Skip to content
This repository was archived by the owner on Apr 24, 2026. It is now read-only.

Add particle.io rules#113

Merged
bradlarsen merged 1 commit into
praetorian-inc:mainfrom
gemesa:particle-io
Jan 7, 2024
Merged

Add particle.io rules#113
bradlarsen merged 1 commit into
praetorian-inc:mainfrom
gemesa:particle-io

Conversation

@gemesa
Copy link
Copy Markdown
Contributor

@gemesa gemesa commented Jan 7, 2024

Added some rules I successfully used to detect particle.io access tokens in the wild. The rules do not contain any patterns to match device IDs because once we have the access tokens, we can retrieve the device list with curl "https://api.particle.io/v1/devices?access_token=38bb7b318cc6898c80317decb34525844bc9db55".

I created two patterns that could be merged into one but this way they are more readable.

@bradlarsen
Copy link
Copy Markdown
Contributor

This looks really good.

I created two patterns that could be merged into one but this way they are more readable.

That's perfect — in general I prefer simpler separate rules than a more complicated merged one.

@bradlarsen bradlarsen merged commit f62b357 into praetorian-inc:main Jan 7, 2024
@gemesa gemesa deleted the particle-io branch January 7, 2024 16:12
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants