-
-
Couldn't load subscription status.
- Fork 485
Challenge 54 & Challenge55 hidden secrets in gitignore and .ssh #1929
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Love the challenges, can you fix the feedback, the pipeline and maybe add the plain pubkey and privatekwy in the same ssh config conmit by mistake challenge please?
src/main/java/org/owasp/wrongsecrets/challenges/docker/Challenge54.java
Outdated
Show resolved
Hide resolved
src/main/java/org/owasp/wrongsecrets/challenges/docker/Challenge55.java
Outdated
Show resolved
Hide resolved
Co-authored-by: Jeroen Willemsen <[email protected]>
Co-authored-by: Jeroen Willemsen <[email protected]>
src/main/java/org/owasp/wrongsecrets/challenges/docker/Challenge54.java
Outdated
Show resolved
Hide resolved
|
I guess all that is left is updating the explanation for challenge 55, with the options
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Nice, thanks for your contribution!
What kind of changes does this PR include?
Description
Challenge 54 is about a hidden secret in gitignore and Challenge 55 is about a hidden secret in .ssh.
Both secrets are encrypted and in base64 format to hide them from detection engines.
You can decrypt them with openssl and the passphrase given in the Description of the challenge.
The passphrase has to be available to all users in main page of the challenges.
Relations
Closes #613
Checklist: