PubNub Publish Key

Description

General

• Documentation: https://www.pubnub.com/docs/platform/home
• Summary: PubNub is a real time communication platform. This detector focuses on detecting publish keys.
• IPs allowlist: This feature is not currently available.
• Scopes: This key can only be used in conjunction with a Pubnub subscription key to publish messages.

Revoke the secret

This can be done in the PubNub dashboard.

Check for suspicious activity

Usage of keys can be inspected in the PubNub dashboard.

Details for PubNub Publish Key

• Family: token

• Category: messaging_system

• Company: PubNub

• High recall: True

• Validity check available: False

• Analyzer available: False

• Minimum number of matches: 1

• Occurrences found for one million commits: 0.05

• Prefixed: True

• PreValidators:

- type: ContentWhitelistPreValidator
  patterns:
    - pub-c-

Examples

- text: "PUB_KEY = 'pub-c-d3ff6da6-faa9-11m5-4160-0379f8149h4d'"
  apikey: pub-c-d3ff6da6-faa9-11m5-4160-0379f8149h4d

- text: "PNConfiguration *configuration = [PNConfiguration configurationWithPublishKey:@'pub-c-7e0453e2-5134-10e9-b63y-321d8ea4365d'];"
  apikey: pub-c-7e0453e2-5134-10e9-b63y-321d8ea4365d

# Fat-fingered secret
- text: Xpub-c-7e0453e2-5134-10e9-b63y-321d8ea4365d
  apikey: pub-c-7e0453e2-5134-10e9-b63y-321d8ea4365d