Regex Pattern Library¶

International Credit Cards¶

1. Visa card scanning (4x4 format):

   \b4\d{3}(?:(?:,\d{4}){3}|(?:\s\d{4}){3}|(?:\.\d{4}){3}|(?:-\d{4}){3})\b
   

2. Visa card scanning (2x8 format):

   \b4\d{3}(?:(?:\d{4}(?:(?:,\d{8})|(?:-\d{8})|(?:\s\d{8})|(?:\.\d{8}))))\b
   

3. Visa card scanning (1x16 and 1x19 format):

   \b4\d{15}(?:\d{3})?\b
   

4. Master card scanning (4x4 format):

   \b(?:(?:5[1-5]\d{2})|(?:222[1-9])|(?:22[3-9]\d)|(?:2[3-6]\d{2})|(?:27[0-1]\d)|(?:2720))(?:(?:\s\d{4}){3}|(?:\.\d{4}){3}|(?:-\d{4}){3}|(?:,\d{4}){3})\b
   

5. Master card scanning (2x8 format):

   \b(?:(?:5[1-5]\d{2})|(?:222[1-9])|(?:22[3-9]\d)|(?:2[3-6]\d{2})|(?:27[0-1]\d)|(?:2720))(?:(?:\d{4}(?:(?:,\d{8})|(?:-\d{8})|(?:\s\d{8})|(?:\.\d{8}))))\b
   

6. Master card scanning (1x16 format):

   \b(?:(?:5[1-5]\d{2})|(?:222[1-9])|(?:22[3-9]\d)|(?:2[3-6]\d{2})|(?:27[0-1]\d)|(?:2720))(?:\d{12})\b
   

7. Discover card scanning (4x4 format):

   \b(?:(?:(?:6221(?:2[6-9]|[3-9][0-9])\d{2}(?:,\d{4}){2})|(?:6221\s(?:2[6-9]|[3-9][0-9])\d{2}(?:\s\d{4}){2})|(?:6221\.(?:2[6-9]|[3-9][0-9])\d{2}(?:\.\d{4}){2})|(?:6221-(?:2[6-9]|[3-9][0-9])\d{2}(?:-\d{4}){2}))|(?:(?:6229(?:[01][0-9]|2[0-5])\d{2}(?:,\d{4}){2})|(?:6229\s(?:[01][0-9]|2[0-5])\d{2}(?:\s\d{4}){2})|(?:6229\.(?:[01][0-9]|2[0-5])\d{2}(?:\.\d{4}){2})|(?:6229-(?:[01][0-9]|2[0-5])\d{2}(?:-\d{4}){2}))|(?:(?:6011|65\d{2}|64[4-9]\d|622[2-8])(?:(?:\s\d{4}){3}|(?:\.\d{4}){3}|(?:-\d{4}){3}|(?:,\d{4}){3})))\b
   

8. Discover card scanning (2x8 format):

   \b(?:6221(?:2[6-9]|[3-9][0-9])\d{2}(?:,\d{8}|\s\d{8}|-\d{8}|\.\d{8})|6229(?:[01][0-9]|2[0-5])\d{2}(?:,\d{8}|\s\d{8}|-\d{8}|\.\d{8})|(?:6011|65\d{2}|64[4-9]\d|622[2-8])\d{4}(?:,\d{8}|\s\d{8}|-\d{8}|\.\d{8}))\b
   

9. Discover card scanning (1x16 format):

   \b(?:6221(?:2[6-9]|[3-9][0-9])\d{10}|6229(?:[01][0-9]|2[0-5])\d{10}|(?:6011|65\d{2}|64[4-9]\d|622[2-8])\d{12})\b
   

10. American Express card scanning (4+6+5 format):

    \b3[47]\d{2}(?:(?:\s\d{6}\s\d{5})|(?:\.\d{6}\.\d{5})|(?:-\d{6}-\d{5})|(?:,\d{6},\d{5}))\b
    

11. American Express card scanning (4+4+4+3 format):

    \b3[47]\d{2}(?:(?:\s\d{4}\s\d{4}\s\d{3})|(?:\,\d{4}\,\d{4}\,\d{3})|(?:-\d{4}-\d{4}-\d{3})|(?:\.\d{4}\.\d{4}\.\d{3}))\b
    

12. American Express card scanning (8+7 format):

    \b3[47]\d{6}(?:(?:\s\d{7})|(?:\,\d{7})|(?:-\d{7})|(?:\.\d{7}))\b
    

13. American Express card scanning (1x15 format):

    \b3[47]\d{13}\b
    

14. Diners Club card scanning (4+6+4 format):

    \b(?:30[0-59]\d|3[689]\d{2})(?:(?:\s\d{6}\s\d{4})|(?:\.\d{6}\.\d{4})|(?:-\d{6}-\d{4})|(?:,\d{6},\d{4}))\b
    

15. Diners Club card scanning (4+4+4+2 format):

    \b(?:30[0-59]\d|3[689]\d{2})(?:(?:\s\d{4}\s\d{4}\s\d{2})|(?:\,\d{4}\,\d{4}\,\d{2})|(?:-\d{4}-\d{4}-\d{2})|(?:\.\d{4}\.\d{4}\.\d{2}))\b
    

16. Diners Club card scanning (8+6 format):

    \b(?:30[0-59]\d{5}|3[689]\d{6})(?:(?:\s\d{6})|(?:\,\d{6})|(?:-\d{6})|(?:\.\d{6}))\b
    

17. Diners Club card scanning (1x14 format):

    (?:30[0-59]\d|3[689]\d{2})(?:\d{10})
    

18. JCB card scanning (4x4 format):

    \b35(?:2[89]|[3-9][0-9])(?:(?:\s\d{4}){3}|(?:\.\d{4}){3}|(?:-\d{4}){3}|(?:,\d{4}){3})\b
    

19. JCB card scanning (2x8 format):

    \b35(?:2[89]|[3-9][0-9])\d{4}(?:(?:,\d{8})|(?:-\d{8})|(?:\s\d{8})|(?:\.\d{8}))\b
    

20. JCB card scanning (1x16 format):

    \b35(?:2[89]|[3-9][0-9])(?:\d{12})\b
    

21. Maestro card scanning (4x4 format):

    \b(?:5[06-9]\d{2}|6\d{3})(?:(?:\s\d{4}){3}|(?:\.\d{4}){3}|(?:-\d{4}){3}|(?:,\d{4}){3})\b
    

22. Maestro card scanning (2x8 format):

    \b(?:5[06-9]\d{6}|6\d{7})(?:\s\d{8}|\.\d{8}|-\d{8}|,\d{8})\b
    

23. Maestro card scanning (1x16 format):

    \b(?:5[06-9]\d{2}|6\d{3})(?:\d{12})\b
    

24. IBAN scanning:

    \b(?:NO\d{2}(?:[ \-]?\d{4}){2}[ \-]?\d{3}|BE\d{2}(?:[ \-]?\d{4}){3}|(?:DK|FO|FI|GL|SD)\d{2}(?:[ \-]?\d{4}){3}[ \-]?\d{2}|NL\d{2}[ \-]?[A-Z]{4}(?:[ \-]?\d{4}){2}[ \-]?\d{2}|MK\d{2}[ \-]?\d{3}[A-Z0-9](?:[ \-]?[A-Z0-9]{4}){2}[ \-]?[A-Z0-9]\d{2}|SI\d{17}|(?:AT|BA|EE|LT|XK)\d{18}|(?:LU|KZ|EE|LT)\d{5}[A-Z0-9]{13}|LV\d{2}[A-Z]{4}[A-Z0-9]{13}|(?:LI|CH)\d{2}[ \-]?\d{4}[ \-]?\d[A-Z0-9]{3}(?:[ \-]?[A-Z0-9]{4}){2}[ \-]?[A-Z0-9]|HR\d{2}(?:[ \-]?\d{4}){4}[ \-]?\d|GE\d{2}[ \-]?[A-Z0-9]{2}\d{2}\d{14}|VA\d{20}|BG\d{2}[A-Z]{4}\d{6}[A-Z0-9]{8}|BH\d{2}[A-Z]{4}[A-Z0-9]{14}|GB\d{2}[A-Z]{4}(?:[ \-]?\d{4}){3}[ \-]?\d{2}|IE\d{2}[ \-]?[A-Z0-9]{4}(?:[ \-]?\d{4}){3}[ \-]?\d{2}|(?:CR|DE|ME|RS)\d{2}(?:[ \-]?\d{4}){4}[ \-]?\d{2}|(?:AE|TL|IL)\d{2}(?:[ \-]?\d{4}){4}[ \-]?\d{3}|GI\d{2}[ \-]?[A-Z]{4}(?:[ \-]?[A-Z0-9]{4}){3}[ \-]?[A-Z0-9]{3}|IQ\d{2}[ \-]?[A-Z]{4}(?:[ \-]?\d{4}){3}[ \-]?\d{3}|MD\d{2}(?:[ \-]?[A-Z0-9]{4}){5}|SA\d{2}[ \-]?\d{2}[A-Z0-9]{2}(?:[ \-]?[A-Z0-9]{4}){4}|RO\d{2}[ \-]?[A-Z]{4}(?:[ \-]?[A-Z0-9]{4}){4}|(?:PK|VG)\d{2}[ \-]?[A-Z0-9]{4}(?:[ \-]?\d{4}){4}|AD\d{2}(?:[ \-]?\d{4}){2}(?:[ \-]?[A-Z0-9]{4}){3}|(?:CZ|SK|ES|SE|TN)\d{2}(?:[ \-]?\d{4}){5}|(?:LY|PT|ST)\d{2}(?:[ \-]?\d{4}){5}[ \-]?\d|TR\d{2}[ \-]?\d{4}[ \-]?\d[A-Z0-9]{3}(?:[ \-]?[A-Z0-9]{4}){3}[ \-]?[A-Z0-9]{2}|IS\d{2}(?:[ \-]?\d{4}){5}[ \-]?\d{2}|(?:IT|SM)\d{2}[ \-]?[A-Z]\d{3}[ \-]?\d{4}[ \-]?\d{3}[A-Z0-9](?:[ \-]?[A-Z0-9]{4}){2}[ \-]?[A-Z0-9]{3}|GR\d{2}[ \-]?\d{4}[ \-]?\d{3}[A-Z0-9](?:[ \-]?[A-Z0-9]{4}){3}[A-Z0-9]{3}|(?:FR|MC)\d{2}(?:[ \-]?\d{4}){2}[ \-]?\d{2}[A-Z0-9]{2}(?:[ \-]?[A-Z0-9]{4}){2}[ \-]?[A-Z0-9]\d{2}|MR\d{2}(?:[ \-]?\d{4}){5}[ \-]?\d{3}|(?:SV|DO)\d{2}[ \-]?[A-Z]{4}(?:[ \-]?\d{4}){5}|BY\d{2}[ \-]?[A-Z]{4}[ \-]?\d{4}(?:[ \-]?[A-Z0-9]{4}){4}|GT\d{2}(?:[ \-]?[A-Z0-9]{4}){6}|AZ\d{2}[ \-]?[A-Z0-9]{4}(?:[ \-]?\d{5}){4}|LB\d{2}[ \-]?\d{4}(?:[ \-]?[A-Z0-9]{5}){4}|(?:AL|CY)\d{2}(?:[ \-]?\d{4}){2}(?:[ \-]?[A-Z0-9]{4}){4}|(?:HU|PL)\d{2}(?:[ \-]?\d{4}){6}|QA\d{2}[ \-]?[A-Z]{4}(?:[ \-]?[A-Z0-9]{4}){5}[ \-]?[A-Z0-9]|PS\d{2}[ \-]?[A-Z0-9]{4}(?:[ \-]?\d{4}){5}[ \-]?\d|UA\d{2}[ \-]?\d{4}[ \-]?\d{2}[A-Z0-9]{2}(?:[ \-]?[A-Z0-9]{4}){4}[ \-]?[A-Z0-9]|BR\d{2}(?:[ \-]?\d{4}){5}[ \-]?\d{3}[A-Z0-9][ \-]?[A-Z0-9]|EG\d{2}(?:[ \-]?\d{4}){6}\d|MU\d{2}[ \-]?[A-Z]{4}(?:[ \-]?\d{4}){4}\d{3}[A-Z][ \-]?[A-Z]{2}|(?:KW|JO)\d{2}[ \-]?[A-Z]{4}(?:[ \-]?[A-Z0-9]{4}){5}[ \-]?[A-Z0-9]{2}|MT\d{2}[ \-]?[A-Z]{4}[ \-]?\d{4}[ \-]?\d[A-Z0-9]{3}(?:[ \-]?[A-Z0-9]{3}){4}[ \-]?[A-Z0-9]{3}|SC\d{2}[ \-]?[A-Z]{4}(?:[ \-]?\d{4}){5}[ \-]?[A-Z]{3}|LC\d{2}[ \-]?[A-Z]{4}(?:[ \-]?[A-Z0-9]{4}){6})\b
    

Network and Device Information¶

1. IPv4 address scanning:

   \b((25[0-5]|(2[0-4]|1?[0-9])?[0-9])\.){3}(25[0-5]|(2[0-4]|1?[0-9])?[0-9])\b
   

2. IPv6 address scanning:

   (([0-9a-fA-F]{1,4}:){7,7}[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,7}:|([0-9a-fA-F]{1,4}:){1,6}:[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,5}(:[0-9a-fA-F]{1,4}){1,2}|([0-9a-fA-F]{1,4}:){1,4}(:[0-9a-fA-F]{1,4}){1,3}|([0-9a-fA-F]{1,4}:){1,3}(:[0-9a-fA-F]{1,4}){1,4}|([0-9a-fA-F]{1,4}:){1,2}(:[0-9a-fA-F]{1,4}){1,5}|[0-9a-fA-F]{1,4}:((:[0-9a-fA-F]{1,4}){1,6})|:((:[0-9a-fA-F]{1,4}){1,7}|:)|fe80:(:[0-9a-fA-F]{0,4}){0,4}%[0-9a-zA-Z]{1,}|::(ffff(:0{1,4}){0,1}:){0,1}((25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9])\.){3,3}(25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9])|([0-9a-fA-F]{1,4}:){1,4}:((25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9])\.){3,3}(25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9]))
   

3. Standard MAC address scanning:

   \b(?:[0-9A-Fa-f]{2}[:-]){5}(?:[0-9A-Fa-f]{2})\b
   

4. HTTP Basic Authentication Header scanning:

   \bAuthorization:\s+Basic\s+[A-Za-z0-9+/=]+\b
   

5. HTTP Cookie scanning:

   \bSet-Cookie:\s*(?:[^;,]+)(?:;\s*(?:[^,]+))*\b
   

6. HTTP(S) URL scanning:

   https?:\/\/(www\.)?[-a-zA-Z0-9@:%._\+~#=]{1,}\.[a-zA-Z0-9()]{1,6}\b([-a-zA-Z0-9()@:%_\+.~#?&//=]*)
   

Personal Sensitive Information¶

1. Standard email address scanning:

   \b[\w!#$%&'*+\/=?`{|}~^-]+(?:\.[\w!#$%&'*+\/=?`{|}~^-]+)*(%40|@)(?:[a-zA-Z0-9-]+\.)+[a-zA-Z]{2,6}\b
   

2. US passport scanning:

   (?i)\b(?:passport)(?:_\w+)?\W{0,30}(?:\b[0-9A-Z]{9}\b|\b[0-9]{6}[A-Z][0-9]{2}\b)
   

3. US vehicle identification number scanning:

   (?i)\b(?:vehicle[_\s-]*identification[_\s-]*number|vin)\W{0,30}\b[A-HJ-NPR-Z0-9]{17}\b
   

4. UK National Insurance number scanning:

   (?i)\b(?:national[\s_]?(?:insurance(?:\s+number)?)?|NIN|NI[\s_]?number|insurance[\s_]?number)\b(?:\W{0,30})?\b[A-Z]{2}\d{6}[A-Z]?\b
   

5. Canadian Social Insurance Number scanning:

   (?i)\b(?:social[\s_]?(?:insurance(?:\s+number)?)?|SIN|Canadian[\s_]?(?:social[\s_]?(?:insurance)?|insurance[\s_]?number)?)\b(?:\W{0,30})?\b\d{3}-\d{3}-\d{3}\b
   

Keys and Credentials¶

1. AWS Access Key ID scanning:

   (AKIA|A3T|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[0-9A-Z]{16}
   

2. AWS Secret Access Key scanning:

   (aws|AWS|amazon).{0,19}\b[A-Za-z0-9/+]{40}\b
   

3. Dynatrace Token scanning:

   dt0[a-zA-Z]{1}[0-9]{2}\.[A-Z0-9]{24}\.[A-Z0-9]{64}
   

4. Facebook accessToken scanning:

   EAACEdEose0cBA[0-9A-Za-z]+
   

5. Gitlab Token scanning:

   glpat-[\w\\-]{20}
   

6. Instagram Token scanning:

   (?i)\b(igqvj|instagram).*?[a-z0-9]{100,250}\b
   

7. JSON Web Token scanning:

   \bey[I-L][\w=-]+\.ey[I-L][\w=-]+(\.[\w.+/=-]+)?\b
   

8. Mailchimp API Key scanning:

   [0-9a-f]{32}-us[0-9]{1,2}
   

9. Mailgun API Key scanning:

   key-[0-9a-zA-Z]{32}
   

10. Okta API Token scanning:

    SSWS 00[a-zA-Z0-9\-\_]{40}
    

11. Slack Access Token scanning:

    xox[baprs]-([0-9a-zA-Z]{10,48})?
    

12. Stripe API Key scanning:

    sk_live_[0-9a-zA-Z]{24}
    

13. Stripe Restricted API Key scanning:

    rk_live_[0-9a-zA-Z]{24}
    

14. Twilio API Key scanning:

    \bSK[0-9a-fA-F]{32}\b
    

15. Square Access Token scanning:

    sq0atp-[0-9A-Za-z\-_]{22}
    

16. Square OAuth Secret scanning:

    sq0csp-[0-9A-Za-z\-_]{43}
    

17. Google API Key scanning:

    \bAIza[0-9A-Za-z\\-_]{35}\b
    

18. Google OAuth Access Token scanning:

    \bya29\.[0-9A-Za-z\\-_]+\b
    

19. RSA Private Key scanning:

    BEGIN RSA PRIVATE KEY
    

20. Send Grid API Token scanning:

    SG\.[a-zA-Z0-9]{22}\.[a-zA-Z0-9]{43}
    

21. Heroku API Key scanning:

    [h|H][e|E][r|R][o|O][k|K][u|U].{0,29}[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}
    

22. SSH Key scanning:

    BEGIN OPENSSH PRIVATE KEY|BEGIN SSH PRIVATE KEY|BEGIN DSA PRIVATE KEY|BEGIN EC PRIVATE KEY
    

23. PGP Private Key scanning:

    BEGIN PGP PRIVATE KEY BLOCK
    

24. Paypal Braintree Access Token scanning:

    access_token\$production\$[0-9a-z]{16}\$[0-9a-f]{32}
    

25. Amazon Marketplace Web Services Auth Token scanning:

    amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\b
    

26. Azure Personal Access Token scanning:

    ((?i)azure)[\s\S]{0,16}[a-z0-9]{52}\b
    

27. Azure SQL Connection String scanning:

    (?i)[a-z][a-z0-9-]+\.database(?:\.secure)?\.(?:(?:windows|usgovcloudapi)\.net|chinacloudapi\.cn|cloudapi\.de)
    

28. Azure Subscription Key scanning:

    ((?i)(subscription|authoring|programmatic))[\s\S]{0,30}[\W][a-z0-9]{32}\b
    29. Bearer Token scanning: `(?i)bearer [-a-z0-9._~+/]{4,}
    

29. Checkout.com Secret scanning:

    \bsk_((sbox_)?[a-z0-9]{27}|(test_)?[a-fA-F0-9]{8}-([a-fA-F0-9]{4}-){3}[a-fA-F0-9]{12})\b
    

30. Databricks Personal Access Token scanning:

    \bdapi[a-h0-9]{32}\b
    

31. Docker Swarm Join Token scanning:

    \bSWMTKN-1-[\w\d-]{76}\b
    

32. Docker Swarm Unlock Key scanning:

    \bSWMKEY-1-[\w\d+/]{43}\b
    

33. GitHub Access Token scanning:

    \bgh[opsu]_[0-9a-zA-Z]{36}\b
    

34. GitHub Refresh Token scanning:

    \bghr_[0-9a-zA-Z]{76}\b
    

35. JIRA API Token scanning:

    (jira|JIRA|Jira).{0,24}[a-zA-Z0-9]{20}[A-Z0-9]{4}\b
    

36. LinkedIn Secret scanning:

    (?i)linkedin(.{0,20})?[:='"][0-9a-z]{16}\b
    

37. Shopify Access Token scanning:

    \bshp(at|ca|pa)_[a-fA-F0-9]{32}\b
    

38. Shopify Shared Secret scanning:

    \bshpss_[a-fA-F0-9]{32}\b
    

39. Slack Webhook Secret scanning:

    \bT[a-zA-Z0-9_]{8}/B[a-zA-Z0-9_]{8}/[a-zA-Z0-9_]{24}\b
    

40. Twitter Secret scanning:

    (?i)twitter(.{0,20})?[:='"][0-9a-z]{35,}\b