Skip to content

Commit 51ca5a0

Browse files
kelvinBenkelvinBen
authored
Update config.py
正则雪崩导致卡顿，去除部分AK信息，仅开放阿里云的AK，根据自己需求开启
1 parent ec21016 commit 51ca5a0

File tree

1 file changed

+56
-56
lines changed

1 file changed

+56
-56
lines changed

‎config.py

Lines changed: 56 additions & 56 deletions
Original file line numberDiff line numberDiff line change
@@ -59,66 +59,66 @@
5959
r'.*accessKeySecret.*".*"',
6060
r'.*secret.*".*"'
6161
],
62-
"Amazon_AWS_Access_Key_ID": r"([^A-Z0-9]|^)(AKIA|A3T|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{12,}",
63-
"Amazon_AWS_S3_Bucket": [
64-
r"//s3-[a-z0-9-]+\\.amazonaws\\.com/[a-z0-9._-]+",
65-
r"//s3\\.amazonaws\\.com/[a-z0-9._-]+",
66-
r"[a-z0-9.-]+\\.s3-[a-z0-9-]\\.amazonaws\\.com",
67-
r"[a-z0-9.-]+\\.s3-website[.-](eu|ap|us|ca|sa|cn)",
68-
r"[a-z0-9.-]+\\.s3\\.amazonaws\\.com",
69-
r"amzn\\.mws\\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}"
70-
],
71-
"Artifactory_API_Token": r"(?:\\s|=|:|\"|^)AKC[a-zA-Z0-9]{10,}",
72-
"Artifactory_Password": r"(?:\\s|=|:|\"|^)AP[\\dABCDEF][a-zA-Z0-9]{8,}",
62+
#"Amazon_AWS_Access_Key_ID": r"([^A-Z0-9]|^)(AKIA|A3T|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{12,}",
63+
#"Amazon_AWS_S3_Bucket": [
64+
# r"//s3-[a-z0-9-]+\\.amazonaws\\.com/[a-z0-9._-]+",
65+
# r"//s3\\.amazonaws\\.com/[a-z0-9._-]+",
66+
# r"[a-z0-9.-]+\\.s3-[a-z0-9-]\\.amazonaws\\.com",
67+
# r"[a-z0-9.-]+\\.s3-website[.-](eu|ap|us|ca|sa|cn)",
68+
# r"[a-z0-9.-]+\\.s3\\.amazonaws\\.com",
69+
# r"amzn\\.mws\\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}"
70+
#],
71+
#"Artifactory_API_Token": r"(?:\\s|=|:|\"|^)AKC[a-zA-Z0-9]{10,}",
72+
#"Artifactory_Password": r"(?:\\s|=|:|\"|^)AP[\\dABCDEF][a-zA-Z0-9]{8,}",
7373
# "Authorization_Basic": r"basic\\s[a-zA-Z0-9_\\-:\\.=]+",
7474
# "Authorization_Bearer": r"bearer\\s[a-zA-Z0-9_\\-:\\.=]+",
75-
"AWS_API_Key": r"AKIA[0-9A-Z]{16}",
76-
"Basic_Auth_Credentials": r"(?<=:\/\/)[a-zA-Z0-9]+:[a-zA-Z0-9]+@[a-zA-Z0-9]+\\.[a-zA-Z]+",
77-
"Cloudinary_Basic_Auth": r"cloudinary:\/\/[0-9]{15}:[0-9A-Za-z]+@[a-z]+",
78-
"DEFCON_CTF_Flag": r"O{3}\\{.*\\}",
79-
"Discord_BOT_Token": r"((?:N|M|O)[a-zA-Z0-9]{23}\\.[a-zA-Z0-9-_]{6}\\.[a-zA-Z0-9-_]{27})$",
80-
"Facebook_Access_Token": r"EAACEdEose0cBA[0-9A-Za-z]+",
81-
"Facebook_ClientID": r"[f|F][a|A][c|C][e|E][b|B][o|O][o|O][k|K](.{0,20})?['\"][0-9]{13,17}",
82-
"Facebook_OAuth": r"[f|F][a|A][c|C][e|E][b|B][o|O][o|O][k|K].*['|\"][0-9a-f]{32}['|\"]",
83-
"Facebook_Secret_Key": r"([f|F][a|A][c|C][e|E][b|B][o|O][o|O][k|K]|[f|F][b|B])(.{0,20})?['\"][0-9a-f]{32}",
84-
"Firebase": r"[a-z0-9.-]+\\.firebaseio\\.com",
85-
"Generic_API_Key": r"[a|A][p|P][i|I][_]?[k|K][e|E][y|Y].*['|\"][0-9a-zA-Z]{32,45}['|\"]",
86-
"Generic_Secret": r"[s|S][e|E][c|C][r|R][e|E][t|T].*['|\"][0-9a-zA-Z]{32,45}['|\"]",
87-
"GitHub": r"[g|G][i|I][t|T][h|H][u|U][b|B].*['|\"][0-9a-zA-Z]{35,40}['|\"]",
88-
"GitHub_Access_Token": r"([a-zA-Z0-9_-]*:[a-zA-Z0-9_-]+@github.com*)$",
89-
"Google_API_Key": r"AIza[0-9A-Za-z\\-_]{35}",
90-
"Google_Cloud_Platform_OAuth": r"[0-9]+-[0-9A-Za-z_]{32}\\.apps\\.googleusercontent\\.com",
91-
"Google_Cloud_Platform_Service_Account": r"\"type\": \"service_account\"",
92-
"Google_OAuth_Access_Token": r"ya29\\.[0-9A-Za-z\\-_]+",
93-
"HackerOne_CTF_Flag": r"[h|H]1(?:[c|C][t|T][f|F])?\\{.*\\}",
94-
"HackTheBox_CTF_Flag": r"[h|H](?:[a|A][c|C][k|K][t|T][h|H][e|E][b|B][o|O][x|X]|[t|T][b|B])\\{.*\\}$",
95-
"Heroku_API_Key": r"[h|H][e|E][r|R][o|O][k|K][u|U].*[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}",
75+
#"AWS_API_Key": r"AKIA[0-9A-Z]{16}",
76+
#"Basic_Auth_Credentials": r"(?<=:\/\/)[a-zA-Z0-9]+:[a-zA-Z0-9]+@[a-zA-Z0-9]+\\.[a-zA-Z]+",
77+
#"Cloudinary_Basic_Auth": r"cloudinary:\/\/[0-9]{15}:[0-9A-Za-z]+@[a-z]+",
78+
#"DEFCON_CTF_Flag": r"O{3}\\{.*\\}",
79+
#"Discord_BOT_Token": r"((?:N|M|O)[a-zA-Z0-9]{23}\\.[a-zA-Z0-9-_]{6}\\.[a-zA-Z0-9-_]{27})$",
80+
#"Facebook_Access_Token": r"EAACEdEose0cBA[0-9A-Za-z]+",
81+
#"Facebook_ClientID": r"[f|F][a|A][c|C][e|E][b|B][o|O][o|O][k|K](.{0,20})?['\"][0-9]{13,17}",
82+
#"Facebook_OAuth": r"[f|F][a|A][c|C][e|E][b|B][o|O][o|O][k|K].*['|\"][0-9a-f]{32}['|\"]",
83+
#"Facebook_Secret_Key": r"([f|F][a|A][c|C][e|E][b|B][o|O][o|O][k|K]|[f|F][b|B])(.{0,20})?['\"][0-9a-f]{32}",
84+
#"Firebase": r"[a-z0-9.-]+\\.firebaseio\\.com",
85+
#"Generic_API_Key": r"[a|A][p|P][i|I][_]?[k|K][e|E][y|Y].*['|\"][0-9a-zA-Z]{32,45}['|\"]",
86+
#"Generic_Secret": r"[s|S][e|E][c|C][r|R][e|E][t|T].*['|\"][0-9a-zA-Z]{32,45}['|\"]",
87+
#"GitHub": r"[g|G][i|I][t|T][h|H][u|U][b|B].*['|\"][0-9a-zA-Z]{35,40}['|\"]",
88+
#"GitHub_Access_Token": r"([a-zA-Z0-9_-]*:[a-zA-Z0-9_-]+@github.com*)$",
89+
#"Google_API_Key": r"AIza[0-9A-Za-z\\-_]{35}",
90+
#"Google_Cloud_Platform_OAuth": r"[0-9]+-[0-9A-Za-z_]{32}\\.apps\\.googleusercontent\\.com",
91+
#"Google_Cloud_Platform_Service_Account": r"\"type\": \"service_account\"",
92+
#"Google_OAuth_Access_Token": r"ya29\\.[0-9A-Za-z\\-_]+",
93+
#"HackerOne_CTF_Flag": r"[h|H]1(?:[c|C][t|T][f|F])?\\{.*\\}",
94+
#"HackTheBox_CTF_Flag": r"[h|H](?:[a|A][c|C][k|K][t|T][h|H][e|E][b|B][o|O][x|X]|[t|T][b|B])\\{.*\\}$",
95+
#"Heroku_API_Key": r"[h|H][e|E][r|R][o|O][k|K][u|U].*[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}",
9696
# "IP_Address": r"(([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])\\.){3}([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])",
97-
"JSON_Web_Token": r"(?i)^((?=.*[a-z])(?=.*[0-9])(?:[a-z0-9_=]+\\.){2}(?:[a-z0-9_\\-\\+\/=]*))$",
97+
#"JSON_Web_Token": r"(?i)^((?=.*[a-z])(?=.*[0-9])(?:[a-z0-9_=]+\\.){2}(?:[a-z0-9_\\-\\+\/=]*))$",
9898
# "LinkFinder": r"(?:\"|')(((?:[a-zA-Z]{1,10}:\/\/|\/\/)[^\"'\/]{1,}\\.[a-zA-Z]{2,}[^\"']{0,})|((?:\/|\\.\\.\/|\\.\/)[^\"'><,;| *()(%%$^\/\\\\\\[\\]][^\"'><,;|()]{1,})|([a-zA-Z0-9_\\-\/]{1,}\/[a-zA-Z0-9_\\-\/]{1,}\\.(?:[a-zA-Z]{1,4}|action)(?:[\\?|#][^\"|']{0,}|))|([a-zA-Z0-9_\\-\/]{1,}\/[a-zA-Z0-9_\\-\/]{3,}(?:[\\?|#][^\"|']{0,}|))|([a-zA-Z0-9_\\-]{1,}\\.(?:php|asp|aspx|jsp|json|action|html|js|txt|xml)(?:[\\?|#][^\"|']{0,}|)))(?:\"|')",
99-
"Mac_Address": r"(([0-9A-Fa-f]{2}[:]){5}[0-9A-Fa-f]{2}|([0-9A-Fa-f]{2}[-]){5}[0-9A-Fa-f]{2}|([0-9A-Fa-f]{4}[\\.]){2}[0-9A-Fa-f]{4})$",
100-
"MailChimp_API_Key": r"[0-9a-f]{32}-us[0-9]{1,2}",
101-
"Mailgun_API_Key": r"key-[0-9a-zA-Z]{32}",
102-
"Mailto": r"(?<=mailto:)[a-zA-Z0-9_.+-]+@[a-zA-Z0-9-]+\\.[a-zA-Z0-9.-]+",
103-
"Password_in_URL": r"[a-zA-Z]{3,10}://[^/\\s:@]{3,20}:[^/\\s:@]{3,20}@.{1,100}[\"'\\s]",
104-
"PayPal_Braintree_Access_Token": r"access_token\\$production\\$[0-9a-z]{16}\\$[0-9a-f]{32}",
105-
"PGP_private_key_block": r"-----BEGIN PGP PRIVATE KEY BLOCK-----",
106-
"Picatic_API_Key": r"sk_live_[0-9a-z]{32}",
107-
"RSA_Private_Key": r"-----BEGIN RSA PRIVATE KEY-----",
108-
"Slack_Token": r"(xox[p|b|o|a]-[0-9]{12}-[0-9]{12}-[0-9]{12}-[a-z0-9]{32})",
109-
"Slack_Webhook": r"https://hooks.slack.com/services/T[a-zA-Z0-9_]{8}/B[a-zA-Z0-9_]{8}/[a-zA-Z0-9_]{24}",
110-
"Square_Access_Token": r"sq0atp-[0-9A-Za-z\\-_]{22}",
111-
"Square_OAuth_Secret": r"sq0csp-[0-9A-Za-z\\-_]{43}",
112-
"SSH_DSA_Private_Key": r"-----BEGIN DSA PRIVATE KEY-----",
113-
"SSH_EC_Private_Key": r"-----BEGIN EC PRIVATE KEY-----",
114-
"Stripe_API_Key": r"sk_live_[0-9a-zA-Z]{24}",
115-
"Stripe_Restricted_API_Key": r"rk_live_[0-9a-zA-Z]{24}",
116-
"TryHackMe_CTF_Flag": r"[t|T](?:[r|R][y|Y][h|H][a|A][c|C][k|K][m|M][e|E]|[h|H][m|M])\\{.*\\}$",
117-
"Twilio_API_Key": r"SK[0-9a-fA-F]{32}",
118-
"Twitter_Access_Token": r"[t|T][w|W][i|I][t|T][t|T][e|E][r|R].*[1-9][0-9]+-[0-9a-zA-Z]{40}",
119-
"Twitter_ClientID": r"[t|T][w|W][i|I][t|T][t|T][e|E][r|R](.{0,20})?['\"][0-9a-z]{18,25}",
120-
"Twitter_OAuth": r"[t|T][w|W][i|I][t|T][t|T][e|E][r|R].*['|\"][0-9a-zA-Z]{35,44}['|\"]",
121-
"Twitter_Secret_Key": r"[t|T][w|W][i|I][t|T][t|T][e|E][r|R](.{0,20})?['\"][0-9a-z]{35,44}"
99+
#"Mac_Address": r"(([0-9A-Fa-f]{2}[:]){5}[0-9A-Fa-f]{2}|([0-9A-Fa-f]{2}[-]){5}[0-9A-Fa-f]{2}|([0-9A-Fa-f]{4}[\\.]){2}[0-9A-Fa-f]{4})$",
100+
#"MailChimp_API_Key": r"[0-9a-f]{32}-us[0-9]{1,2}",
101+
#"Mailgun_API_Key": r"key-[0-9a-zA-Z]{32}",
102+
#"Mailto": r"(?<=mailto:)[a-zA-Z0-9_.+-]+@[a-zA-Z0-9-]+\\.[a-zA-Z0-9.-]+",
103+
#"Password_in_URL": r"[a-zA-Z]{3,10}://[^/\\s:@]{3,20}:[^/\\s:@]{3,20}@.{1,100}[\"'\\s]",
104+
#"PayPal_Braintree_Access_Token": r"access_token\\$production\\$[0-9a-z]{16}\\$[0-9a-f]{32}",
105+
#"PGP_private_key_block": r"-----BEGIN PGP PRIVATE KEY BLOCK-----",
106+
#"Picatic_API_Key": r"sk_live_[0-9a-z]{32}",
107+
#"RSA_Private_Key": r"-----BEGIN RSA PRIVATE KEY-----",
108+
#"Slack_Token": r"(xox[p|b|o|a]-[0-9]{12}-[0-9]{12}-[0-9]{12}-[a-z0-9]{32})",
109+
#"Slack_Webhook": r"https://hooks.slack.com/services/T[a-zA-Z0-9_]{8}/B[a-zA-Z0-9_]{8}/[a-zA-Z0-9_]{24}",
110+
#"Square_Access_Token": r"sq0atp-[0-9A-Za-z\\-_]{22}",
111+
#"Square_OAuth_Secret": r"sq0csp-[0-9A-Za-z\\-_]{43}",
112+
#"SSH_DSA_Private_Key": r"-----BEGIN DSA PRIVATE KEY-----",
113+
#"SSH_EC_Private_Key": r"-----BEGIN EC PRIVATE KEY-----",
114+
#"Stripe_API_Key": r"sk_live_[0-9a-zA-Z]{24}",
115+
#"Stripe_Restricted_API_Key": r"rk_live_[0-9a-zA-Z]{24}",
116+
#"TryHackMe_CTF_Flag": r"[t|T](?:[r|R][y|Y][h|H][a|A][c|C][k|K][m|M][e|E]|[h|H][m|M])\\{.*\\}$",
117+
#"Twilio_API_Key": r"SK[0-9a-fA-F]{32}",
118+
#"Twitter_Access_Token": r"[t|T][w|W][i|I][t|T][t|T][e|E][r|R].*[1-9][0-9]+-[0-9a-zA-Z]{40}",
119+
#"Twitter_ClientID": r"[t|T][w|W][i|I][t|T][t|T][e|E][r|R](.{0,20})?['\"][0-9a-z]{18,25}",
120+
#"Twitter_OAuth": r"[t|T][w|W][i|I][t|T][t|T][e|E][r|R].*['|\"][0-9a-zA-Z]{35,44}['|\"]",
121+
#"Twitter_Secret_Key": r"[t|T][w|W][i|I][t|T][t|T][e|E][r|R](.{0,20})?['\"][0-9a-z]{35,44}"
122122
}
123123

124124
# 此处配置壳信息

0 commit comments

Comments
 (0)