OWASP

OWASP/wrongsecrets

Vulnerable app with examples showing how to not use secrets

11 good first / help-wanted issues · Java · last activity Sep 1, 2026

1.5K stars 611 forks 1.5K watchers Java GNU Affero General Public License v3.0
aws azure ctf devsecops docker gcp hashicorp-vault java keepass kubernetes owasp secrets secrets-management security terraform-aws terraform-azure terraform-gcp vault vulnerable-web-app
View on GitHub Website
11 Open Issues Need Help Last updated: Sep 1, 2026

Open Issues Need Help

View All on GitHub
DAST scan - Investigate & fix if required results of the ZAP scan 16 days ago
enhancement help wanted
OWASP/wrongsecrets
1.5K

Vulnerable app with examples showing how to not use secrets

Java
#aws#azure#ctf#devsecops#docker#gcp#hashicorp-vault#java#keepass#kubernetes#owasp#secrets#secrets-management#security#terraform-aws#terraform-azure#terraform-gcp#vault#vulnerable-web-app
Have a challenge with a backup bucket containing the secret 16 days ago
help wanted New Challenge
OWASP/wrongsecrets
1.5K

Vulnerable app with examples showing how to not use secrets

Java
#aws#azure#ctf#devsecops#docker#gcp#hashicorp-vault#java#keepass#kubernetes#owasp#secrets#secrets-management#security#terraform-aws#terraform-azure#terraform-gcp#vault#vulnerable-web-app
Possible new ideas for challenges 22 days ago
help wanted
OWASP/wrongsecrets
1.5K

Vulnerable app with examples showing how to not use secrets

Java
#aws#azure#ctf#devsecops#docker#gcp#hashicorp-vault#java#keepass#kubernetes#owasp#secrets#secrets-management#security#terraform-aws#terraform-azure#terraform-gcp#vault#vulnerable-web-app
Nexus deployment credentials in settings.xml 22 days ago
help wanted New Challenge
OWASP/wrongsecrets
1.5K

Vulnerable app with examples showing how to not use secrets

Java
#aws#azure#ctf#devsecops#docker#gcp#hashicorp-vault#java#keepass#kubernetes#owasp#secrets#secrets-management#security#terraform-aws#terraform-azure#terraform-gcp#vault#vulnerable-web-app
performance for the main screen load 23 days ago
enhancement help wanted
OWASP/wrongsecrets
1.5K

Vulnerable app with examples showing how to not use secrets

Java
#aws#azure#ctf#devsecops#docker#gcp#hashicorp-vault#java#keepass#kubernetes#owasp#secrets#secrets-management#security#terraform-aws#terraform-azure#terraform-gcp#vault#vulnerable-web-app
2 skills-with-secrets challenges about 2 months ago
help wanted New Challenge
OWASP/wrongsecrets
1.5K

Vulnerable app with examples showing how to not use secrets

Java
#aws#azure#ctf#devsecops#docker#gcp#hashicorp-vault#java#keepass#kubernetes#owasp#secrets#secrets-management#security#terraform-aws#terraform-azure#terraform-gcp#vault#vulnerable-web-app
ChatGPT shared chat with credential! about 2 months ago
help wanted New Challenge
OWASP/wrongsecrets
1.5K

Vulnerable app with examples showing how to not use secrets

Java
#aws#azure#ctf#devsecops#docker#gcp#hashicorp-vault#java#keepass#kubernetes#owasp#secrets#secrets-management#security#terraform-aws#terraform-azure#terraform-gcp#vault#vulnerable-web-app
Log secret encoded from your cloud app towards the logging solution of your cloudprovider. about 2 months ago
help wanted New Challenge
OWASP/wrongsecrets
1.5K

Vulnerable app with examples showing how to not use secrets

Java
#aws#azure#ctf#devsecops#docker#gcp#hashicorp-vault#java#keepass#kubernetes#owasp#secrets#secrets-management#security#terraform-aws#terraform-azure#terraform-gcp#vault#vulnerable-web-app
Add hardcoded encryption key on top of a secret. 7 months ago
help wanted good first issue New Challenge
OWASP/wrongsecrets
1.5K

Vulnerable app with examples showing how to not use secrets

Java
#aws#azure#ctf#devsecops#docker#gcp#hashicorp-vault#java#keepass#kubernetes#owasp#secrets#secrets-management#security#terraform-aws#terraform-azure#terraform-gcp#vault#vulnerable-web-app
create a secrets detection testbed branch with revoked credentials 11 months ago
help wanted
OWASP/wrongsecrets
1.5K

Vulnerable app with examples showing how to not use secrets

Java
#aws#azure#ctf#devsecops#docker#gcp#hashicorp-vault#java#keepass#kubernetes#owasp#secrets#secrets-management#security#terraform-aws#terraform-azure#terraform-gcp#vault#vulnerable-web-app
Record howto's 11 months ago
help wanted
OWASP/wrongsecrets
1.5K

Vulnerable app with examples showing how to not use secrets

Java
#aws#azure#ctf#devsecops#docker#gcp#hashicorp-vault#java#keepass#kubernetes#owasp#secrets#secrets-management#security#terraform-aws#terraform-azure#terraform-gcp#vault#vulnerable-web-app