{"id":5676,"date":"2024-04-20T09:48:01","date_gmt":"2024-04-20T01:48:01","guid":{"rendered":"https:\/\/ixyzero.com\/blog\/?p=5676"},"modified":"2024-04-20T09:48:01","modified_gmt":"2024-04-20T01:48:01","slug":"%e5%8c%b9%e9%85%8d%e8%b4%a6%e5%8f%b7%e5%af%86%e7%a0%81%e7%9a%84%e6%ad%a3%e5%88%99%e8%a1%a8%e8%be%be%e5%bc%8f","status":"publish","type":"post","link":"https:\/\/ixyzero.com\/blog\/archives\/5676.html","title":{"rendered":"\u5339\u914d\u8d26\u53f7\u5bc6\u7801\u7684\u6b63\u5219\u8868\u8fbe\u5f0f"},"content":{"rendered":"\n<p>=Start=<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">\u7f18\u7531\uff1a<\/h4>\n\n\n\n<p>\u7b80\u5355\u6574\u7406\u4e00\u4e0b\u5339\u914d\u8d26\u53f7\u5bc6\u7801\u7684\u6b63\u5219\u8868\u8fbe\u5f0f\uff0c\u65b9\u4fbf\u540e\u9762\u6709\u9700\u8981\u7684\u65f6\u5019\u53c2\u8003\u3002<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">\u6b63\u6587\uff1a<\/h4>\n\n\n\n<h5 class=\"wp-block-heading\">\u53c2\u8003\u89e3\u7b54\uff1a<\/h5>\n\n\n\n<p>\u6ce8\u610f\u4e8b\u9879\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>\u53cc\u5f15\u53f7\u6709\u4e9b\u65f6\u5019\u4e5f\u662f\u9700\u8981\u8f6c\u4e49\u7684\uff08\u53ef\u4ee5\u901a\u8fc7Regex101\u7684\u63d0\u793a\u6765\u8fdb\u884cdebug\uff09 --\" An unescaped delimiter must be escaped; in most languages with a backslash (\\)\n\u5728\u6b63\u5219\u91cc\u9762\u662f \\w \u4f46\u662f\u5728Java\/HiveSQL\u4ee3\u7801\u91cc\u9762\u9700\u8981\u7528 \\\\w \u6765\u8868\u793a\uff08\u4e5f\u662f\u9700\u8981\u6ce8\u610f\u8f6c\u4e49\u7684\u95ee\u9898\uff09\u3002<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>\\w{0,10}((?i)(access.{0,1}key)|(access.{0,1}token)|(access.{0,1}id)|(secret.{0,1}key)|(secret.{0,1}token)|(api.{0,1}key)|(api.{0,1}secret)|(sign.{0,1}in)|(credential&#91;A-Za-z0-9_\\-]{0,22})|ak|sk|akid|skid|auth|authentication|certificate|cookie|session|passwd|password|private|token|salt|secretid|accesskeyid|access_key_id|\u4e0a\u7ebf|\u53d1\u5e03|\u90e8\u7f72|\u4ee4\u724c|\u51ed\u8bc1|\u53e3\u4ee4|\u5bc6\u7801|\u5bc6\u94a5|\u767b\u5f55|\u767b\u9646|\u79c1\u94a5|\u79d8\u94a5|\u8ba4\u8bc1|\u8bc1\u4e66|\u5e10\u53f7|\u8d26\u53f7|\u8d26\u5bc6|\u914d\u7f6e|\u9274\u6743|\u9a8c\u8bc1|\u6570\u636e\u5e93|\u7528\u6237\u540d|\u8bbf\u95ee\u7801|\u8d26\u53f7\u7ba1\u7406)\\s*&#91;=:]\\s*\\\"&#91;A-Za-z0-9_\\-]{6,33}\\\"<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p>key\/auth\/certificate\/cookie\/credential\/config\/pass\/passwd\/password\/private\/token\/salt<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<pre class=\"wp-block-code\"><code>(\n|AccessKey\n|AccessSecret\n|akamaiAccessToken\n|akamaiClientSecret\n|akamaiClientToken\n|AwsSecretId\n|AwsSecretKey\n|AWS_SESSION_TOKEN\n|AzureSubscriptionId\n|CredentialAzureAccessKey\n|CredentialKeyAli\n|CredentialKeyKingsoft\n|CredentialKeyTencent\n|CredentialSecretAli\n|CredentialSecretKingsoft\n|CredentialSecretTencent\n|CredentialUcloudPrivateKey\n|CredentialUcloudPublicKey\n|Dockerfile\n|GoogleAuthKey\n|GoogleProjectId\n|WangsuApikey\n|_ak\n|_sk\n|_st\n|access\n|access.key\n|access_key\n|accesskey\n|aliyun\n|api_key\n|api_secret\n|apisecret\n|auth\n|cacertdata\n|certificate-authority-DATA\n|cipher\n|clickhouse client\n|client-KEY-DATA\n|client-certificate-DATA\n|client_salt\n|clientsalt\n|cookie\n|credential\n|dbproxy\n|dockefile\n|elastic:\n|internal\n|kubeconfig\n|kubelet-proxy\n|kubernetes\n|mima\n|miyao\n|mysql\n|pass.\n|passwd\n|password\n|pri_key\n|priv_key\n|private_key\n|proxy\n|pwd\n|userid\n|redis:\n|salt\n|secret\n|secret key\n|secret.key\n|secret_key\n|secretkey\n|Secrets-Token\n|ssh\n|sshkey\n|token\n|zhanghao\n|\u4e0a\u7ebf\n|\u53d1\u5e03\n|\u53e3\u4ee4\n|\u5bc6\u7801\n|\u5bc6\u94a5\n|\u79c1\u94a5\n|\u79d8\u94a5\n|\u5e10\u53f7\n|\u8d26\u53f7\n|\u8d26\u5bc6\n|\u90e8\u7f72\n|\u914d\u7f6e\n|\u6570\u636e\u5e93\n|\u7528\u6237\u540d\n|\u8d26\u53f7\u7ba1\u7406\n)<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p>question:<br>\u8bf7\u5c3d\u53ef\u80fd\u5168\u9762\u7684\u5217\u51fa\u8868\u793aAccesskey\u3001secretkey\u3001accesstoken\u7b49\u5bc6\u94a5\u7684\u5173\u952e\u5b57<\/p>\n\n\n\n<p>answer:<br>\u4ee5\u4e0b\u662f\u4e00\u4e9b\u8868\u793aAccess Key\u3001Secret Key\u3001Access Token\u7b49\u5bc6\u94a5\u7684\u5173\u952e\u5b57\uff1a<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Access Key \u76f8\u5173\uff1a<\/li>\n<\/ol>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Access Key<\/li>\n\n\n\n<li>AccessKey<\/li>\n\n\n\n<li>Access_Key<\/li>\n\n\n\n<li>AccessKeyID<\/li>\n\n\n\n<li>AccessKeyId<\/li>\n\n\n\n<li>Access_Key_ID<\/li>\n\n\n\n<li>AK<\/li>\n\n\n\n<li>AKID<\/li>\n<\/ul>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Secret Key \u76f8\u5173\uff1a<\/li>\n<\/ol>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Secret Key<\/li>\n\n\n\n<li>SecretKey<\/li>\n\n\n\n<li>Secret_Key<\/li>\n\n\n\n<li>SecretAccessKey<\/li>\n\n\n\n<li>Secret_Access_Key<\/li>\n\n\n\n<li>SK<\/li>\n\n\n\n<li>Secret<\/li>\n<\/ul>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Access Token \u76f8\u5173\uff1a<\/li>\n<\/ol>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Access Token<\/li>\n\n\n\n<li>AccessToken<\/li>\n\n\n\n<li>Token<\/li>\n\n\n\n<li>AuthToken<\/li>\n\n\n\n<li>Bearer Token<\/li>\n\n\n\n<li>Refresh Token<\/li>\n<\/ul>\n\n\n\n<p>\u8fd9\u4e9b\u5173\u952e\u5b57\u901a\u5e38\u7528\u4e8e\u6807\u8bc6\u548c\u8bbf\u95ee\u5404\u79cd\u670d\u52a1\u548c\u8d44\u6e90\uff0c\u9700\u8981\u59a5\u5584\u4fdd\u62a4\u4ee5\u786e\u4fdd\u7cfb\u7edf\u548c\u6570\u636e\u7684\u5b89\u5168\u6027\u3002\u5728\u5904\u7406\u8fd9\u4e9b\u5bc6\u94a5\u65f6\uff0c\u52a1\u5fc5\u9075\u5faa\u6700\u4f73\u5b89\u5168\u5b9e\u8df5\uff0c\u5982\u52a0\u5bc6\u5b58\u50a8\u3001\u9650\u5236\u8bbf\u95ee\u6743\u9650\u3001\u5b9a\u671f\u8f6e\u6362\u5bc6\u94a5\u7b49\u3002<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p>question:<br>\u8bf7\u5c3d\u53ef\u80fd\u5168\u9762\u7684\u679a\u4e3e\u51fa\u4e00\u4e9b\u548c\u8d26\u53f7\u5bc6\u7801\u76f8\u5173\u7684\u5173\u952e\u5b57\u5217\u8868\uff0c\u5e76\u5c1d\u8bd5\u7528\u4e00\u4e2a\u6b63\u5219\u8868\u8fbe\u5f0f\u5c06\u8fd9\u4e9b\u60c5\u51b5\u5339\u914d\u51fa\u6765<\/p>\n\n\n\n<p>answer:<br>\u4ee5\u4e0b\u662f\u4e00\u4e9b\u548c\u8d26\u53f7\u5bc6\u7801\u76f8\u5173\u7684\u5173\u952e\u5b57\u5217\u8868\uff1a<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>\u8d26\u53f7\u76f8\u5173\uff1a<\/li>\n<\/ol>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Username<\/li>\n\n\n\n<li>User<\/li>\n\n\n\n<li>Account<\/li>\n\n\n\n<li>Login<\/li>\n\n\n\n<li>Email<\/li>\n\n\n\n<li>UserID<\/li>\n\n\n\n<li>\u7528\u6237\u540d<\/li>\n\n\n\n<li>\u8d26\u6237<\/li>\n<\/ul>\n\n\n\n<ol class=\"wp-block-list\">\n<li>\u5bc6\u7801\u76f8\u5173\uff1a<\/li>\n<\/ol>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Password<\/li>\n\n\n\n<li>Pass<\/li>\n\n\n\n<li>Pwd<\/li>\n\n\n\n<li>\u5bc6\u7801<\/li>\n\n\n\n<li>\u53e3\u4ee4<\/li>\n\n\n\n<li>\u8bbf\u95ee\u7801<\/li>\n<\/ul>\n\n\n\n<ol class=\"wp-block-list\">\n<li>\u767b\u5f55\u76f8\u5173\uff1a<\/li>\n<\/ol>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Signin<\/li>\n\n\n\n<li>Sign in<\/li>\n\n\n\n<li>Sign-in<\/li>\n\n\n\n<li>\u767b\u5f55<\/li>\n\n\n\n<li>\u767b\u9646<\/li>\n\n\n\n<li>\u767b\u5165<\/li>\n<\/ul>\n\n\n\n<ol class=\"wp-block-list\">\n<li>\u8ba4\u8bc1\u76f8\u5173\uff1a<\/li>\n<\/ol>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Authentication<\/li>\n\n\n\n<li>Auth<\/li>\n\n\n\n<li>\u8ba4\u8bc1<\/li>\n\n\n\n<li>\u9274\u6743<\/li>\n\n\n\n<li>\u9a8c\u8bc1<\/li>\n<\/ul>\n\n\n\n<ol class=\"wp-block-list\">\n<li>\u51ed\u8bc1\u76f8\u5173\uff1a<\/li>\n<\/ol>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Credential<\/li>\n\n\n\n<li>Credentials<\/li>\n\n\n\n<li>\u51ed\u8bc1<\/li>\n\n\n\n<li>\u8bc1\u4e66<\/li>\n\n\n\n<li>\u4ee4\u724c<\/li>\n<\/ul>\n\n\n\n<p>\u4e3a\u4e86\u5339\u914d\u8fd9\u4e9b\u5173\u952e\u5b57\uff0c\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u6b63\u5219\u8868\u8fbe\u5f0f\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>\\b(?:Username|User|Account|Login|Email|UserID|\u7528\u6237\u540d|\u8d26\u6237|Password|Pass|Pwd|\u5bc6\u7801|\u53e3\u4ee4|\u8bbf\u95ee\u7801|Signin|Sign