a-zA-Z-0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Picatic API key",
"regex": "sk_live_[0-9a-z]{32}",
"sections": ["res_headers", "res_body"]
},
{
"description": "Pipedream",
"regex": "(?:pipedream).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Pipedrive",
"regex": "(?:pipedrive).{0,40}\\b([a-zA-Z0-9]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Pivotaltracker",
"regex": "(?:pivotal).{0,40}([a-z0-9]{32})",
"sections": ["res_headers", "res_body"]
},
{
"description": "Pixabay",
"regex": "(?:pixabay).{0,40}\\b([a-z0-9-]{34})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Plaidkey - 1",
"regex": "(?:plaid).{0,40}\\b([a-z0-9]{24})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Plaidkey - 2",
"regex": "(?:plaid).{0,40}\\b([a-z0-9]{30})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Planviewleankit - 1",
"regex": "(?:planviewleankit|planview).{0,40}\\b([0-9a-f]{128})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Planviewleankit - 2",
"regex": "(?:planviewleankit|planview).{0,40}(?:subdomain).\\b([a-zA-Z][a-zA-Z0-9.-]{1,23}[a-zA-Z0-9])\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Planyo",
"regex": "(?:planyo).{0,40}\\b([0-9a-z]{62})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Plivo - 1",
"regex": "(?:plivo).{0,40}\\b([A-Za-z0-9_-]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Plivo - 2",
"regex": "(?:plivo).{0,40}\\b([A-Z]{20})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Poloniex - 1",
"regex": "(?:poloniex).{0,40}\\b([0-9a-f]{128})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Poloniex - 2",
"regex": "(?:poloniex).{0,40}\\b([0-9A-Z]{8}-[0-9A-Z]{8}-[0-9A-Z]{8}-[0-9A-Z]{8})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Polygon",
"regex": "(?:polygon).{0,40}\\b([a-z0-9A-Z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Positionstack",
"regex": "(?:positionstack).{0,40}\\b([a-zA-Z0-9_]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Postageapp",
"regex": "(?:postageapp).{0,40}\\b([0-9A-Za-z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Posthog",
"regex": "\\b(phc_[a-zA-Z0-9_]{43})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Postman",
"regex": "\\b(PMAK-[a-zA-Z-0-9]{59})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Postmark",
"regex": "(?:postmark).{0,40}\\b([0-9a-z]{8}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{12})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Powrbot",
"regex": "(?:powrbot).{0,40}\\b([a-z0-9A-Z]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Privatekey",
"regex": "-----\\s*?BEGIN[ A-Z0-9_-]*?PRIVATE KEY\\s*?-----[\\s\\S]*?----\\s*?END[ A-Z0-9_-]*? PRIVATE KEY\\s*?-----",
"sections": ["res_headers", "res_body"]
},
{
"description": "Prospectcrm",
"regex": "(?:prospect).{0,40}\\b([a-z0-9-]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Prospectio",
"regex": "(?:prospect).{0,40}\\b([a-z0-9A-Z-]{50})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Protocolsio",
"regex": "(?:protocols).{0,40}\\b([a-z0-9]{64})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Proxycrawl",
"regex": "(?:proxycrawl).{0,40}\\b([a-zA-Z0-9_]{22})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Pubnubpublishkey - 1",
"regex": "\\b(sub-c-[0-9a-z]{8}-[a-z]{4}-[a-z0-9]{4}-[a-z0-9]{4}-[a-z0-9]{12})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Pubnubpublishkey - 2",
"regex": "\\b(pub-c-[0-9a-z]{8}-[0-9a-z]{4}-[a-z0-9]{4}-[a-z0-9]{4}-[a-z0-9]{12})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Purestake",
"regex": "(?:purestake).{0,40}\\b([a-zA-Z0-9]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Pushbulletapikey",
"regex": "(?:pushbullet).{0,40}\\b([A-Za-z0-9_\\.]{34})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Pusherchannelkey - 2",
"regex": "(?:pusher).{0,40}\\b([a-z0-9]{20})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Pusherchannelkey - 3",
"regex": "(?:pusher).{0,40}\\b([0-9]{7})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "PyPI upload token",
"regex": "pypi-AgEIcHlwaS5vcmc[A-Za-z0-9-_]{50,1000}",
"sections": ["res_headers", "res_body"]
},
{
"description": "Qualaroo",
"regex": "(?:qualaroo).{0,40}\\b([a-z0-9A-Z=]{64})",
"sections": ["res_headers", "res_body"]
},
{
"description": "Qubole",
"regex": "(?:qubole).{0,40}\\b([0-9a-z]{64})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Quickmetrics",
"regex": "(?:quickmetrics).{0,40}\\b([a-zA-Z0-9_-]{22})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "RKCS8",
"regex": "-----BEGIN PRIVATE KEY-----",
"sections": ["res_headers", "res_body"]
},
{
"description": "RSA private key",
"regex": "-----BEGIN RSA PRIVATE KEY-----",
"sections": ["res_headers", "res_body"]
},
{
"description": "Rapidapi",
"regex": "(?:rapidapi).{0,40}\\b([A-Za-z0-9_-]{50})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Raven",
"regex": "(?:raven).{0,40}\\b([A-Z0-9-]{16})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Rawg",
"regex": "(?:rawg).{0,40}\\b([0-9Aa-z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Razorpay - 1",
"regex": "\\brzp_\\w{2,6}_\\w{10,20}\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Readme",
"regex": "(?:readme).{0,40}\\b([a-zA-Z0-9_]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Reallysimplesystems",
"regex": "\\b(ey[a-zA-Z0-9-._]{153}.ey[a-zA-Z0-9-._]{916,1000})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Rebrandly",
"regex": "(?:rebrandly).{0,40}\\b([a-zA-Z0-9_]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Refiner",
"regex": "(?:refiner).{0,40}\\b([0-9Aa-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Repairshopr - 1",
"regex": "(?:repairshopr).{0,40}\\b([a-zA-Z0-9_.!+$#^*]{3,32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Repairshopr - 2",
"regex": "(?:repairshopr).{0,40}\\b([a-zA-Z0-9-]{51})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Restpack",
"regex": "(?:restpack).{0,40}\\b([a-zA-Z0-9]{48})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Restpackhtmltopdfapi",
"regex": "(?:restpack).{0,40}\\b([0-9A-Za-z]{48})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Rev - 1",
"regex": "(?:rev).{0,40}\\b([0-9a-zA-Z\\/\\+]{27}\\=[ \\r\\n]{1})",
"sections": ["res_headers", "res_body"]
},
{
"description": "Revampcrm - 1",
"regex": "(?:revamp).{0,40}\\b([a-zA-Z0-9]{40}\\b)",
"sections": ["res_headers", "res_body"]
},
{
"description": "Ringcentral - 1",
"regex": "(?:ringcentral).{0,40}\\b(https://www.[0-9A-Za-z_-]{1,}.com)\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Ringcentral - 2",
"regex": "(?:ringcentral).{0,40}\\b([0-9A-Za-z_-]{22})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Ritekit",
"regex": "(?:ritekit).{0,40}\\b([0-9a-f]{44})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Roaring",
"regex": "(?:roaring).{0,40}\\b([0-9A-Za-z_-]{28})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Rocketreach",
"regex": "(?:rocketreach).{0,40}\\b([a-z0-9-]{39})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Roninapp - 2",
"regex": "(?:ronin).{0,40}\\b([0-9a-zA-Z]{26})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Route4me",
"regex": "(?:route4me).{0,40}\\b([0-9A-Z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Rownd - 1",
"regex": "(?:rownd).{0,40}\\b([a-z0-9]{8}\\-[a-z0-9]{4}\\-[a-z0-9]{4}\\-[a-z0-9]{4}\\-[a-z0-9]{12})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Rownd - 2",
"regex": "(?:rownd).{0,40}\\b([a-z0-9]{48})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Rownd - 3",
"regex": "(?:rownd).{0,40}\\b([0-9]{18})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Rubygems",
"regex": "\\b(rubygems_[a-zA0-9]{48})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Runrunit - 1",
"regex": "(?:runrunit).{0,40}\\b([0-9a-f]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Runrunit - 2",
"regex": "(?:runrunit).{0,40}\\b([0-9A-Za-z]{18,20})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "SSH",
"regex": "-----BEGIN OPENSSH PRIVATE KEY-----",
"sections": ["res_headers", "res_body"]
},
{
"description": "SSH (DSA) private key",
"regex": "-----BEGIN DSA PRIVATE KEY-----",
"sections": ["res_headers", "res_body"]
},
{
"description": "Salesblink",
"regex": "(?:salesblink).{0,40}\\b([a-zA-Z]{16})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Salescookie",
"regex": "(?:salescookie).{0,40}\\b([a-zA-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Salesflare",
"regex": "(?:salesflare).{0,40}\\b([a-zA-Z0-9_]{45})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Satismeterprojectkey - 1",
"regex": "(?:satismeter).{0,40}\\b([a-zA-Z0-9]{4,20}@[a-zA-Z0-9]{2,12}.[a-zA-Z0-9]{2,12})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Satismeterprojectkey - 2",
"regex": "(?:satismeter).{0,40}\\b([a-zA-Z0-9]{24})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Satismeterprojectkey - 3",
"regex": "(?:satismeter).{0,40}\\b([a-zA-Z0-9!=@#$%^]{6,32})",
"sections": ["res_headers", "res_body"]
},
{
"description": "Satismeterwritekey",
"regex": "(?:satismeter).{0,40}\\b([a-z0-9A-Z]{16})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Saucelabs - 1",
"regex": "\\b(oauth\\-[a-z0-9]{8,}\\-[a-z0-9]{5})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Saucelabs - 2",
"regex": "(?:saucelabs).{0,40}\\b([a-z0-9]{8}\\-[a-z0-9]{4}\\-[a-z0-9]{4}\\-[a-z0-9]{4}\\-[a-z0-9]{12})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Scalewaykey",
"regex": "(?:scaleway).{0,40}\\b([0-9a-z]{8}-[a-z0-9]{4}-[a-z0-9]{4}-[0-9a-z]{4}-[0-9a-z]{12})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Scrapeowl",
"regex": "(?:scrapeowl).{0,40}\\b([0-9a-z]{30})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Scraperapi",
"regex": "(?:scraperapi).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Scraperbox",
"regex": "(?:scraperbox).{0,40}\\b([A-Z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Scrapersite",
"regex": "(?:scrapersite).{0,40}\\b([a-zA-Z0-9]{45})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Scrapestack",
"regex": "(?:scrapestack).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Scrapfly",
"regex": "(?:scrapfly).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Scrapingant",
"regex": "(?:scrapingant).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Scrapingbee",
"regex": "(?:scrapingbee).{0,40}\\b([A-Z0-9]{80})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Screenshotapi",
"regex": "(?:screenshotapi).{0,40}\\b([0-9A-Z]{7}\\-[0-9A-Z]{7}\\-[0-9A-Z]{7}\\-[0-9A-Z]{7})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Screenshotlayer",
"regex": "(?:screenshotlayer).{0,40}\\b([a-zA-Z0-9_]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Securitytrails",
"regex": "(?:securitytrails).{0,40}\\b([a-zA-Z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Segmentapikey",
"regex": "(?:segment).{0,40}\\b([A-Za-z0-9_\\-a-zA-Z]{43}\\.[A-Za-z0-9_\\-a-zA-Z]{43})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Selectpdf",
"regex": "(?:selectpdf).{0,40}\\b([a-z0-9-]{36})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Semaphore",
"regex": "(?:semaphore).{0,40}\\b([0-9a-z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "SendGrid API Key",
"regex": "SG\\.[\\w_]{16,32}\\.[\\w_]{16,64}",
"sections": ["res_headers", "res_body"]
},
{
"description": "Sendbird - 1",
"regex": "(?:sendbird).{0,40}\\b([0-9a-f]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Sendbird - 2",
"regex": "(?:sendbird).{0,40}\\b([0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Sendbirdorganizationapi",
"regex": "(?:sendbird).{0,40}\\b([0-9a-f]{24})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Sendgrid",
"regex": "(?:sendgrid).{0,40}(SG\\.[\\w\\-_]{20,24}\\.[\\w\\-_]{39,50})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Sendinbluev2",
"regex": "\\b(xkeysib\\-[A-Za-z0-9_-]{81})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Sentiment - 1",
"regex": "(?:sentiment).{0,40}\\b([0-9]{17})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Sentiment - 2",
"regex": "(?:sentiment).{0,40}\\b([a-zA-Z0-9]{20})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Sentrytoken",
"regex": "(?:sentry).{0,40}\\b([a-f0-9]{64})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Serphouse",
"regex": "(?:serphouse).{0,40}\\b([0-9A-Za-z]{60})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Serpstack",
"regex": "(?:serpstack).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Sheety - 1",
"regex": "(?:sheety).{0,40}\\b([0-9a-z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Sheety - 2",
"regex": "(?:sheety).{0,40}\\b([0-9a-z]{64})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Sherpadesk",
"regex": "(?:sherpadesk).{0,40}\\b([0-9a-z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Shipday",
"regex": "(?:shipday).{0,40}\\b([a-zA-Z0-9.]{11}[a-zA-Z0-9]{20})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Shodankey",
"regex": "(?:shodan).{0,40}\\b([a-zA-Z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Shopify access token",
"regex": "shpat_[a-fA-F0-9]{32}",
"sections": ["res_headers", "res_body"]
},
{
"description": "Shopify custom app access token",
"regex": "shpca_[a-fA-F0-9]{32}",
"sections": ["res_headers", "res_body"]
},
{
"description": "Shopify private app access token",
"regex": "shppa_[a-fA-F0-9]{32}",
"sections": ["res_headers", "res_body"]
},
{
"description": "Shopify shared secret",
"regex": "shpss_[a-fA-F0-9]{32}",
"sections": ["res_headers", "res_body"]
},
{
"description": "Shortcut",
"regex": "(?:shortcut).{0,40}\\b([0-9a-f-]{36})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Shotstack",
"regex": "(?:shotstack).{0,40}\\b([a-zA-Z0-9]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Shutterstockoauth",
"regex": "(?:shutterstock).{0,40}\\b(v2/[0-9A-Za-z]{388})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Signalwire - 1",
"regex": "\\b([0-9a-z-]{3,64}.signalwire.com)\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Signalwire - 2",
"regex": "(?:signalwire).{0,40}\\b([0-9a-z]{8}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{12})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Signalwire - 3",
"regex": "(?:signalwire).{0,40}\\b([0-9A-Za-z]{50})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Signaturit",
"regex": "(?:signaturit).{0,40}\\b([0-9A-Za-z]{86})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Signupgenius",
"regex": "(?:signupgenius).{0,40}\\b([0-9A-Za-z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Sigopt",
"regex": "(?:sigopt).{0,40}\\b([A-Z0-9]{48})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Simplesat",
"regex": "(?:simplesat).{0,40}\\b([a-z0-9]{40})",
"sections": ["res_headers", "res_body"]
},
{
"description": "Simplynoted",
"regex": "(?:simplynoted).{0,40}\\b([a-zA-Z0-9\\S]{340,360})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Simvoly",
"regex": "(?:simvoly).{0,40}\\b([a-z0-9]{33})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Sinchmessage",
"regex": "(?:sinch).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Sirv - 1",
"regex": "(?:sirv).{0,40}\\b([a-zA-Z0-9\\S]{88})",
"sections": ["res_headers", "res_body"]
},
{
"description": "Sirv - 2",
"regex": "(?:sirv).{0,40}\\b([a-zA-Z0-9]{26})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Siteleaf",
"regex": "(?:siteleaf).{0,40}\\b([0-9Aa-z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Skrappio",
"regex": "(?:skrapp).{0,40}\\b([a-z0-9A-Z]{42})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Skybiometry",
"regex": "(?:skybiometry).{0,40}\\b([0-9a-z]{25,26})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Slack",
