gitea-mirror/PEASS-ng
1
0
Fork 0
mirror of https://github.com/peass-ng/PEASS-ng.git synced 2026-07-28 14:47:18 -07:00
Code Issues Packages Projects Releases Wiki Activity

f

Browse Source
This commit is contained in:
Carlos Polop
2026-03-19 16:29:30 +01:00
parent 2fb6c4c67d
commit 042aa0cd4d
1 changed files with 118 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
build_lists/sensitive_files.yaml
+118
View File
@@ -1503,6 +1503,124 @@ search:
type: d
search_in:
- common
- name: AI Coding Assistants
value:
config:
auto_check: True
files:
- name: ".codex"
value:
files:
- name: "auth.json"
value:
bad_regex: "access_token|refresh_token|id_token|OPENAI_API_KEY|api_key|auth_mode"
remove_empty_lines: True
- name: "config.toml"
value:
bad_regex: "OPENAI_API_KEY|api_key|auth_mode|model|profile"
remove_empty_lines: True
type: d
search_in:
- common
- name: ".claude"
value:
files:
- name: "settings.json"
value:
bad_regex: "apiKeyHelper|ANTHROPIC_API_KEY|ANTHROPIC_AUTH_TOKEN|Authorization|Bearer|token|secret|mcpServers"
remove_empty_lines: True
- name: "settings.local.json"
value:
bad_regex: "apiKeyHelper|ANTHROPIC_API_KEY|ANTHROPIC_AUTH_TOKEN|Authorization|Bearer|token|secret|mcpServers"
remove_empty_lines: True
type: d
search_in:
- common
- name: ".claude.json"
value:
bad_regex: "auth|token|bearer|session|oauth|api[_-]?key"
remove_empty_lines: True
type: f
search_in:
- common
- name: ".gemini"
value:
files:
- name: "settings.json"
value:
bad_regex: "GEMINI_API_KEY|GOOGLE_API_KEY|access_token|refresh_token|oauth|client_secret|Authorization|Bearer|headers|mcpServers"
remove_empty_lines: True
- name: "oauth_creds.json"
value:
bad_regex: "access_token|refresh_token|id_token|token_type|scope|client_id"
remove_empty_lines: True
type: d
search_in:
- common
- name: ".cursor"
value:
files:
- name: "mcp.json"
value:
bad_regex: "Authorization|Bearer|token|api[_-]?key|secret|headers|env"
remove_empty_lines: True
type: d
search_in:
- common
- name: ".mcp.json"
value:
bad_regex: "Authorization|Bearer|token|api[_-]?key|secret|headers|env"
remove_empty_lines: True
type: f
search_in:
- common
- name: "gh"
value:
files:
- name: "hosts.yml"
value:
bad_regex: "oauth_token|user:|oauth"
remove_empty_lines: True
check_extra_path: ".*/\\.config/gh$|.*/AppData/.*gh$|.*/Library/Application Support/gh$"
type: d
search_in:
- common
- name: "state.vscdb"
value:
just_list_file: True
check_extra_path: ".*/(Cursor|Code|Code - Insiders)/User/(globalStorage|workspaceStorage)(/.*)?$|.*/Library/Application Support/(Cursor|Code|Code - Insiders)/User/(globalStorage|workspaceStorage)(/.*)?$"
type: f
search_in:
- common
- name: "state.vscdb.backup"
value:
just_list_file: True
check_extra_path: ".*/(Cursor|Code|Code - Insiders)/User/(globalStorage|workspaceStorage)(/.*)?$|.*/Library/Application Support/(Cursor|Code|Code - Insiders)/User/(globalStorage|workspaceStorage)(/.*)?$"
type: f
search_in:
- common
- name: "storage.json"
value:
bad_regex: "github\\.copilot|copilot|cursor|openai|anthropic|gemini|token|auth"
remove_empty_lines: True
check_extra_path: ".*/(Cursor|Code|Code - Insiders)/User/(globalStorage|workspaceStorage)(/.*)?$|.*/Library/Application Support/(Cursor|Code|Code - Insiders)/User/(globalStorage|workspaceStorage)(/.*)?$"
type: f
search_in:
- common
- name: Road Recon