Skip to content

Commit 0d52f25

Browse files
authored
CURL User Password (#247)
1 parent 6bce3a0 commit 0d52f25

File tree

6 files changed

+20
-9
lines changed

6 files changed

+20
-9
lines changed

.ci/benchmark.txt

Lines changed: 9 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
1-
META MD5 53a15e5e705dc48eb215b893deff4970
2-
DATA MD5 97b263b46e24b54f39f0d460fa7e087a
3-
DATA: 17257596 interested lines. MARKUP: 62279 items
1+
META MD5 d6d80cbad918f0efe59bf103aff97b07
2+
DATA MD5 1b5f87456ab65abfdec3199deec17ebd
3+
DATA: 17257596 interested lines. MARKUP: 62288 items
44
FileType FileNumber ValidLines Positives Negatives
55
--------------- ------------ ------------ ----------- -----------
66
687 567498 138 487
@@ -9,7 +9,7 @@ FileType FileNumber ValidLines Positives Negatives
99
.admx 1 26 1
1010
.adoc 1 158 18 6
1111
.api 2 118 4
12-
.asciidoc 102 15403 81 353
12+
.asciidoc 102 15403 82 355
1313
.axaml 5 286 5
1414
.backup 1 62 2 1
1515
.bash 2 2158 3
@@ -66,7 +66,7 @@ FileType FileNumber ValidLines Positives Negatives
6666
.gd 1 37 1
6767
.gml 3 3075 16
6868
.gni 3 5017 19
69-
.go 1280 718792 1511 4862
69+
.go 1280 718792 1512 4862
7070
.golden 5 1168 1 42
7171
.gradle 50 4295 8 189
7272
.graphql 8 454 2 13
@@ -120,7 +120,7 @@ FileType FileNumber ValidLines Positives Negatives
120120
.markdown 38 5862 69 4
121121
.markerb 3 12 3
122122
.marko 1 21 2
123-
.md 789 185743 1063 2891
123+
.md 789 185743 1068 2891
124124
.mdx 3 549 7
125125
.mjml 1 18 1
126126
.mjs 22 4424 101 369
@@ -234,7 +234,7 @@ FileType FileNumber ValidLines Positives Negatives
234234
.yml 564 57042 1928 1223
235235
.zsh 6 872 12
236236
.zsh-theme 1 97 1
237-
TOTAL: 11666 17257596 17143 50404
237+
TOTAL: 11666 17257596 17150 50406
238238
credsweeper result_cnt : 0, lost_cnt : 0, true_cnt : 0, false_cnt : 0
239239
Rules Positives Negatives Reported TP FP TN FN FPR FNR ACC PRC RCL F1
240240
------------------------------ ----------- ----------- ---------- ---- ---- ----- ----- -------- -------- -------- ----- -------- ----
@@ -256,6 +256,7 @@ CMD ConvertTo-SecureString 13 4 0 0
256256
CMD Password 33 137 0 0 137 33 0.000000 1.000000 0.805882 0.000000
257257
CMD Secret 1 17 0 0 17 1 0.000000 1.000000 0.944444 0.000000
258258
CMD Token 6 2 0 0 2 6 0.000000 1.000000 0.250000 0.000000
259+
CURL User Password 7 2 0 0 2 7 0.000000 1.000000 0.222222 0.000000
259260
Credential 98 499 0 0 499 98 0.000000 1.000000 0.835846 0.000000
260261
Docker Swarm Token 2 0 0 0 0 2 1.000000 0.000000 0.000000
261262
Dropbox App secret 73 144 0 0 144 73 0.000000 1.000000 0.663594 0.000000
@@ -291,4 +292,4 @@ Token 994 4645 0 0
291292
Twilio Credentials 30 39 0 0 39 30 0.000000 1.000000 0.565217 0.000000
292293
URL Credentials 225 382 0 0 382 225 0.000000 1.000000 0.629325 0.000000
293294
UUID 2390 265 0 0 265 2390 0.000000 1.000000 0.099812 0.000000
294-
17143 50404 0 0 0 50404 17143 0.000000 1.000000 0.746206 0.000000
295+
17150 50406 0 0 0 50406 17150 0.000000 1.000000 0.746137 0.000000

meta/1e007c58.csv

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -86,3 +86,4 @@ Id,FileID,Domain,RepoName,FilePath,LineStart,LineEnd,GroundTruth,ValueStart,Valu
8686
110649,c79b11f4,GitHub,1e007c58,data/1e007c58/api/build/c79b11f4.go,199,199,F,,,,,API
8787
110650,c79b11f4,GitHub,1e007c58,data/1e007c58/api/build/c79b11f4.go,203,203,F,,,,,API
8888
110651,c79b11f4,GitHub,1e007c58,data/1e007c58/api/build/c79b11f4.go,222,222,F,,,,,API
89+
11516153,556918e1,GitHub,1e007c58,data/1e007c58/_/556918e1.go,137,137,T,49,81,,,CURL User Password

meta/387016a6.csv

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1673,3 +1673,6 @@ Id,FileID,Domain,RepoName,FilePath,LineStart,LineEnd,GroundTruth,ValueStart,Valu
16731673
11503156,b2db3b50,GitHub,387016a6,data/387016a6/test/src/resource/rest/b2db3b50.yml,157,157,F,60,91,,,Key
16741674
11503157,b2db3b50,GitHub,387016a6,data/387016a6/test/src/resource/rest/b2db3b50.yml,159,159,F,60,91,,,Key
16751675
11503158,b2db3b50,GitHub,387016a6,data/387016a6/test/src/resource/rest/b2db3b50.yml,161,161,F,60,92,,,Key
1676+
11516154,f9e5cd3c,GitHub,387016a6,data/387016a6/docs/rest/init/f9e5cd3c.asciidoc,55,55,F,18,31,,,CURL User Password
1677+
11516155,f9e5cd3c,GitHub,387016a6,data/387016a6/docs/rest/init/f9e5cd3c.asciidoc,72,72,F,18,31,,,CURL User Password
1678+
11516156,0b540210,GitHub,387016a6,data/387016a6/security/docs/rest/0b540210.asciidoc,141,141,T,17,37,,,CURL User Password

meta/a0cd6261.csv

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -290,3 +290,7 @@ Id,FileID,Domain,RepoName,FilePath,LineStart,LineEnd,GroundTruth,ValueStart,Valu
290290
1480693,04f04e64,GitHub,a0cd6261,data/a0cd6261/fuzz/04f04e64.txt,4,4,T,32,39,,,SQL Password
291291
1480694,04f04e64,GitHub,a0cd6261,data/a0cd6261/fuzz/04f04e64.txt,8,8,T,87,94,,,SQL Password
292292
1520908,29bb2e65,GitHub,a0cd6261,data/a0cd6261/test/resource/29bb2e65.md,436,436,F,53,61,,,CMD Secret
293+
11516157,35f06517,GitHub,a0cd6261,data/a0cd6261/test/resource/docker/35f06517.md,108,108,T,25,30,,,CURL User Password
294+
11516158,35f06517,GitHub,a0cd6261,data/a0cd6261/test/resource/docker/35f06517.md,109,109,T,25,30,,,CURL User Password
295+
11516159,35f06517,GitHub,a0cd6261,data/a0cd6261/test/resource/docker/35f06517.md,110,110,T,25,30,,,CURL User Password
296+
11516160,35f06517,GitHub,a0cd6261,data/a0cd6261/test/resource/docker/35f06517.md,112,112,T,25,30,,,CURL User Password

meta/a15774b8.csv

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -708,3 +708,4 @@ Id,FileID,Domain,RepoName,FilePath,LineStart,LineEnd,GroundTruth,ValueStart,Valu
708708
1509874,12029c7b,GitHub,a15774b8,data/a15774b8/sample/cluster/12029c7b.rsp,41,41,T,35,45,,,Password
709709
1509875,804a8f8d,GitHub,a15774b8,data/a15774b8/sample/cluster/804a8f8d.rsp,454,454,T,35,45,,,Password
710710
1520916,64c4dfcb,GitHub,a15774b8,data/a15774b8/conf/64c4dfcb,209,209,F,38,43,,,CMD Password
711+
11516161,fcf4a37e,GitHub,a15774b8,data/a15774b8/_/fcf4a37e.md,82,82,T,17,25,,,CURL User Password

review_data.py

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -173,7 +173,8 @@ def main(meta_dir: str,
173173
if any(x in categories for x in ["Secret", "CMD ConvertTo-SecureString"]):
174174
# Secrets are like passwords
175175
min_length = 5
176-
if any(x in categories for x in ["Password", "URL Credentials", "CMD Password", "SQL Password"]):
176+
if any(x in categories for x in ["Password", "URL Credentials", "CMD Password", "SQL Password",
177+
"CURL User Password"]):
177178
# lost password may be simple but sensitive
178179
min_length = 4
179180
if min_length > row.ValueEnd - row.ValueStart:

0 commit comments

Comments
 (0)