dxa4481 / truffleHogRegexes

These are the regexes that power truffleHog
GNU General Public License v3.0
211 stars 97 forks source link

Password in URL Regex will skip anything with the letter "s" #28

Open andrew-kline opened 3 years ago

andrew-kline commented 3 years ago

The password in URL regex [a-zA-Z]{3,10}://[^/\\s:@]{3,20}:[^/\\s:@]{3,20}@.{1,100}[\"'\\s] skips any URL with a username or password that contains the letter "s".

dxa4481 commented 3 years ago

Hey Andrew, thanks for pointing this out. Would you be able to draft a fix PR?