akto-api-security / akto

Proactive, Open source API security → API discovery, Testing in CI/CD, Test Library with 150+ Tests, Add custom tests, Sensitive data exposure
https://www.akto.io/
MIT License
976 stars 190 forks source link

⚡️ Add sensitive data types for Database URL patterns #90

Open ankush-jain-akto opened 1 year ago

ankush-jain-akto commented 1 year ago

💭 Introduction

Akto allows users to find sensitive params in request and response of APIs. These sensitive params include PII data such as SSN, Credit card number, phone number etc. You can check how it works in the docs.

Your task is to add sensitive params related to Database URL patterns.

👀 Impact:

Your task will give users the ability to detect sensitive data types related to database url patterns.

🎯 Requirements:

✅ Task summary

✌🏻 Hints

Example for Redis :

🙋🏼‍♂️ Questions

If you have questions, need any help, or just want to hang out, make sure to join us on our Discord server.

SandeepSrinivasan commented 1 year ago

can you assign this to me? @Ankita28g @ankush-jain-akto

Ankita28g commented 1 year ago

Assigned! Happy hackfesting 🎉

Ankita28g commented 1 year ago

Hi @SandeepSrinivasan thanks for your submission in Hackfest. 🔥 We are reviewing your work. Do these two below:

Join this group on discord for discussions around prizes? 🚀 🏆 Please fill this form your PR to be considered for prizes!

syedzubeen commented 10 months ago

@Ankita28g I would like to have a go at this one?

avneesh-akto commented 10 months ago

I've assigned it to you, @syedzubeen. Happy hacking! Feel free to join our Discord if you need assistance.

syedzubeen commented 10 months ago

@avneesh-akto / @Ankita28g This is ready for review.

avneesh-akto commented 10 months ago

Hi @syedzubeen. Please escape strings in regex

syedzubeen commented 10 months ago

@avneesh-akto fixed.

avneesh-akto commented 10 months ago

I can still see unescaped regex