CIRCL
/
AIL-framework
mirror of https://github.com/CIRCL/AIL-framework
2
1
Fork 0
Code Issues Releases Wiki Activity

Merge pull request #401 from stamparm/master 

Improvement of crypto-address regexes (lesser FPs)
pull/404/head
Thirion Aurélien 2019-09-23 09:45:39 +02:00 committed by GitHub
parent 839443500d 9c51c582f9
commit c8c80ea5a0
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 8 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
bin/Cryptocurrencies.py
View File

@ -118,48 +118,48 @@ default_max_execution_time = 30
cryptocurrency_dict = { cryptocurrency_dict = {
'bitcoin': { 'bitcoin': {
'name': 'bitcoin', # e.g. 1NbEPRwbBZrFDsx1QW19iDs8jQLevzzcms 'name': 'bitcoin', # e.g. 1NbEPRwbBZrFDsx1QW19iDs8jQLevzzcms
'regex': r'\b[13][A-Za-z0-9]{26,33}\b', 'regex': r'\b(?<![+/=])[13][A-Za-z0-9]{26,33}(?![+/=])\b',
'max_execution_time': default_max_execution_time, 'max_execution_time': default_max_execution_time,
'tag': 'infoleak:automatic-detection="bitcoin-address"', 'tag': 'infoleak:automatic-detection="bitcoin-address"',
'private_key': { 'private_key': {
'regex': r'[5KL][1-9A-HJ-NP-Za-km-z]{50,51}', 'regex': r'\b(?<![+/=])[5KL][1-9A-HJ-NP-Za-km-z]{50,51}(?![+/=])\b',
'max_execution_time': default_max_execution_time, 'max_execution_time': default_max_execution_time,
'tag': 'infoleak:automatic-detection="bitcoin-private-key"', 'tag': 'infoleak:automatic-detection="bitcoin-private-key"',
}, },
}, },
'ethereum': { 'ethereum': {
'name': 'ethereum', # e.g. 0x8466b50B53c521d0B4B163d186596F94fB8466f1 'name': 'ethereum', # e.g. 0x8466b50B53c521d0B4B163d186596F94fB8466f1
'regex': r'\b0x[A-Za-z0-9]{40}\b', 'regex': r'\b(?<![+/=])0x[A-Za-z0-9]{40}(?![+/=])\b',
'max_execution_time': default_max_execution_time, 'max_execution_time': default_max_execution_time,
'tag': 'infoleak:automatic-detection="ethereum-address"', 'tag': 'infoleak:automatic-detection="ethereum-address"',
}, },
'bitcoin-cash': { 'bitcoin-cash': {
'name': 'bitcoin-cash', # e.g. bitcoincash:pp8skudq3x5hzw8ew7vzsw8tn4k8wxsqsv0lt0mf3g 'name': 'bitcoin-cash', # e.g. bitcoincash:pp8skudq3x5hzw8ew7vzsw8tn4k8wxsqsv0lt0mf3g
'regex': r'bitcoincash:[a-za0-9]{42}\b', 'regex': r'bitcoincash:[a-za0-9]{42}(?![+/=])\b',
'max_execution_time': default_max_execution_time, 'max_execution_time': default_max_execution_time,
'tag': 'infoleak:automatic-detection="bitcoin-cash-address"', 'tag': 'infoleak:automatic-detection="bitcoin-cash-address"',
}, },
'litecoin': { 'litecoin': {
'name': 'litecoin', # e.g. MV5rN5EcX1imDS2gEh5jPJXeiW5QN8YrK3 'name': 'litecoin', # e.g. MV5rN5EcX1imDS2gEh5jPJXeiW5QN8YrK3
'regex': r'\b[ML][A-Za-z0-9]{33}\b', 'regex': r'\b(?<![+/=])[ML][A-Za-z0-9]{33}(?![+/=])\b',
'max_execution_time': default_max_execution_time, 'max_execution_time': default_max_execution_time,
'tag': 'infoleak:automatic-detection="litecoin-address"', 'tag': 'infoleak:automatic-detection="litecoin-address"',
}, },
'monero': { 'monero': {
'name': 'monero', # e.g. 47JLdZWteNPFQPaGGNsqLBAU3qmTcWbRda4yJvaPTCB8JbY18MNrcmfCcxrfDF61Dm7pJc4bHbBW57URjwTWzTRH2RfsUB4 'name': 'monero', # e.g. 47JLdZWteNPFQPaGGNsqLBAU3qmTcWbRda4yJvaPTCB8JbY18MNrcmfCcxrfDF61Dm7pJc4bHbBW57URjwTWzTRH2RfsUB4
'regex': r'\b4[A-Za-z0-9]{94}\b', 'regex': r'\b(?<![+/=])4[A-Za-z0-9]{94}(?![+/=])\b',
'max_execution_time': default_max_execution_time, 'max_execution_time': default_max_execution_time,
'tag': 'infoleak:automatic-detection="monero-address"', 'tag': 'infoleak:automatic-detection="monero-address"',
}, },
'zcash': { 'zcash': {
'name': 'zcash', # e.g. t1WvvNmFuKkUipcoEADNFvqamRrBec8rpUn 'name': 'zcash', # e.g. t1WvvNmFuKkUipcoEADNFvqamRrBec8rpUn
'regex': r'\bt[12][A-Za-z0-9]{33}\b', 'regex': r'\b(?<![+/=])t[12][A-Za-z0-9]{33}(?![+/=])\b',
'max_execution_time': default_max_execution_time, 'max_execution_time': default_max_execution_time,
'tag': 'infoleak:automatic-detection="zcash-address"', 'tag': 'infoleak:automatic-detection="zcash-address"',
}, },
'dash': { 'dash': {
'name': 'dash', # e.g. XmNfXq2kDmrNBTiDTofohRemwGur1WmgTT 'name': 'dash', # e.g. XmNfXq2kDmrNBTiDTofohRemwGur1WmgTT
'regex': r'\bX[A-Za-z0-9]{33}\b', 'regex': r'\b(?<![+/=])X[A-Za-z0-9]{33}(?![+/=])\b',
'max_execution_time': default_max_execution_time, 'max_execution_time': default_max_execution_time,
'tag': 'infoleak:automatic-detection="dash-address"', 'tag': 'infoleak:automatic-detection="dash-address"',
} }