Benign lua Download

camouflage.nvim 0.17.2-1

“Hide sensitive values in configuration files during screen sharing”

README basename (markdown/plain text)Source contains low-bit mask syntax

Evidence

References named armored private-key header lines 9–34
9:15… private_key" {
10 description = "SSH private key for instance access"
11 type = string
12 default = <<EOF
13-----BEGIN RSA PRIVATE KEY-----
14MIIEpAIBAAKCAQEA0Z3VS5JJcds3xfn/ygWyF8PbnGy0AHE8RzjHgWzZAFdmwbiH
15BvdMfWjhIOmMPHkUxGnJFLMXPqVEJdRUoGeXFQuAqPOBbsC0WhfpJGkNmO6NPGRF
16wNbXyBKhJFHQaZTtlGkQbC3VJxWpY5wDgXz5fGvBAUxHog4KLMfqgYmQWCQyMDLp
17ExAMPLEKEYwJalrXUtnFEMI/K7MDENGbPxRfiCYEXAMPLEKEYsRQ8tR/lPsNPz1p
18abc123DEFghiJKLmnoPQRstuVWXyzSecretKeyMaterial0123456789ABCDEF+/
19xyz789UVWsecretKEYdataNeedsToBeProtectedFromExposure1234567890ab
20EXAMPLEKEYMATERIALTHATWOULDNORMALLYBEMUCHTLONGERANDMORERANDOM==
21-----END RSA PRIVATE KEY-----
22EOF
⋯4 lines
27 aws_credentials_content = <<EOF
28[default]
29aws_access_key_id = AKIAIOSFODNN7EXAMPLE
30aws_secret_access_key = wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY
31
32[production]
33aws_access_key_id = AKIAI44QH8DHBEXAMPLE
34aws_secret_access_key = je7Mt …
password/passwd key with inline value lines 44–54
44:24… ple.com
45port=5432
46database=myapp_production
47username=admin_user
48password=SuperSecretDBP@ssw0rd!2024
49sslmode=require
50EOF
⋯4 lines
Auth-like constant assignment lines 67–86
67:33… n.example.com"
68 export DB_USER="application_user"
69 export DB_PASSWORD="Pr0duct10nAppP@ssw0rd!"
70 export DB_NAME="myapp"
71
72 # Set API keys
73 export STRIPE_API_KEY="sk_test_EXAMPLE_KEY_1234567890abcdef"
74 export OPENAI_API_KEY="sk-proj-aBcDeFgHiJkLmNoPqRsTuVwXyZ0123456789"
75 export GITHUB_TOKEN="ghp_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
76
77 # AWS credentials for the application
78 export AWS_ACCESS_KEY_ID="AKIAIOSFODNN7EXAMPLE"
79 export AWS_SECRET_ACCESS_KEY="wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY"
80
81 # Configure application
⋯5 lines
Server provisioning enables or starts a service lines 87–124
87:78… !@db.production.example.com:5432/myapp"
88
89 redis:
90 url: "redis://:[email protected]:6379/0"
91
92 secrets:
93 jwt_secret: "jwt-signing-secret-key-super-secure-123!"
94 encryption_key: "aes-256-key-base64-encoded-here=="
95 CONFIG
96
97 # Start application
98 systemctl enable myapp
99 systemctl start myapp
100 EOT
⋯6 lines
107# Docker compose configuration
108resource "local_file" "docker_compose" {
109 filename = "/opt/myapp/docker-compose.yml"
110 content = <<-EOT
111 version: '3.8'
112 services:
113 app:
114 image: myapp:latest
115 environment:
116 - DATABASE_URL=postgresql://dbuser:D0ck3rDBP@ss!@db:5432/myapp
117 - REDIS_URL=redis://:R3d1sP@ssw0rd@redis:6379/0
118 - SECRET_KEY=docker-app-secret-key-very-secure
119 - API_KEY=api_key_for_external_service_12345
120 - JWT_SECRET=jwt-token-signing-secret-key
⋯4 lines
PASSWORD credential label lines 126–133
126:3… environment:
127 - POSTGRES_USER=dbuser
128 - POSTGRES_PASSWORD=D0ck3rDBP@ss!
129 - POSTGRES_DB=myapp
130
131 redis:
132 image: redis:7
133 command: redis-server --requirepass R3 …

Showing the top 5 files — 6 more files (51 regions) not shown.

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.