mirror of
https://github.com/FuzzingLabs/fuzzforge_ai.git
synced 2026-06-01 07:31:35 +02:00
tduhamel42
3be4d34531
Add comprehensive benchmark dataset with 32 documented secrets for testing secret detection workflows (gitleaks, trufflehog, llm_secret_detection). - Add test_projects/secret_detection_benchmark/ with 19 test files - Add ground truth JSON with precise line-by-line secret mappings - Update .gitignore with exceptions for benchmark files (not real secrets) Dataset breakdown: - 12 Easy secrets (standard patterns) - 10 Medium secrets (obfuscated) - 10 Hard secrets (well hidden)
20 lines
545 B
Python
20 lines
545 B
Python
"""
|
|
Configuration with moderately obfuscated secrets
|
|
"""
|
|
import base64
|
|
|
|
# MEDIUM SECRET #11: Base64 encoded AWS key
|
|
AWS_KEY_ENCODED = "QUtJQUlPU0ZPRE5ON0VYQU1QTEU="
|
|
|
|
# MEDIUM SECRET #12: Hex-encoded API token
|
|
HEX_TOKEN = "6170695f746f6b656e5f616263313233787977373839"
|
|
|
|
# MEDIUM SECRET #13: Split secret concatenated at runtime
|
|
DB_PASS_PART1 = "MySecure"
|
|
DB_PASS_PART2 = "Password"
|
|
DB_PASS_PART3 = "2024!"
|
|
DATABASE_PASSWORD = DB_PASS_PART1 + DB_PASS_PART2 + DB_PASS_PART3
|
|
|
|
def get_aws_key():
|
|
return base64.b64decode(AWS_KEY_ENCODED).decode()
|