Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add particle.io rules #113

Merged
merged 1 commit into from
Jan 7, 2024
Merged

Conversation

gemesa
Copy link
Contributor

@gemesa gemesa commented Jan 7, 2024

Added some rules I successfully used to detect particle.io access tokens in the wild. The rules do not contain any patterns to match device IDs because once we have the access tokens, we can retrieve the device list with curl "https://api.particle.io/v1/devices?access_token=38bb7b318cc6898c80317decb34525844bc9db55".

I created two patterns that could be merged into one but this way they are more readable.

@bradlarsen
Copy link
Collaborator

This looks really good.

I created two patterns that could be merged into one but this way they are more readable.

That's perfect — in general I prefer simpler separate rules than a more complicated merged one.

@bradlarsen bradlarsen merged commit f62b357 into praetorian-inc:main Jan 7, 2024
8 checks passed
@gemesa gemesa deleted the particle-io branch January 7, 2024 16:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants