id: basic-auth-creds

info:
  name: Basic Authorization Credentials Check
  author: gaurang
  severity: high
  description: Basic authorization credentials check was conducted.
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
    cvss-score: 7.5
    cwe-id: CWE-200
  tags: file,keys,token,auth
file:
  - extensions:
      - all

    extractors:
      - type: regex
        regex:
          - "(http|https|ftp)://[a-zA-Z0-9][^/\\s:@]{2,19}:[^/\\s:@]{3,50}@[a-zA-Z0-9.-]{3,100}(:[0-9]{2,5})?(/|$)[\"'\\s]"
# digest: 4a0a00473045022100ed45636930eea463c9a324e1560f6b99c93be5752fa24a0f8043fb766c8264df022014c96d397124545cef351ead324b62f04992680e8a196a0fdbc712a4062f8754:922c64590222798bb761d5b6d8e72950