-
Notifications
You must be signed in to change notification settings - Fork 1.8k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
added apilayer scanner #368
added apilayer scanner #368
Conversation
pkg/detectors/apilayer/apilayer.go
Outdated
} | ||
body := string(bodyBytes) | ||
|
||
if !strings.Contains(body, "invalid_access_key") { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Please invert this logic so that this will fail safely during a service outage. Check for contents of a successful response instead.
pkg/detectors/apilayer/apilayer.go
Outdated
} | ||
|
||
if verify { | ||
req, err := http.NewRequestWithContext(ctx, "GET", "http://apilayer.net/api/validate?access_key="+resMatch+"&number=09066200872", nil) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Is the detector's site is https://apilayer.com? If it is, they might have updated their top-level domain and also the endpoint on verifying the number https://apilayer.com/marketplace/description/number_verification-api. They also updated the key pattern into base64 from hex encoding.
Add Honeycomb detector by @MNThomson in trufflesecurity/trufflehog#687 Feature/scalr detector by @lonmarsDev in trufflesecurity/trufflehog#519 added websitepulse detector by @lonmarsDev in trufflesecurity/trufflehog#516 added tokeet detector by @lonmarsDev in trufflesecurity/trufflehog#515 Feature/salesmate detector by @lonmarsDev in trufflesecurity/trufflehog#514 added kanbantool detector by @lonmarsDev in trufflesecurity/trufflehog#513 added demio detector by @lonmarsDev in trufflesecurity/trufflehog#512 added heatmapapi detector by @lonmarsDev in trufflesecurity/trufflehog#509 added getresponse detector by @lonmarsDev in trufflesecurity/trufflehog#506 added codeclimate detector by @lonmarsDev in trufflesecurity/trufflehog#484 added flightlabs detector by @ladybug0125 in trufflesecurity/trufflehog#475 added prodpad detector by @lonmarsDev in trufflesecurity/trufflehog#470 added lemlist detector by @lonmarsDev in trufflesecurity/trufflehog#469 added formsite detector by @lonmarsDev in trufflesecurity/trufflehog#467 added docparser detector by @lonmarsDev in trufflesecurity/trufflehog#458 added parseur detector by @lonmarsDev in trufflesecurity/trufflehog#454 Added ecostruxureit detector by @roxanne-tampus in trufflesecurity/trufflehog#555 Added transferwise detector by @roxanne-tampus in trufflesecurity/trufflehog#558 Added holistic detector by @roxanne-tampus in trufflesecurity/trufflehog#556 Added twist detector by @roxanne-tampus in trufflesecurity/trufflehog#549 Added monkeylearn detector by @roxanne-tampus in trufflesecurity/trufflehog#553 Added gtmetrix detector by @roxanne-tampus in trufflesecurity/trufflehog#554 Added duply detector by @roxanne-tampus in trufflesecurity/trufflehog#552 Added braintreepayments detector by @roxanne-tampus in trufflesecurity/trufflehog#541 added apilayer scanner by @lonmarsDev in trufflesecurity/trufflehog#368 added appointed scanner by @lonmarsDev in trufflesecurity/trufflehog#425 [bug] - Fix the starting index value for plus line check. by @ahrav in trufflesecurity/trufflehog#734
No description provided.