wrongsecrets

Vulnerable app with examples showing how to not use secrets

AGPL-3.0 License

Stars
1.2K
View Code on GitHub Visit Website
Ecosystems: Docker, Kubernetes, Azure, Java, Amazon Web Services

Bot releases are visible (Hide)

wrongsecrets - 1.9.0: K8s 1.30, no Consul, Java 22, new challenges and automation leaps Latest Release

Published by commjoen 3 months ago

What's Changed

This version is another new content & LCM release: we've added a cool and exciting challenge about Kubernetes Sealed Secrets! We upgraded to K8s 1.30, removed our dependency on Consul (less resources required to play!), and added a lot of automation to see if everything works the way it should. Next, we started compiling everything for Java 22. In other words: time for a big version bump!

New Challenges

Fixes

LCM

Full Changelog: https://github.com/OWASP/wrongsecrets/compare/1.8.5...1.9.0

Special Thanks

We would like to thank @nbaars , @Shubham-Patel07 , @bendehaan , and @commjoen for their hard work on this release!

wrongsecrets - 1.8.5: Java 22, challenge fixes, automation, and textual updates

Published by commjoen 6 months ago

What's Changed

This version is a big LCM release, where we upgraded to Java22, and made a lot of the challenges easier to read. On top of that we extended the end2end tests a lot and made them part of our automations, in order to catch bugs faster.

Fixes

Java 22

New Contributors

Special thanks

Special thanks goes to @bendehaan , @commjoen , @Wind010 , @dannylloyd for their hard work on this release!

Full Changelog: https://github.com/OWASP/wrongsecrets/compare/1.8.4...1.8.5

wrongsecrets - 1.8.4: LCM and bugfixes

Published by commjoen 8 months ago

What's Changed

Bugfixes and Improvements

LCM

New Contributors

Full Changelog: https://github.com/OWASP/wrongsecrets/compare/1.8.3...1.8.4

Special Thanks

Special thanks to @Shubham-Patel07 , @bendehaan , @za , @nbaars , @commjoen for their hard work on this release!

wrongsecrets - 1.8.3: last vault challenge and LCM

Published by commjoen 9 months ago

What's Changed

Bugfixes, improvements, and docs:

New challenges:

LCM:

Full Changelog: https://github.com/OWASP/wrongsecrets/compare/1.8.2...1.8.3

Special thanks

Special thanks to @za , @commjoen , @bendehaan and @nwolniak for their hard work on this release!

wrongsecrets - 1.8.2: 2 new challenges! Open Security Summit Release

Published by commjoen 9 months ago

What's Changed

Full Changelog: https://github.com/OWASP/wrongsecrets/compare/1.8.1...1.8.2

Special Thanks

Thanks to @nbaars , @commjoen , and @bendehaan for their hard work on this release

wrongsecrets - 1.8.1: Challenge 43 and other updates

Published by commjoen 9 months ago

What's Changed

Improvements and bug fixes

New challenges

Documentation

Goodbye Okteto

LCM

Special Thanks

Special thanks to @nbaars , @djvinnie , @bendehaan , and @commjoen for their hard work on this release!

Full Changelog: https://github.com/OWASP/wrongsecrets/compare/1.8.0...1.8.1

wrongsecrets - 1.8.0: Refactor and many fixes

Published by commjoen 10 months ago

What's Changed

This is a new major release, as we have done a very big refactor! Thank you, @nbaars, for enabling parallel challenge development!
We also migrated to Spring Boot 3.2.
Just so you know, from here on, you can remove challenges from the app relatively easily by updating the config.

Let's group the changes below:

Documentation:

Refactor:

New challenge:

Fixes:

LCM:

New Contributors

Special Thanks

Special thanks to @CaduRoriz, @nwolniak , @nbaars , @bendehaan , and @djvinnie for their hard work on this release!

Full Changelog: https://github.com/OWASP/wrongsecrets/compare/1.7.2...1.8.0

wrongsecrets - 1.7.2 quickfix for ui

Published by commjoen 12 months ago

What's Changed

Process

Required UI Fixes

###LCM

New Contributors

Full Changelog: https://github.com/OWASP/wrongsecrets/compare/1.7.1...1.7.2

wrongsecrets - 1.7.1: hacktoberfest 2! New challenges and changes

Published by commjoen 12 months ago

What's Changed

This is the second Hacktoberfest release with small ui updates and some very cool new challenges!

New Challenges

Updates and fixes

LCM

New Contributors

Special thanks

We would like to thank @adarsh-a-tw , @alphasecio , @commjoen , @bendehaan , @mikewoudenberg, and @roddas for their hard work on this release!

Full Changelog: https://github.com/OWASP/wrongsecrets/compare/1.7.0...1.7.1

wrongsecrets - 1.7.0: Hacktoberfest 1: Java 21, K8s 1.28 and 3 new challenges

Published by commjoen about 1 year ago

Project upgrade

This is another big release as part of Hacktoberfest! and have loads of great news:

  • we have many hacktoberfest approved PRs which are part of this release
  • our project got upgraded to "Production Status" in OWASP!
  • this project upgrades k8s to 1.28 and Java to 21(LTS), which means we can easily deploy this project to various cloud providers for at least another year without the need of a lot of maintenance & we can continue development of the java app as we are now compatible with a new LTS version of Java.

What's Changed

Major upgrades

New challenges:

Other changes:

LCM:

New Contributors

Full Changelog: https://github.com/OWASP/wrongsecrets/compare/1.6.10...1.7.0

Special Thanks:

Special thanks to @roddas , @nbaars , @bendehaan , @drnow4u , @RemakingEden , and @commjoen for their hard work on this release!

wrongsecrets - 1.6.10: Small updates and fixes

Published by commjoen about 1 year ago

What's Changed

Features

Small fixes

LCM

New Contributors

Full Changelog: https://github.com/OWASP/wrongsecrets/compare/1.6.9...1.6.10

Special Thanks

Special thanks to @djvinnie , @nbaars , @bendehaan , and @commjoen for their work on this release!

wrongsecrets - 1.6.9: Bugfixes in challenges

Published by commjoen about 1 year ago

What's Changed

Docs:

Bugfixes:

LCM:

Full Changelog: https://github.com/OWASP/wrongsecrets/compare/1.6.8...1.6.9

Special Thanks

Special thanks to @bendehaan , @commjoen, and @djvinnie for their hard work on this release!

wrongsecrets - 1.6.8

Published by commjoen about 1 year ago

What's Changed

New challenges

Bugfixes

LCM

Full Changelog: https://github.com/OWASP/wrongsecrets/compare/1.6.7...1.6.8

Special Thanks

Special thanks to @bendehaan and @commjoen for their hard work on this release!

wrongsecrets - 1.6.7: Back to Java17(LTS) and other LCM

Published by commjoen about 1 year ago

What's Changed

Bugfixes:

LCM:

Full Changelog: https://github.com/OWASP/wrongsecrets/compare/1.6.6...1.6.7

Thanks

Thanks to @commjoen for his hard work on this release!

wrongsecrets - 1.6.6: Challenge 34, LCM & Doc improvements

Published by commjoen over 1 year ago

What's Changed

New Challenges

Small Fixes

LCM:

Full Changelog: https://github.com/OWASP/wrongsecrets/compare/1.6.5...1.6.6

Special Thanks

We would like to thank @commjoen and @bendehaan for their hard work on this release.

wrongsecrets - 1.6.5: Challenge 33, score-tracking on home, ui tests, small fixes & docs

Published by commjoen over 1 year ago

What's Changed

Documentation:

Quality updates:

New Features:

New Challenges:

LCM

Full Changelog: https://github.com/OWASP/wrongsecrets/compare/1.6.4...1.6.5

Special Thanks

We would like to thank @bendehaan, @RemakingEden , @nbaars, @MarcinNowak-codes , @commjoen , and @devsecops

wrongsecrets - 1.6.4: performance improvements, LCM, and 3 new challenges (LocalStorage, AI/LLM and documentation)

Published by commjoen over 1 year ago

What's Changed

New challenges

Small updates

Other features

Dependency updates

New Contributors

Full Changelog: https://github.com/OWASP/wrongsecrets/compare/1.6.3...1.6.4

Special Thanks

Special thanks to @nbaars , @bendehaan , @Novice-expert , @puneeth072003 , @commjoen, @mikewoudenberg , and @h43z for their hard work on this release!

wrongsecrets - 1.6.3: Http caching, bugfixes and LCM

Published by commjoen over 1 year ago

What's Changed

Bugfixes

New features

LCM

Full Changelog: https://github.com/OWASP/wrongsecrets/compare/1.6.2...1.6.3

Special Thanks

Special thanks to @commjoen and @nbaars for their hard work on this release!

wrongsecrets - 1.6.2: Improved UI, big doc update, LCM, and Challenge29

Published by commjoen over 1 year ago

What's Changed

This is a big documentation update, with which we are now at 100% passing of the OpenSSF: OpenSSF Best Practices.
Next, we have a new challenge added, and are preparing to add a few more in a couple of weeks ;-).

Documentation:

LCM:

Bugfixes

New Challenges

New Contributors

Special thanks to

Special thanks to: @bendehaan , @puneeth072003 , @szh , @turjoc120, @nbaars , and @commjoen for their hard work on this release!

Full Changelog: https://github.com/OWASP/wrongsecrets/compare/1.6.1...1.6.2

wrongsecrets - 1.6.1: UI extended, OpenSSF compliance, improved Q/A, and Challenge28

Published by commjoen over 1 year ago

What's Changed

UI Changes:

Bugfixes:

Improved Q/A and OpenSSF Compliance:

New Challenge:

Special thanks to:
Special thanks to @bendehaan , @puneeth072003, @nbaars , and @commjoen for making this release a reality!

Full Changelog: https://github.com/OWASP/wrongsecrets/compare/1.6.0...1.6.1

Badges
Extracted from project README
Tweet Java checkstyle and testing Pre-commit Terraform FMT CodeQL Dead Link Checker Javadoc and Swaggerdoc generator Test Heroku with cypress Test minikube script (k8s) Test minikube script (k8s&vault) Docker container test Test container on podman DAST with ZAP OWASP Production Project OpenSSF Best Practices Discussions Docker pulls Deploy to Render Deploy on Railway gitguardian_logo.png jetbrains_logo.png 1password_logo.png AWS Open Source
Related Projects
dockle

Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start

23 May 2019 2,653
SecretScanner

Find secrets and passwords in container images and file systems

22 Aug 2020 3,108
gke-vault-demo

This demo builds two GKE Clusters and guides you through using secrets in Vault, using Kubernetes...

26 Feb 2019 70
arkade

Open Source Marketplace For Developer Tools

26 Feb 2020 4,211
showcase

A Full Stack Journey with Micro Services and Micro Front Ends. Using dapr, kubernetes, react modu...

04 Feb 2021 50
otaru

Bare-Metal Home Lab for Kubernetes and Technical Playground

15 Sep 2023 2