|
16 | 16 |
|
17 | 17 | Welcome to the OWASP WrongSecrets game! The game is packed with real life examples of how to _not_ store secrets in your software. Each of these examples is captured in a challenge, which you need to solve using various tools and techniques. Solving these challenges will help you recognize common mistakes & can help you to reflect on your own secrets management strategy.
|
18 | 18 |
|
19 |
| -Can you solve all the 50 challenges? |
| 19 | +Can you solve all the 51 challenges? |
20 | 20 |
|
21 | 21 | Try some of them on [our Heroku demo environment](https://wrongsecrets.herokuapp.com/).
|
22 | 22 |
|
@@ -74,7 +74,7 @@ Copyright (c) 2020-2024 Jeroen Willemsen and WrongSecrets contributors.
|
74 | 74 |
|
75 | 75 | ## Basic docker exercises
|
76 | 76 |
|
77 |
| -_Can be used for challenges 1-4, 8, 12-32, 34, 35-43, 49-50_ |
| 77 | +_Can be used for challenges 1-4, 8, 12-32, 34, 35-43, 49-51_ |
78 | 78 |
|
79 | 79 | For the basic docker exercises you currently require:
|
80 | 80 |
|
@@ -125,8 +125,9 @@ Now you can try to find the secrets by means of solving the challenge offered at
|
125 | 125 | - [localhost:8080/challenge/challenge-41](http://localhost:8080/challenge/challenge-41)
|
126 | 126 | - [localhost:8080/challenge/challenge-42](http://localhost:8080/challenge/challenge-42)
|
127 | 127 | - [localhost:8080/challenge/challenge-43](http://localhost:8080/challenge/challenge-43)
|
128 |
| -- [localhost:8080/challenge/challenge-43](http://localhost:8080/challenge/challenge-49) |
129 |
| -- [localhost:8080/challenge/challenge-43](http://localhost:8080/challenge/challenge-50) |
| 128 | +- [localhost:8080/challenge/challenge-49](http://localhost:8080/challenge/challenge-49) |
| 129 | +- [localhost:8080/challenge/challenge-50](http://localhost:8080/challenge/challenge-50) |
| 130 | +- [localhost:8080/challenge/challenge-51](http://localhost:8080/challenge/challenge-51) |
130 | 131 |
|
131 | 132 | Note that these challenges are still very basic, and so are their explanations. Feel free to file a PR to make them look
|
132 | 133 | better ;-).
|
@@ -154,7 +155,7 @@ If you want to host WrongSecrets on Railway, you can do so by deploying [this on
|
154 | 155 |
|
155 | 156 | ## Basic K8s exercise
|
156 | 157 |
|
157 |
| -_Can be used for challenges 1-6, 8, 12-43, 48-50_ |
| 158 | +_Can be used for challenges 1-6, 8, 12-43, 48-51_ |
158 | 159 |
|
159 | 160 | ### Minikube based
|
160 | 161 |
|
@@ -247,7 +248,7 @@ This is because if you run the start script again it will replace the secret in
|
247 | 248 |
|
248 | 249 | ## Cloud Challenges
|
249 | 250 |
|
250 |
| -_Can be used for challenges 1-50_ |
| 251 | +_Can be used for challenges 1-51_ |
251 | 252 |
|
252 | 253 | **READ THIS**: Given that the exercises below contain IAM privilege escalation exercises,
|
253 | 254 | never run this on an account which is related to your production environment or can influence your account-over-arching
|
|
0 commit comments