"regex": "xox[baprs]-[0-9a-zA-Z]{10,48}",
"sections": ["res_headers", "res_body"]
},
{
"description": "Slack Token",
"regex": "(xox[pborsa]-[0-9]{12}-[0-9]{12}-[0-9]{12}-[a-z0-9]{32})",
"sections": ["res_headers", "res_body"]
},
{
"description": "Slack Webhook",
"regex": "https://hooks.slack.com/services/T[a-zA-Z0-9_]{8,10}/B[a-zA-Z0-9_]{8,12}/[a-zA-Z0-9_]{23,24}",
"sections": ["res_headers", "res_body"]
},
{
"description": "Slack access token",
"regex": "xoxb-[0-9A-Za-z\\-]{51}",
"sections": ["res_headers", "res_body"]
},
{
"description": "Slackwebhook",
"regex": "(https:\\/\\/hooks.slack.com\\/services\\/[A-Za-z0-9+\\/]{44,46})",
"sections": ["res_headers", "res_body"]
},
{
"description": "Smartsheets",
"regex": "(?:smartsheets).{0,40}\\b([a-zA-Z0-9]{37})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Smartystreets - 1",
"regex": "(?:smartystreets).{0,40}\\b([a-zA-Z0-9]{20})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Smartystreets - 2",
"regex": "(?:smartystreets).{0,40}\\b([a-z0-9-]{36})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Smooch - 1",
"regex": "(?:smooch).{0,40}\\b(act_[0-9a-z]{24})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Smooch - 2",
"regex": "(?:smooch).{0,40}\\b([0-9a-zA-Z_-]{86})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Snipcart",
"regex": "(?:snipcart).{0,40}\\b([0-9A-Za-z_]{75})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Snykkey",
"regex": "(?:snyk).{0,40}\\b([0-9a-z]{8}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{12})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "SonarQube Token",
"regex": "sonar.{0,50}(?:\"|'|`)?[0-9a-f]{40}(?:\"|'|`)?",
"sections": ["res_headers", "res_body"]
},
{
"description": "Splunkobservabilitytoken",
"regex": "(?:splunk).{0,40}\\b([a-z0-9A-Z]{22})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Spoonacular",
"regex": "(?:spoonacular).{0,40}\\b([0-9a-z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Sportsmonk",
"regex": "(?:sportsmonk).{0,40}\\b([0-9a-zA-Z]{60})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Square",
"regex": "(?:square).{0,40}(EAAA[a-zA-Z0-9\\-\\+\\=]{60})",
"sections": ["res_headers", "res_body"]
},
{
"description": "Square OAuth Secret",
"regex": "sq0csp-[0-9A-Za-z\\-_]{43}",
"sections": ["res_headers", "res_body"]
},
{
"description": "Square access token",
"regex": "sq0atp-[0-9A-Za-z\\-_]{22}",
"sections": ["res_headers", "res_body"]
},
{
"description": "Squareapp - 1",
"regex": "[\\w\\-]*sq0i[a-z]{2}-[0-9A-Za-z\\-_]{22,43}",
"sections": ["res_headers", "res_body"]
},
{
"description": "Squareapp - 2",
"regex": "[\\w\\-]*sq0c[a-z]{2}-[0-9A-Za-z\\-_]{40,50}",
"sections": ["res_headers", "res_body"]
},
{
"description": "Squarespace",
"regex": "(?:squarespace).{0,40}\\b([0-9Aa-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Squareup",
"regex": "\\b(sq0idp-[0-9A-Za-z]{22})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Sslmate",
"regex": "(?:sslmate).{0,40}\\b([a-zA-Z0-9]{36})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Stitchdata",
"regex": "(?:stitchdata).{0,40}\\b([0-9a-z_]{35})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Stockdata",
"regex": "(?:stockdata).{0,40}\\b([0-9A-Za-z]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Storecove",
"regex": "(?:storecove).{0,40}\\b([a-zA-Z0-9_-]{43})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Stormglass",
"regex": "(?:stormglass).{0,40}\\b([0-9Aa-z-]{73})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Storyblok",
"regex": "(?:storyblok).{0,40}\\b([0-9A-Za-z]{22}t{2})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Storychief",
"regex": "(?:storychief).{0,40}\\b([a-zA-Z0-9_\\-.]{940,1000})",
"sections": ["res_headers", "res_body"]
},
{
"description": "Strava - 1",
"regex": "(?:strava).{0,40}\\b([0-9]{5})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Strava - 2",
"regex": "(?:strava).{0,40}\\b([0-9a-z]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Streak",
"regex": "(?:streak).{0,40}\\b([0-9Aa-f]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Stripe",
"regex": "[rs]k_live_[a-zA-Z0-9]{20,30}",
"sections": ["res_headers", "res_body"]
},
{
"description": "Stripe API Key - 1",
"regex": "sk_live_[0-9a-zA-Z]{24}",
"sections": ["res_headers", "res_body"]
},
{
"description": "Stripe API key - 2",
"regex": "stripe[sr]k_live_[0-9a-zA-Z]{24}",
"sections": ["res_headers", "res_body"]
},
{
"description": "Stripe API key - 3",
"regex": "stripe[sk|rk]_live_[0-9a-zA-Z]{24}",
"sections": ["res_headers", "res_body"]
},
{
"description": "Stripe Public Live Key",
"regex": "pk_live_[0-9a-z]{24}",
"sections": ["res_headers", "res_body"]
},
{
"description": "Stripe Public Test Key",
"regex": "pk_test_[0-9a-z]{24}",
"sections": ["res_headers", "res_body"]
},
{
"description": "Stripe Restriced Key",
"regex": "rk_(?:live|test)_[0-9a-zA-Z]{24}",
"sections": ["res_headers", "res_body"]
},
{
"description": "Stripe Restricted API Key",
"regex": "rk_live_[0-9a-zA-Z]{24}",
"sections": ["res_headers", "res_body"]
},
{
"description": "Stripe Secret Key",
"regex": "sk_(?:live|test)_[0-9a-zA-Z]{24}",
"sections": ["res_headers", "res_body"]
},
{
"description": "Stripe Secret Live Key",
"regex": "(sk|rk)_live_[0-9a-z]{24}",
"sections": ["res_headers", "res_body"]
},
{
"description": "Stripe Secret Test Key",
"regex": "(sk|rk)_test_[0-9a-z]{24}",
"sections": ["res_headers", "res_body"]
},
{
"description": "Stytch - 1",
"regex": "(?:stytch).{0,40}\\b([a-zA-Z0-9-_]{47}=)",
"sections": ["res_headers", "res_body"]
},
{
"description": "Stytch - 2",
"regex": "(?:stytch).{0,40}\\b([a-z0-9-]{49})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Sugester - 1",
"regex": "(?:sugester).{0,40}\\b([a-zA-Z0-9_.!+$#^*%]{3,32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Sugester - 2",
"regex": "(?:sugester).{0,40}\\b([a-zA-Z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Sumologickey - 1",
"regex": "(?:sumo).{0,40}\\b([A-Za-z0-9]{14})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Sumologickey - 2",
"regex": "(?:sumo).{0,40}\\b([A-Za-z0-9]{64})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Supernotesapi",
"regex": "(?:supernotes).{0,40}([ \\r\\n]{0,1}[0-9A-Za-z\\-_]{43}[ \\r\\n]{1})",
"sections": ["res_headers", "res_body"]
},
{
"description": "Surveybot",
"regex": "(?:surveybot).{0,40}\\b([A-Za-z0-9-]{80})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Surveysparrow",
"regex": "(?:surveysparrow).{0,40}\\b([a-zA-Z0-9-_]{88})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Survicate",
"regex": "(?:survicate).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Swell - 2",
"regex": "(?:swell).{0,40}\\b([a-zA-Z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Swiftype",
"regex": "(?:swiftype).{0,40}\\b([a-zA-z-0-9]{6}\\_[a-zA-z-0-9]{6}\\-[a-zA-z-0-9]{6})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Tallyfy",
"regex": "(?:tallyfy).{0,40}\\b([0-9A-Za-z]{36}\\.[0-9A-Za-z]{264}\\.[0-9A-Za-z\\-\\_]{683})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Tatumio",
"regex": "(?:tatum).{0,40}\\b([0-9a-z-]{36})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Taxjar",
"regex": "(?:taxjar).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Teamgate - 1",
"regex": "(?:teamgate).{0,40}\\b([a-z0-9]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Teamgate - 2",
"regex": "(?:teamgate).{0,40}\\b([a-zA-Z0-9]{80})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Teamworkcrm",
"regex": "(?:teamwork|teamworkcrm).{0,40}\\b(tkn\\.v1_[0-9A-Za-z]{71}=[ \\r\\n]{1})",
"sections": ["res_headers", "res_body"]
},
{
"description": "Teamworkdesk",
"regex": "(?:teamwork|teamworkdesk).{0,40}\\b(tkn\\.v1_[0-9A-Za-z]{71}=[ \\r\\n]{1})",
"sections": ["res_headers", "res_body"]
},
{
"description": "Teamworkspaces",
"regex": "(?:teamwork|teamworkspaces).{0,40}\\b(tkn\\.v1_[0-9A-Za-z]{71}=[ \\r\\n]{1})",
"sections": ["res_headers", "res_body"]
},
{
"description": "Technicalanalysisapi",
"regex": "(?:technicalanalysisapi).{0,40}\\b([A-Z0-9]{48})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Telegram Bot API Key",
"regex": "[0-9]+:AA[0-9A-Za-z\\-_]{33}",
"sections": ["res_headers", "res_body"]
},
{
"description": "Telegram Secret",
"regex": "d{5,}:A[0-9a-z_-]{34,34}",
"sections": ["res_headers", "res_body"]
},
{
"description": "Telegrambottoken",
"regex": "(?:telegram).{0,40}\\b([0-9]{8,10}:[a-zA-Z0-9_-]{35})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Telnyx",
"regex": "(?:telnyx).{0,40}\\b(KEY[0-9A-Za-z_-]{55})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Terraformcloudpersonaltoken",
"regex": "\\b([A-Za-z0-9]{14}.atlasv1.[A-Za-z0-9]{67})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Text2data",
"regex": "(?:text2data).{0,40}\\b([0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Textmagic - 1",
"regex": "(?:textmagic).{0,40}\\b([0-9A-Za-z]{30})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Textmagic - 2",
"regex": "(?:textmagic).{0,40}\\b([0-9A-Za-z]{1,25})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Theoddsapi",
"regex": "(?:theoddsapi|the-odds-api).{0,40}\\b([0-9a-f]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Thinkific - 1",
"regex": "(?:thinkific).{0,40}\\b([0-9a-f]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Thinkific - 2",
"regex": "(?:thinkific).{0,40}\\b([0-9A-Za-z]{4,40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Thousandeyes - 1",
"regex": "(?:thousandeyes).{0,40}\\b([a-zA-Z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Thousandeyes - 2",
"regex": "(?:thousandeyes).{0,40}\\b([a-zA-Z0-9]{3,20}@[a-zA-Z0-9]{2,12}.[a-zA-Z0-9]{2,5})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Ticketmaster",
"regex": "(?:ticketmaster).{0,40}\\b([a-zA-Z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Tiingo",
"regex": "(?:tiingo).{0,40}\\b([0-9a-z]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Timezoneapi",
"regex": "(?:timezoneapi).{0,40}\\b([a-zA-Z0-9]{20})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Tly",
"regex": "(?:tly).{0,40}\\b([0-9A-Za-z]{60})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Tmetric",
"regex": "(?:tmetric).{0,40}\\b([0-9A-Z]{64})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Todoist",
"regex": "(?:todoist).{0,40}\\b([0-9a-z]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Toggltrack",
"regex": "(?:toggl).{0,40}\\b([0-9Aa-z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Tomorrowio",
"regex": "(?:tomorrow).{0,40}\\b([a-zA-Z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Tomtom",
"regex": "(?:tomtom).{0,40}\\b([0-9Aa-zA-Z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Tradier",
"regex": "(?:tradier).{0,40}\\b([a-zA-Z0-9]{28})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Travelpayouts",
"regex": "(?:travelpayouts).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Travisci",
"regex": "(?:travis).{0,40}\\b([a-zA-Z0-9A-Z_]{22})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Trello URL",
"regex": "https://trello.com/b/[0-9a-z]/[0-9a-z_-]+",
"sections": ["res_headers", "res_body"]
},
{
"description": "Trelloapikey - 2",
"regex": "(?:trello).{0,40}\\b([a-zA-Z-0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Twelvedata",
"regex": "(?:twelvedata).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Twilio - 1",
"regex": "\\bAC[0-9a-f]{32}\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Twilio API Key",
"regex": "SK[0-9a-fA-F]{32}",
"sections": ["res_headers", "res_body"]
},
{
"description": "Twitter Client ID",
"regex": "twitter[0-9a-z]{18,25}",
"sections": ["res_headers", "res_body"]
},
{
"description": "Twitter Secret Key",
"regex": "twitter[0-9a-z]{35,44}",
"sections": ["res_headers", "res_body"]
},
{
"description": "Tyntec",
"regex": "(?:tyntec).{0,40}\\b([a-zA-Z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Typeform",
"regex": "(?:typeform).{0,40}\\b([0-9A-Za-z]{44})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Ubidots",
"regex": "\\b(BBFF-[0-9a-zA-Z]{30})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Unifyid",
"regex": "(?:unify).{0,40}\\b([0-9A-Za-z_=-]{44})",
"sections": ["res_headers", "res_body"]
},
{
"description": "Unplugg",
"regex": "(?:unplu).{0,40}\\b([a-z0-9]{64})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Unsplash",
"regex": "(?:unsplash).{0,40}\\b([0-9A-Za-z_]{43})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Upcdatabase",
"regex": "(?:upcdatabase).{0,40}\\b([A-Z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Uplead",
"regex": "(?:uplead).{0,40}\\b([a-z0-9-]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Uploadcare",
"regex": "(?:uploadcare).{0,40}\\b([a-z0-9]{20})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Upwave",
"regex": "(?:upwave).{0,40}\\b([0-9a-z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Urlscan",
"regex": "(?:urlscan).{0,40}\\b([a-z0-9-]{36})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Userstack",
"regex": "(?:userstack).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Vatlayer",
"regex": "(?:vatlayer).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Vercel",
"regex": "(?:vercel).{0,40}\\b([a-zA-Z0-9]{24})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Verifier - 1",
"regex": "(?:verifier).{0,40}\\b([a-zA-Z-0-9-]{5,16}\\@[a-zA-Z-0-9]{4,16}\\.[a-zA-Z-0-9]{3,6})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Verifier - 2",
"regex": "(?:verifier).{0,40}\\b([a-z0-9]{96})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Verimail",
"regex": "(?:verimail).{0,40}\\b([A-Z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Veriphone",
"regex": "(?:veriphone).{0,40}\\b([0-9A-Z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Versioneye",
"regex": "(?:versioneye).{0,40}\\b([a-zA-Z0-9-]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Viewneo",
"regex": "(?:viewneo).{0,40}\\b([a-z0-9A-Z]{120,300}.[a-z0-9A-Z]{150,300}.[a-z0-9A-Z-_]{600,800})",
"sections": ["res_headers", "res_body"]
},
{
"description": "Virustotal",
"regex": "(?:virustotal).{0,40}\\b([a-f0-9]{64})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Visualcrossing",
"regex": "(?:visualcrossing).{0,40}\\b([0-9A-Z]{25})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Voicegain",
"regex": "(?:voicegain).{0,40}\\b(ey[0-9a-zA-Z_-]{34}.ey[0-9a-zA-Z_-]{108}.[0-9a-zA-Z_-]{43})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Vouchery - 1",
"regex": "(?:vouchery).{0,40}\\b([a-z0-9-]{36})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Vouchery - 2",
"regex": "(?:vouchery).{0,40}\\b([a-zA-Z0-9-\\S]{2,20})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Vpnapi",
"regex": "(?:vpnapi).{0,40}\\b([a-z0-9A-Z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Vultrapikey",
"regex": "(?:vultr).{0,40} \\b([A-Z0-9]{36})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Vyte",
"regex": "(?:vyte).{0,40}\\b([0-9a-z]{50})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Walkscore",
"regex": "(?:walkscore).{0,40}\\b([0-9a-z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Weatherbit",
"regex": "(?:weatherbit).{0,40}\\b([0-9a-z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Weatherstack",
"regex": "(?:weatherstack).{0,40}\\b([0-9a-z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Webex - 1",
"regex": "(?:error).{0,40}(redirect_uri_mismatch)",
"sections": ["res_headers", "res_body"]
},
{
"description": "Webex - 2",
"regex": "(?:webex).{0,40}\\b([A-Za-z0-9_-]{65})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Webex - 3",
"regex": "(?:webex).{0,40}\\b([A-Za-z0-9_-]{64})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Webflow",
"regex": "(?:webflow).{0,40}\\b([a-zA0-9]{64})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Webscraper",
"regex": "(?:webscraper).{0,40}\\b([a-zA-Z0-9]{60})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Webscraping",
"regex": "(?:webscraping).{0,40}\\b([0-9A-Za-z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Wepay - 2",
"regex": "(?:wepay).{0,40}\\b([a-zA-Z0-9_?]{62})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Whoxy",
"regex": "(?:whoxy).{0,40}\\b([0-9a-z]{33})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Worksnaps",
"regex": "(?:worksnaps).{0,40}\\b([0-9A-Za-z]{40})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Workstack",
"regex": "(?:workstack).{0,40}\\b([0-9Aa-zA-Z]{60})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Worldcoinindex",
"regex": "(?:worldcoinindex).{0,40}\\b([a-zA-Z0-9]{35})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Worldweather",
"regex": "(?:worldweather).{0,40}\\b([0-9a-z]{31})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Wrike",
"regex": "(?:wrike).{0,40}\\b(ey[a-zA-Z0-9-._]{333})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Yandex",
"regex": "(?:yandex).{0,40}\\b([a-z0-9A-Z.]{83})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Youneedabudget",
"regex": "(?:youneedabudget).{0,40}\\b([0-9a-f]{64})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Yousign",
"regex": "(?:yousign).{0,40}\\b([0-9a-z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Zapierwebhook",
"regex": "(https:\\/\\/hooks.zapier.com\\/hooks\\/catch\\/[A-Za-z0-9\\/]{16})",
"sections": ["res_headers", "res_body"]
},
{
"description": "Zendeskapi - 3",
"regex": "(?:zendesk).{0,40}([A-Za-z0-9_-]{40})",
"sections": ["res_headers", "res_body"]
},
{
"description": "Zenkitapi",
"regex": "(?:zenkit).{0,40}\\b([0-9a-z]{8}\\-[0-9A-Za-z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Zenscrape",
"regex": "(?:zenscrape).{0,40}\\b([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Zenserp",
"regex": "(?:zenserp).{0,40}\\b([0-9a-z-]{36})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Zeplin",
"regex": "(?:zeplin).{0,40}\\b([a-zA-Z0-9-.]{350,400})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Zerobounce",
"regex": "(?:zerobounce).{0,40}\\b([a-z0-9]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Zipapi - 1",
"regex": "(?:zipapi).{0,40}\\b([a-zA-Z0-9!=@#$%^]{7,})",
"sections": ["res_headers", "res_body"]
},
{
"description": "Zipapi - 3",
"regex": "(?:zipapi).{0,40}\\b([0-9a-z]{32})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Zipcodeapi",
"regex": "(?:zipcodeapi).{0,40}\\b([a-zA-Z0-9]{64})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "Zonkafeedback",
"regex": "(?:zonka).{0,40}\\b([A-Za-z0-9]{36})\\b",
"sections": ["res_headers", "res_body"]
},
{
"description": "amazon_secret_access_key",
"regex": "amazon[_-]?secret[_-]?access[_-]?key(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "ansible_vault_password",
"regex": "ansible[_-]?vault[_-]?password(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "chrome_client_secret",
"regex": "chrome[_-]?client[_-]?secret(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "chrome_refresh_token",
"regex": "chrome[_-]?refresh[_-]?token(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "ci_deploy_password",
"regex": "ci[_-]?deploy[_-]?password(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "ci_project_url",
"regex": "ci[_-]?project[_-]?url(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "ci_registry_user",
"regex": "ci[_-]?registry[_-]?user(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "ci_server_name",
"regex": "ci[_-]?server[_-]?name(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "cloud_api_key",
"regex": "cloud[_-]?api[_-]?key(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "cloudflare_api_key",
"regex": "cloudflare[_-]?api[_-]?key(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "cloudflare_auth_email",
"regex": "cloudflare[_-]?auth[_-]?email(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "consumer_key",
"regex": "consumer[_-]?key(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "database_username",
"regex": "database[_-]?username(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "db_password",
"regex": "db[_-]?password(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "db_pw",
"regex": "db[_-]?pw(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "docker_hub_password",
"regex": "docker[_-]?hub[_-]?password(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "docker_passwd",
"regex": "docker[_-]?passwd(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "docker_password",
"regex": "docker[_-]?password(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "docker_token",
"regex": "docker[_-]?token(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "dockerhub_password",
"regex": "dockerhub[_-]?password(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "doordash_auth_token",
