info leaks: added reference to token-hunter

fkie-cad · Nov 24, 2023 · db790e8 · db790e8
1 parent 798bcf7
commit db790e8
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/src/plugins/analysis/information_leaks/code/information_leaks.py b/src/plugins/analysis/information_leaks/code/information_leaks.py
@@ -20,6 +20,7 @@
 }
 
 URL_REGEXES = {
+    # based on https://gitlab.com/gitlab-com/gl-security/threatmanagement/redteam/redteam-public/token-hunter regex
     'credentials_in_url': re.compile(
         rb'([a-zA-Z]{3,10}://[a-zA-Z0-9]{3,20}:[^/\s:@]{3,20}@[A-Za-z0-9._/:%?&${}=-]{7,100})["\'\s\x00]?'
     )