-
-
Notifications
You must be signed in to change notification settings - Fork 382
Datadog API Key matches incorrectly #231
Copy link
Copy link
Closed
Labels
Regex issueRegex is not full or matches a lot of false positivesRegex is not full or matches a lot of false positivesgood first issueGood for newcomersGood for newcomers
Description
$ poetry run pywhat "b8cedc00407a4c56a3bda1ed605c6fc1"
Matched on: b8cedc00407a4c56a3bda1ed605c6fc1
Name: Datadog API Key
Exploit: Use the command below to verify that the API key is valid:
$ curl -X GET https://api.datadoghq.com/api/v1/validate -H "Content-Type: application/json" -H "DD-API-KEY:
b8cedc00407a4c56a3bda1ed605c6fc1"
It's too broad and matches on any 32 character hexadecimal string. If it can't be less broad then lower the rarity to 0. This is the regex it uses: ^([a-f0-9]{32})$
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
Regex issueRegex is not full or matches a lot of false positivesRegex is not full or matches a lot of false positivesgood first issueGood for newcomersGood for newcomers