trufflehog
trufflehog copied to clipboard
Add support for RSA SecurID MFA software tokens
Description
Add support for RSA SecurID virtual MFA tokens https://www.rsa.com/products/securid/
Preferred Solution
Expose serial number & seed of the virtual token. The seed allows to duplicate the token, then bypass MFA, thus proves the leak. The serial number allows an admin to invalidate the token.
Additional Context
Custom detection logic:
detectors:
- name: RSASecurIDDetector
keywords:
- TKNHeader
regex:
SerialNumber: |-
<SN>\d+?</SN>
Seed: |-
<Seed>.+?</Seed>
primary_regex_name: SerialNumber
References
Example tokens available at https://github.com/stoken-dev/stoken