jeroenwillemsen/wrongsecrets repository overview

⁠OWASP WrongSecrets

Welcome to the OWASP WrongSecrets p0wnable app. With this app, we have packed various ways of how to not store your secrets. These can help you to realize whether your secret management is ok. The challenge is to find all the different secrets by means of various tools and techniques.

Want to do a quick run? try docker run -p 8080:8080 jeroenwillemsen/wrongsecrets:latest-no-vault. Can you solve all the challenges?

Head over to our Github repository for more information!⁠

• Source code: https://github.com/OWASP/wrongsecrets⁠
• Contribution Guidelines: https://github.com/OWASP/wrongsecrets/blob/master/CONTRIBUTING.md⁠
• Code of Conduct: https://github.com/OWASP/wrongsecrets/blob/master/CODE_OF_CONDUCT.md⁠
• Organization Project website: https://owasp.org/www-project-wrongsecrets/⁠