seclists-pattern-matching

Eyadkelleh's avatarfrom Eyadkelleh

Sensitive data patterns for security testing: API keys, credit cards, emails, SSNs, phone numbers, IPs, and more. Use for data discovery and validation.

⭐0stars🔀0forks📁View on GitHub🕐Updated Dec 8, 2025
[Security Operations]

When & Why to Use This Skill

This Claude skill provides a comprehensive library of pattern-matching datasets designed for sensitive data discovery and security validation. It enables developers and security professionals to efficiently identify exposed API keys, PII (Personally Identifiable Information), and financial data, streamlining the process of authorized penetration testing and compliance auditing.

Use Cases

  • Automated Secret Detection: Scanning source code, environment variables, and logs to identify and remediate exposed API keys and credentials.
  • Data Privacy Compliance: Identifying Social Security Numbers (SSNs), phone numbers, and email patterns within datasets to ensure adherence to GDPR or CCPA regulations.
  • DLP Testing and Validation: Using standardized patterns to verify the effectiveness of Data Loss Prevention (DLP) systems and security filters.
  • Security Auditing and Log Analysis: Extracting and validating IP addresses and sensitive formats from large-scale system logs for threat hunting and infrastructure mapping.
nameSecLists Pattern-Matching
descriptionSensitive data patterns for security testing: API keys, credit cards, emails, SSNs, phone numbers, IPs, and more. Use for data discovery and validation.

SecLists Pattern-Matching

Description

Sensitive data patterns for security testing: API keys, credit cards, emails, SSNs, phone numbers, IPs, and more. Use for data discovery and validation.

Source: SecLists/Pattern-Matching Repository: https://github.com/danielmiessler/SecLists License: MIT

When to Use This Skill

Use this skill when you need:

  • API key detection in code/logs
  • Credit card validation testing
  • Email pattern matching
  • IP address discovery
  • SSN format validation
  • Phone number pattern testing

⚠️ IMPORTANT: Only use for authorized security testing, bug bounty programs, CTF competitions, or educational purposes.

Key Files in This Skill

  • api-keys.txt - API key patterns
  • credit-cards.txt - Credit card formats
  • email-addresses.txt - Email patterns
  • ip-addresses.txt - IP address patterns
  • ssn.txt - Social Security Number patterns
  • phone-numbers.txt - Phone number formats

Usage Example

# Access files from this skill
import os

# Example: Load patterns/payloads
skill_path = "references/Pattern-Matching"

# List all available files
for root, dirs, files in os.walk(skill_path):
    for file in files:
        if file.endswith('.txt'):
            filepath = os.path.join(root, file)
            print(f"Found: {filepath}")
            
            # Read file content
            with open(filepath, 'r', errors='ignore') as f:
                content = f.read().splitlines()
                print(f"  Lines: {len(content)}")

Security & Ethics

Authorized Use Cases ✅

  • Authorized penetration testing with written permission
  • Bug bounty programs (within scope)
  • CTF competitions
  • Security research in controlled environments
  • Testing your own systems
  • Educational demonstrations

Prohibited Use Cases ❌

  • Unauthorized access attempts
  • Testing without permission
  • Malicious activities
  • Privacy violations
  • Any illegal activities

Complete SecLists Collection

This is a curated subset of SecLists. For the complete collection:

Generated by Skill Seeker | SecLists Pattern-Matching Collection License: MIT - Use responsibly with proper authorization