Skip to content

Datadog API Key matches incorrectly #231

@SkeletalDemise

Description

@SkeletalDemise
$ poetry run pywhat "b8cedc00407a4c56a3bda1ed605c6fc1"
Matched on: b8cedc00407a4c56a3bda1ed605c6fc1
Name: Datadog API Key
Exploit: Use the command below to verify that the API key is valid:
  $ curl -X GET https://api.datadoghq.com/api/v1/validate -H "Content-Type: application/json" -H "DD-API-KEY:
b8cedc00407a4c56a3bda1ed605c6fc1"

It's too broad and matches on any 32 character hexadecimal string. If it can't be less broad then lower the rarity to 0. This is the regex it uses: ^([a-f0-9]{32})$

Metadata

Metadata

Assignees

No one assigned

    Labels

    Regex issueRegex is not full or matches a lot of false positivesgood first issueGood for newcomers

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions