discord.go 1.6 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354
  1. package rules
  2. import (
  3. "github.com/zricethezav/gitleaks/v8/cmd/generate/secrets"
  4. "github.com/zricethezav/gitleaks/v8/config"
  5. )
  6. func DiscordAPIToken() *config.Rule {
  7. // define rule
  8. r := config.Rule{
  9. Description: "Detected a Discord API key, potentially compromising communication channels and user data privacy on Discord.",
  10. RuleID: "discord-api-token",
  11. Regex: generateSemiGenericRegex([]string{"discord"}, hex("64"), true),
  12. Keywords: []string{"discord"},
  13. }
  14. // validate
  15. tps := []string{
  16. generateSampleSecret("discord", secrets.NewSecret(hex("64"))),
  17. }
  18. return validate(r, tps, nil)
  19. }
  20. func DiscordClientID() *config.Rule {
  21. // define rule
  22. r := config.Rule{
  23. Description: "Identified a Discord client ID, which may lead to unauthorized integrations and data exposure in Discord applications.",
  24. RuleID: "discord-client-id",
  25. Regex: generateSemiGenericRegex([]string{"discord"}, numeric("18"), true),
  26. Keywords: []string{"discord"},
  27. }
  28. // validate
  29. tps := []string{
  30. generateSampleSecret("discord", secrets.NewSecret(numeric("18"))),
  31. }
  32. return validate(r, tps, nil)
  33. }
  34. func DiscordClientSecret() *config.Rule {
  35. // define rule
  36. r := config.Rule{
  37. Description: "Discovered a potential Discord client secret, risking compromised Discord bot integrations and data leaks.",
  38. RuleID: "discord-client-secret",
  39. Regex: generateSemiGenericRegex([]string{"discord"}, alphaNumericExtended("32"), true),
  40. Keywords: []string{"discord"},
  41. }
  42. // validate
  43. tps := []string{
  44. generateSampleSecret("discord", secrets.NewSecret(numeric("32"))),
  45. }
  46. return validate(r, tps, nil)
  47. }