"regex": "doordash[_-]?auth[_-]?token(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "dropbox_oauth_bearer",
"regex": "dropbox[_-]?oauth[_-]?bearer(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "droplet_travis_password",
"regex": "droplet[_-]?travis[_-]?password(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "env_github_oauth_token",
"regex": "env[_-]?github[_-]?oauth[_-]?token(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "env_heroku_api_key",
"regex": "env[_-]?heroku[_-]?api[_-]?key(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "facebook_access_token",
"regex": "(EAACEdEose0cBA[0-9A-Za-z]+)",
"sections": ["res_headers", "res_body"]
},
{
"description": "firebase_api_json",
"regex": "firebase[_-]?api[_-]?json(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "firebase_api_token",
"regex": "firebase[_-]?api[_-]?token(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "firebase_key",
"regex": "firebase[_-]?key(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "firebase_token",
"regex": "firebase[_-]?token(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "firefox_secret",
"regex": "firefox[_-]?secret(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "ftp_pw",
"regex": "ftp[_-]?pw(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "gh_api_key",
"regex": "gh[_-]?api[_-]?key(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "github_api_key",
"regex": "github[_-]?api[_-]?key(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "github_oauth",
"regex": "github[_-]?oauth(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "github_token",
"regex": "github[_-]?token(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "github_tokens",
"regex": "github[_-]?tokens(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "google_client_id",
"regex": "google[_-]?client[_-]?id(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "google_client_secret",
"regex": "google[_-]?client[_-]?secret(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "google_maps_api_key",
"regex": "google[_-]?maps[_-]?api[_-]?key(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "google_oauth",
"regex": "(ya29.[0-9A-Za-z-_]+)",
"sections": ["res_headers", "res_body"]
},
{
"description": "mailchimp",
"regex": "(W(?:[a-f0-9]{32}(-us[0-9]{1,2}))a-zA-Z0-9)",
"sections": ["res_headers", "res_body"]
},
{
"description": "mailgun_priv_key",
"regex": "mailgun[_-]?priv[_-]?key(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "mailgun_secret_api_key",
"regex": "mailgun[_-]?secret[_-]?api[_-]?key(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "master_password",
"regex": "(master_password).+",
"sections": ["res_headers", "res_body"]
},
{
"description": "mg_public_api_key",
"regex": "mg[_-]?public[_-]?api[_-]?key(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "mysql_root_password",
"regex": "mysql[_-]?root[_-]?password(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "netlify_api_key",
"regex": "netlify[_-]?api[_-]?key(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "rabbitmq_password",
"regex": "rabbitmq[_-]?password(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "rediscloud_url",
"regex": "rediscloud[_-]?url(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "release_gh_token",
"regex": "release[_-]?gh[_-]?token(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "rubygems_auth_token",
"regex": "rubygems[_-]?auth[_-]?token(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "travis_secure_env_vars",
"regex": "travis[_-]?secure[_-]?env[_-]?vars(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "travis_token",
"regex": "travis[_-]?token(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "twilio_api_key",
"regex": "twilio[_-]?api[_-]?key(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "twilio_api_secret",
"regex": "twilio[_-]?api[_-]?secret(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "twilio_chat_account_api_service",
"regex": "twilio[_-]?chat[_-]?account[_-]?api[_-]?service(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "twilio_token",
"regex": "twilio[_-]?token(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "twitter_consumer_key",
"regex": "twitter[_-]?consumer[_-]?key(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "twitter_consumer_secret",
"regex": "twitter[_-]?consumer[_-]?secret(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "twitteroauthaccesssecret",
"regex": "twitteroauthaccesssecret(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "twitteroauthaccesstoken",
"regex": "twitteroauthaccesstoken(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "urban_master_secret",
"regex": "urban[_-]?master[_-]?secret(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "use_ssh",
"regex": "use[_-]?ssh(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "user_assets_access_key_id",
"regex": "user[_-]?assets[_-]?access[_-]?key[_-]?id(=| =|:| :)",
"sections": ["res_headers", "res_body"]
},
{
"description": "virustotal_apikey",
"regex": "virustotal[_-]?apikey(=| =|:| :)",
"sections": ["res_headers", "res_body"]
}
]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment