docker run -p 3000:3000 -v /var/run/docker.sock:/var/run/docker.sock jeroenwillemsen/wrongsecrets-desktop:latestChallenge 0 ☆
Welcome to challenge 0. You need to guess the secret that is hidden in Java, Docker, Kubernetes, Vault, AWS or GCP.
Welcome to OWASP WrongSecrets its opening challenge!
In this challenge, we explain you everything you need to know to play OWASP WrongSecrets.
Every challenge is about finding a secret that has not been well hidden and/or configured inside our application code, Docker container, or in one of the related parts of the system.
Once you found the secret, you can put it in the box below and press "Submit". The "Clear" button will clean the input box. Want to play the challenge again? Press the "Reset button".
The correct answer below is The first answer . Copy it in the box and press "Submit".
Have a lot of fun with the more difficult challenges ;-).
Note: some of the challenges ahead will require you to use additional tools to get to the solution. For this you need a computer with all the tools installed. Don’t want to install them yourself? You can use a container to have them all available to you at once by using
docker run -p 3000:3000 -v /var/run/docker.sock:/var/run/docker.sock jeroenwillemsen/wrongsecrets-desktop:latestThen, in your browser go to http://localhost:3000 to find a webtop waiting for you with all the tools required.