akto icon indicating copy to clipboard operation
akto copied to clipboard

⚡️ Add sensitive data types for Database URL patterns

Open ankush-jain-akto opened this issue 2 years ago • 9 comments

💭 Introduction

Akto allows users to find sensitive params in request and response of APIs. These sensitive params include PII data such as SSN, Credit card number, phone number etc. You can check how it works in the docs.

Your task is to add sensitive params related to Database URL patterns.

👀 Impact:

Your task will give users the ability to detect sensitive data types related to database url patterns.

🎯 Requirements:

  • Understanding of regex
  • Understanding of unit test

✅ Task summary

  • [ ] Ask to be assigned to the issue.
  • [ ] Wait to be assigned. We will try to assign in less than 2 hours.
  • [ ] Make regular expressions for database-related URLs. [SQL, Mongo, S3, RDS, Prometheus, Redis)
  • [ ] Add an entry in fintech.json file
  • [ ] Add a test case entry in TestFintechTypes.java
  • [ ] Submit a pull request here

✌🏻 Hints

Example for Redis :

  • Regex: redis(s|-sentinel|-socket)?:\/\/(.*):(\d*)
  • Reference: https://github.com/lettuce-io/lettuce-core/wiki/Redis-URI-and-connection-details

🙋🏼‍♂️ Questions

If you have questions, need any help, or just want to hang out, make sure to join us on our Discord server.

ankush-jain-akto avatar Mar 04 '23 11:03 ankush-jain-akto

can you assign this to me? @Ankita28g @ankush-jain-akto

SandeepSrinivasan avatar Mar 25 '23 08:03 SandeepSrinivasan

Assigned! Happy hackfesting 🎉

Ankita28g avatar Mar 25 '23 08:03 Ankita28g

Hi @SandeepSrinivasan thanks for your submission in Hackfest. 🔥 We are reviewing your work. Do these two below:

Join this group on discord for discussions around prizes? 🚀 🏆 Please fill this form your PR to be considered for prizes!

Ankita28g avatar Apr 11 '23 09:04 Ankita28g

@Ankita28g I would like to have a go at this one?

syedzubeen avatar Oct 22 '23 00:10 syedzubeen

I've assigned it to you, @syedzubeen. Happy hacking! Feel free to join our Discord if you need assistance.

avneesh-akto avatar Oct 22 '23 13:10 avneesh-akto

@avneesh-akto / @Ankita28g This is ready for review.

syedzubeen avatar Oct 23 '23 19:10 syedzubeen

Hi @syedzubeen. Please escape strings in regex

avneesh-akto avatar Oct 27 '23 10:10 avneesh-akto

@avneesh-akto fixed.

syedzubeen avatar Oct 30 '23 00:10 syedzubeen

I can still see unescaped regex

avneesh-akto avatar Oct 30 '23 10:10 avneesh-akto