info leaks: added reference to token-hunter

jstucke · jstucke · commit db790e8b38cc · 2023-11-24T11:56:10.000+01:00
diff --git a/src/plugins/analysis/information_leaks/code/information_leaks.py b/src/plugins/analysis/information_leaks/code/information_leaks.py
@@ -20,6 +20,7 @@
 }
 
 URL_REGEXES = {
+    # based on https://gitlab.com/gitlab-com/gl-security/threatmanagement/redteam/redteam-public/token-hunter regex
     'credentials_in_url': re.compile(
         rb'([a-zA-Z]{3,10}://[a-zA-Z0-9]{3,20}:[^/\s:@]{3,20}@[A-Za-z0-9._/:%?&${}=-]{7,100})["\'\s\x00]?'
     )

Original file line number	Diff line number	Diff line change
`@@ -20,6 +20,7 @@`
`20`	`20`	`}`
`21`	`21`
`22`	`22`	`URL_REGEXES = {`
	`23`	`+ # based on https://gitlab.com/gitlab-com/gl-security/threatmanagement/redteam/redteam-public/token-hunter regex`
`23`	`24`	`'credentials_in_url': re.compile(`
`24`	`25`	`rb'([a-zA-Z]{3,10}://[a-zA-Z0-9]{3,20}:[^/\s:@]{3,20}@[A-Za-z0-9._/:%?&${}=-]{7,100})["\'\s\x00]?'`
`25`	`26`	`)`