piighost/basic-auth-url
A URL carrying HTTP basic credentials, user:password before the host. The password is in the path a proxy logs and a browser history keeps, which is what makes the whole span worth taking rather than the password alone. Collides with URL on the same start; a group carrying both must declare this one first.
Label: BASIC_AUTH_URL
Pattern \bhttps?://[^\s:/@]+:[^\s@/]+@[^\s/]*[^\s/.,;:!?)\]]
Must be caught Le flux est accessible via https://admin:S3cr3tPass@intranet.exemple.com/feed sans configuration. → https://admin:S3cr3tPass@intranet.exemple.com
Must be left alone https://intranet.exemple.com/feedmailto:admin@exemple.com
Tags: international, secrets, network, software-dev
Download the detector as TOML
Used by
piighost/secrets-extended — Every credential shape the registry knows: the four of the `secrets` group plus Anthropic, Google, Slack, Twilio,…
Related patterns
piighost/anthropic-api-key — Anthropic API key: the sk-ant-api user prefix and the sk-ant-admin admin prefix, the two version digits left open so a…
piighost/aws-access-key — AWS access key identifier: the AKIA prefix of a long-term user key, then sixteen uppercase characters.
piighost/aws-secret-access-key — AWS secret access key.
piighost/azure-storage-key — Azure Storage account access key as it appears inside a connection string: the literal AccountKey= then eighty-six…
piighost/bearer-token — The credential of an HTTP Authorization Bearer header, over the RFC 6750 token alphabet.
piighost/btc-address — Bitcoin address in the three live encodings: legacy P2PKH starting with 1, P2SH starting with 3, both over the Base58…
← piighost/banking · All patterns in the catalogue · piighost/be →