rsa

RSA Keys

Generic RSA keys

version: v1.1

Comments / Notes:

• Basic support for hardcoded strings in code with RSA private key

Pattern Format

--BEGIN (?:[A-Z]+ )?PRIVATE KEY--+(\\r|\\n|)+[a-zA-Z0-9+/=\s]+(\\r|\\n|)+--+END (?:[A-Z]+ )?PRIVATE KEY--

SSH Private Keys

version: v0.1

Comments / Notes:

• SSH Password: MyPassword

Pattern Format

--BEGIN OPENSSH PRIVATE KEY--+[a-zA-Z0-9+/=\s]+--+END OPENSSH PRIVATE KEY--

GPG Private Key

version: v0.1

Pattern Format

--BEGIN PGP PRIVATE KEY BLOCK--+(?:[\r\n]+((Version|Comment|MessageID|Hash|Charset): [^\r\n]+[\r\n]+)+[\r\n]+)?[a-zA-Z0-9+/=\s]+--+END PGP PRIVATE KEY BLOCK--

SSH Public Key

⚠️ WARNING: THIS RULE IS EXPERIMENTAL AND MIGHT CAUSE A HIGH FALSE POSITIVE RATE (test before commiting to org level) ⚠️

version: v0.2

Comments / Notes:

• SSH Public Key (not a secret)
• Ignores the name of the public key

Pattern Format

ssh-rsa(\s)+[a-zA-Z0-9\/\+=]{20,}

End Pattern

\z|(\s)+[a-zA-Z0-9@-]+