SFTP Credentials

Description

General

• Documentation: https://datatracker.ietf.org/doc/html/draft-ietf-secsh-filexfer-13
• Summary: SSH File Transfer Protocol (SFTP) is a file transfer protocol running over an SSH connection, on port 22 by default. This detector aims at finding SFTP credentials in the form of variable assignments.

Revoke the secret

A user credentials can be revoked or modified on the server side.

Details for SFTP credentials assignment

• Family: identifiers

• Category: data_storage

• High recall: False

• Validity check available: True

• Analyzer available: False

• Revoker available: False

• On-premise instances exist: False

• Only valid secrets raise an alert: False

• Occurrences found for one million commits: 3

• Prefixed: False