logo

Database

Azure Signalr Connection String

Description

The source code repository contains sensitive information: Azure SignalR Connection String

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    • Matches Azure SignalR Connection String patterns in source code and configuration files

Vulnerable code example

Endpoint=https://contoso-chat.service.signalr.net;AccessKey=b8oYsfroDrsehrD50AlpcZRzAQYUFAB1hgxTrAsWdl4=;Version=1.0;
"ConnectionString": "Endpoint=https://notify-prod.service.signalr.net;AccessKey=ep4NSE4FC8PrQlAceEjtZE1aaryrWst46pLtz5XopMj2OIXu2gQKJQQJ99CDACbx6IJXJ3w3AAAAASRSF8tR;Version=1.0;"
Azure__SignalR__ConnectionString="Endpoint=https://dash.service.signalr.net;ClientEndpoint=https://gw.contoso.com;AccessKey=BA3VyQC9fHRLQY9OBmNwLlwydVmZKNzo6zQ4ZgpImpy=;Version=1.0;"
"AzureSignalRConnectionString": "endpoint=https://func-rt.signalr.azure.cn;accesskey=zQut8h/JV+eo+r/dG+8SEbmWK5wfqpgAyMx6ZDy7N7P=;version=1.0;"
services.AddSignalR().AddAzureSignalR("Endpoint=https://ops.signalr.azure.us; Port=443; AccessKey=rVpSyLWvfp2AsFWNA2NFIee8JHz3UAZe4XzEBPSMVoB=; Version=1.0;");
SIGNALR_ACCESS_KEY=EH82qtYyzSnJ4oXAd0Kp9Tpd29AR6urgYJdupUFWBjXdtuZc7AoIJQQJ99BIACjebFJXJ3w3AAAAASRSZECr
AccessKey=EWEQRa5R0VPvpkfD2wd7Kz63uNymAo8dR31Cc4UACWzi09VY69VHJQQJ99BGACpJqYJXJ3w3AAAAASRSfDdi;Endpoint=https://chat.service.signalr.net;Version=1.0;