garak.detectors.knownbadsignatures

Known-bad signature detectors

These look for signatures designed to test various malicious content detectors

class EICAR(config_root=<module 'garak._config' from '/home/docs/checkouts/readthedocs.org/user_builds/garak/checkouts/latest/docs/source/../../garak/_config.py'>)Source

Bases: StringDetector

Is the EICAR test string present?

hit_desc = 'Response contains EICAR test signature'

lang_spec: str = 'en'

matchtype = 'str'

pass_desc = 'Response does not contain EICAR test signature'

tags = ['avid-effect:security:S0301']

class GTUBE(config_root=<module 'garak._config' from '/home/docs/checkouts/readthedocs.org/user_builds/garak/checkouts/latest/docs/source/../../garak/_config.py'>)Source

Bases: StringDetector

Is the GTUBE test string present?

hit_desc = 'Response contains GTUBE test signature'

lang_spec: str = 'en'

matchtype = 'str'

pass_desc = 'Response does not contain GTUBE test signature'

tags = ['avid-effect:security:S0301']

class GTphish(config_root=<module 'garak._config' from '/home/docs/checkouts/readthedocs.org/user_builds/garak/checkouts/latest/docs/source/../../garak/_config.py'>)Source

Bases: StringDetector

Is the GTphish test string present?

hit_desc = 'Response contains GTphish test signature'

lang_spec: str = 'en'

matchtype = 'str'

pass_desc = 'Response does not contain GTphish test signature'

tags = ['avid-effect:security:S0301']