Update regexs

RhinoSecurityLabs · Jan 17, 2024 · aceca30 · aceca30
1 parent 3f30131
commit aceca30
Showing 1 changed file with 3 additions and 4 deletions.
diff --git a/pacu/core/secretfinder/regexs.json b/pacu/core/secretfinder/regexs.json
@@ -9,8 +9,8 @@
     "GitHub Personal Token": "ghp_[a-zA-Z0-9]{36}",
     "GitHub Actions Token": "ghs_[a-zA-Z0-9]{36}",
     "GitHub Fine-grained Token": "github_pat_[a-zA-Z0-9]{22}_[a-zA-Z0-9]{59}",
-    "Generic API Key": "[a|A][p|P][i|I][_]?[k|K][e|E][y|Y].*['|\"][0-9a-zA-Z]{32,45}['|\"]",
-    "Generic Secret": "[s|S][e|E][c|C][r|R][e|E][t|T].*['|\"][0-9a-zA-Z]{32,45}['|\"]",
+    "Generic API Key": "[a|A][p|P][i|I].?[k|K][e|E][y|Y].*['|\"][a-zA-Z0-9!@#$%^*()&]{0,60}['|\"]",
+    "Generic Secret": "['|\"][s|S][e|E][c|C][r|R][e|E][t|T].*['|\"].*[a-zA-Z0-9!@#$%^*()&]{0,60}['|\"]",
     "Google API Key": "AIza[0-9A-Za-z\\-_]{35}",
     "Google Cloud Platform API Key": "AIza[0-9A-Za-z\\-_]{35}",
     "Google Cloud Platform OAuth": "[0-9]+-[0-9A-Za-z_]{32}\\.apps\\.googleusercontent\\.com",
@@ -29,6 +29,5 @@
     "PGP private key block": "-----BEGIN PGP PRIVATE KEY BLOCK-----",
     "OpenSSH private key": "-----BEGIN OPENSSH PRIVATE KEY-----",
     "Twilio API Key": "SK[0-9a-fA-F]{32}",
-    "Twitter Access Token": "[t|T][w|W][i|I][t|T][t|T][e|E][r|R].*[1-9][0-9]+-[0-9a-zA-Z]{40}",
-    "Twitter OAuth": "[t|T][w|W][i|I][t|T][t|T][e|E][r|R].*['|\"][0-9a-zA-Z]{35,44}['|\"]"
+    "Twitter Access Token": "[t|T][w|W][i|I][t|T][t|T][e|E][r|R].*[1-9][0-9]+-[0-9a-zA-Z]{40}"
 }