Merge pull request #50 from SnaffCon/l0ss-patch-2

SnaffCon · Aug 3, 2021 · 5d36184 · 5d36184
2 parents 16c0ee7 + ed586ae
commit 5d36184
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/SnaffCore/Config/DefaultRules/FileContentRules.cs b/SnaffCore/Config/DefaultRules/FileContentRules.cs
@@ -268,7 +268,7 @@ private void BuildFileContentRules()
                     // ruby
                     "DBI\\.connect\\(",
                     // generic tokens etc, same for most languages.
-                    "passwo",
+                    "passwo?r?d\\s*=\\s*[\\\'\\\"][^\\\'\\\"]....",
                     "CREATE (USER|LOGIN) .{0,200} (IDENTIFIED BY|WITH PASSWORD)", // sql creds
                     "(xox[pboa]-[0-9]{12}-[0-9]{12}-[0-9]{12}-[a-z0-9]{32})", //Slack Token
                     "https://hooks.slack.com/services/T[a-zA-Z0-9_]{8}/B[a-zA-Z0-9_]{8}/[a-zA-Z0-9_]{24}", //Slack Webhook