Skip to content

Instantly share code, notes, and snippets.

@zmallen

zmallen/aws_access_keys.yara

Last active January 7, 2024 18:12
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save zmallen/d2305badb3d3dcabc38bdd57f72b07db to your computer and use it in GitHub Desktop.
Save zmallen/d2305badb3d3dcabc38bdd57f72b07db to your computer and use it in GitHub Desktop.
Download ZIP
Raw
aws_access_keys.yara
rule AWSAccessKeys
{
meta:
author = "@techyteachme"
desc = "Match potential AWS secrets in any file"
strings:
$re1 = /((ASIA|AKIA|AROA|AIDA)([A-Z0-7]{16}))/i
$re2 = /aws_secret_access_key\x20\x3d\x20([a-zA-Z0-9+\/]{40})/i
condition:
all of them
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment