Home

OWASP WrongSecrets is a deliberately insecure application focused on secret management.

In this app, we have packed various ways showing you how to not store your secrets. The challenge is to find all the different secrets in multiple environments by means of various tools and techniques.

Our aim is to provide you with some knowledge so that you can improve your own secret management. For a detailed challenge guide with some additional information, keep tabs on this wiki space!