in|Sign-in|\u767b\u5f55|\u767b\u9646|\u767b\u5165|Authentication|Auth|\u8ba4\u8bc1|\u9274\u6743|\u9a8c\u8bc1|Credential|Credentials|\u51ed\u8bc1|\u8bc1\u4e66|\u4ee4\u724c)\\b<\/code><\/pre>\n\n\n\n<p>\u8fd9\u4e2a\u6b63\u5219\u8868\u8fbe\u5f0f\u5c06\u5339\u914d\u4e0a\u8ff0\u5217\u51fa\u7684\u5173\u952e\u5b57\uff0c\u53ef\u4ee5\u7528\u4e8e\u5728\u6587\u672c\u4e2d\u67e5\u627e\u8d26\u53f7\u5bc6\u7801\u76f8\u5173\u7684\u5185\u5bb9\u3002<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<pre class=\"wp-block-code\"><code>regexp_extract(\ndata,\n'(\"\\\\w{0,10}((?i)(\u8d26\u53f7|\u5e10\u53f7|\u5bc6\u7801|\u53e3\u4ee4|\u79d8\u94a5|\u5bc6\u94a5|token|cookie|pwd|passwd|accesskey|access.key|access_key|secret_key|auth|cipher|secret|_st|zhanghao|mima|\u7528\u6237\u540d|\u79c1\u94a5|priv_key|pri_key|private_key|api_key|apisecret|api_secret|kxid|credential|\u8d26\u5bc6|pass.|ssh|\u4e0a\u7ebf|\u53d1\u5e03|\u90e8\u7f72|client-KEY-DATA|client-certificate-DATA|certificate-authority-DATA|cacertdata|CredentialKeyTencent|CredentialSecretTencent|CredentialKeyKingsoft|CredentialSecretKingsoft|CredentialKeyAli|CredentialSecretAli|CredentialUcloudPrivateKey|CredentialUcloudPublicKey|CredentialAzureAccessKey|AzureSubscriptionId|CredentialJdAccessKey|CredentialJdAccessSecret|AwsSecretId|AwsSecretKey|GoogleAuthKey|GoogleProjectId|WangsuApikey|AkamaiClientToken|AkamaiClientSecret|AkamaiAccessToken|proxy|dbproxy|internal|Dockerfile|sshkey|aliyun|dockefile|kubeconfig|kubelet-proxy|kubernetes|-p|redis:|mysql|elastic:|clickhouse client|\u6570\u636e\u5e93|\u914d\u7f6e|client_salt|clientsalt|\u8d26\u53f7\u7ba1\u7406|salt|secretkey|secret.key|secret key|token|secret|auth|password|pwd|access|cipher|salt|mima|miyao|_st|zhanghao))\"\\\\s*&#91;=:]\\\\s*\"&#91;A-Za-z0-9_\\-]{6,33}\")|(\"((?!\\\\w{0,10}(?i)(appkey)).)\\\\w{0,10}((?i)((api)|(key)|(access)|(token)))\\\\w{0,10}\"\\\\s*&#91;=:]\\\\s*\"((&#91;0-9a-f]{8}(-&#91;0-9a-f]{4}){3}-&#91;0-9a-f]{12})|(&#91;0-9A-Z]{32})|(AKIA&#91;0-9A-Z]{16}))\")',\n0\n) as sens_data,\n\n\n\\w \u7b49\u6548\u7684\u5339\u914d\u8303\u56f4\u662f &#91;a-zA-Z0-9_] (Match a \"word\" character (Matches any letter, digit or underscore. Equivalent to &#91;a-zA-Z0-9_].))\n\n((?i)((api)|(key)|(access)|(token))) \u5339\u914d\u5ffd\u7565\u5927\u5c0f\u5199\u7684 api\/key\/access\/token \u5355\u8bcd\n\n\"\\\\s*&#91;=:]\\\\s*\"&#91;A-Za-z0-9_\\-]{6,33}\" \u5339\u914d\u3010\":\"valueHere\"\u3011\u6216\u8005\u3010\"=\"valueHere\"\u3011\u8fd9\u79cd\u60c5\u51b5\uff08\u5192\u53f7\/\u7b49\u53f7\u4e24\u8fb9\u662f\u53ef\u4ee5\u6709\u7a7a\u683c\u7684\uff09<\/code><\/pre>\n\n\n\n<h5 class=\"wp-block-heading\">\u53c2\u8003\u94fe\u63a5\uff1a<\/h5>\n\n\n\n<p>Regex 101<br><a href=\"https:\/\/regex101.com\/\">https:\/\/regex101.com\/<\/a><\/p>\n\n\n\n<p>\u6837\u4f8b<br><a href=\"https:\/\/regex101.com\/r\/vvcHmJ\/1\">https:\/\/regex101.com\/r\/vvcHmJ\/1<\/a><\/p>\n\n\n\n<p>\u7531\u201c\u6b63\u5219\u8868\u8fbe\u5f0f\u4e2d\u7684\u4e0e\u6216\u975e\u201d\u60f3\u5230\u7684<br><a href=\"https:\/\/ixyzero.com\/blog\/archives\/2059.html\">https:\/\/ixyzero.com\/blog\/archives\/2059.html<\/a><\/p>\n\n\n\n<p>[think]\u5982\u4f55\u5199\u51fa\u9ad8\u6548\u7387\u7684\u6b63\u5219\u8868\u8fbe\u5f0f<br><a href=\"https:\/\/ixyzero.com\/blog\/archives\/2052.html\">https:\/\/ixyzero.com\/blog\/archives\/2052.html<\/a><\/p>\n\n\n\n<p>=END=<\/p>\n","protected":false},"excerpt":{"rendered":"<p>=Start= \u7f18\u7531\uff1a \u7b80\u5355\u6574\u7406\u4e00\u4e0b\u5339\u914d\u8d26\u53f7\u5bc6\u7801\u7684\u6b63\u5219\u8868\u8fbe\u5f0f\uff0c\u65b9\u4fbf\u540e\u9762\u6709\u9700\u8981\u7684\u65f6\u5019\u53c2\u8003\u3002 \u6b63\u6587\uff1a \u53c2\u8003\u89e3\u7b54\uff1a  [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[23,7,25,12],"tags":[2248,2245,377,2246,2247,2250,1044,2251,2249],"class_list":["post-5676","post","type-post","status-publish","format-standard","hentry","category-knowledgebase-2","category-programing","category-security","category-tools","tag-accesskey","tag-ak","tag-regex","tag-secretkey","tag-sk","tag-2250","tag-1044","tag-2251","tag-2249"],"views":1064,"_links":{"self":[{"href":"https:\/\/ixyzero.com\/blog\/wp-json\/wp\/v2\/posts\/5676","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ixyzero.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ixyzero.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ixyzero.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ixyzero.com\/blog\/wp-json\/wp\/v2\/comments?post=5676"}],"version-history":[{"count":1,"href":"https:\/\/ixyzero.com\/blog\/wp-json\/wp\/v2\/posts\/5676\/revisions"}],"predecessor-version":[{"id":5677,"href":"https:\/\/ixyzero.com\/blog\/wp-json\/wp\/v2\/posts\/5676\/revisions\/5677"}],"wp:attachment":[{"href":"https:\/\/ixyzero.com\/blog\/wp-json\/wp\/v2\/media?parent=5676"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ixyzero.com\/blog\/wp-json\/wp\/v2\/categories?post=5676"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ixyzero.com\/blog\/wp-json\/wp\/v2\/tags?post=5676"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}