OWASP WrongSecrets

We released a new version of #OWASP #WrongSecrets with a new #AI challenge: an authorization bypass using an #MCP service account!

Want to try it out? Checkout www.wrongsecrets.com ! Like what you see? Please 🌟 our repository github.com/OWASP/wrongs... !

OWASP WrongSecrets

We released version 1.13.1 of #OWASP #WrongSecrets! Now with #springboot4 and challenges involving #telegram #AI, #MCP . You can test it at www.wrongsecrets.com . Like what you see? Please give our repo github.com/OWASP/wrongs... a 🌟 if you like it! #security #opensource

Hi Folks! What would you like to see changed in #OWASP #WrongSecrets?

Release V1.12.3 Challenge 57 and many updates · OWASP/wrongsecrets What's Changed This is one of our biggest updates yet. Only then packed in a small version update. In this version we made it a lot easier for both contributors and reveiwers to build out new chall...

We released version 1.12.3 of #OWASP #WrongSecrets at github.com/OWASP/wrongs... ! With a new challenge and tons of additional updates. Want to try it out? go to www.wrongsecrets.com and give our repo a 🌟 if you like it!

In #OWASP #WrongSecrets we started using AI for generating challenges as an experiment. The results might be staggering ;-). Checkout github.com/OWASP/wrongs... for more details! #AI #LLM #Cursor and please give the repo a 🌟 if you like it or learned from it!

DigitalOcean | Cloud Infrastructure for Developers An ocean of simple, scalable cloud solutions.

I am trying to get some credits on DigitalOcean to experiment with #OWASP #Wrongsecrets there. Who can help me? Get $200 in cloud credits from @DigitalOcean using my link: m.do.co/t/7e2aa81f41f3

Release 1.12.0: Spring Boot 3.5 migration · OWASP/wrongsecrets What's Changed In preparation of the new java LTS release, we have released a new LCM update! Loads of dependencies got updated, and we finally said goodbye to some nasty dependency based bugs in G...

New! #OWASP #Wrongsecrets big LCM release: github.com/OWASP/wrongs.... Try it out at www.wrongsecrets.com

GitHub - OWASP/wrongsecrets: Vulnerable app with examples showing how to not use secrets Vulnerable app with examples showing how to not use secrets - OWASP/wrongsecrets

We released version 1.11.2 of #OWASP #WrongSecrets: it's faster than ever, has now 55 challenges and a lot of fun! Check it out at github.com/OWASP/wrongs... or test it at www.wrongsecrets.com and don't forget to give the repo a 🌟 if you like it!

Now that the performance of #owasp #wrongsecrets is restored (200rps on a Heroku free Dyno) feel free to use #zap against it ;-).

OWASP WrongSecrets

Somehow there is a myth that #OWASP #Wrongsecrets only runs on #Windows… but it runs on #Linux (musl and glibc ), #Windews, #macos with #x86 and #arm support. Go checkout the demo at wrongsecrets.herokuapp.com

Release 1.11.1: challenge 53, Spring boot upgrade and many more · OWASP/wrongsecrets What's Changed In this version we upgraded to a much newer version of Spring boot, K8s, did tons of LCM and bugfixes and added a new Challenge! New Content Automate docker compose testing for chal...

We released a new version of #OWASP #WrongSecrets with a new challenge, some bugfixes and a lot of updates! Want to know more? Check it out at github.com/OWASP/wrongs... or play directly on www.wrongsecrets.com . Like what you see? Please 🌟 our repo!

Release v1.10.3: Bugfixes and Challenge52 · OWASP/wrongsecrets What's Changed In this new version we have bugfixes, and a new challenge! New content Challenge52: Add misconfiguration for mounting in secret in during build by @Shubham-Patel07 in #1790 Bugfixe...

We just released a new version of #OWASP #WrongSecrets containing a few small bugfixes, and a new challenge! Want to know more? go to github.com/OWASP/wrongs... or test it at www.wrongsecrets.com ! Like what you see? Please give our repo a 🌟!

Release 1.10.2: Docker CDS & LCM updates · OWASP/wrongsecrets What's Changed Version 1.10.2 is a first CDS based release of our container! This makes the container smaller, faster and use less memory. New Content updated contributor list and copyrights by @c...

We released a new version of #OWASP #WrongSecrets with another round of great optimizations :). Want to know more? Check github.com/OWASP/wrongs... (or www.wrongsecrets.com) like what you see? Please give our repo a 🌟 on Github !

Using #deepseek on #ollama is fun! Will work on a #Wrongsecrets challenge soon;-).

OWASP WrongSecrets

Wishing you all a great #2025! Hope you can have one with lots of #fun and #hacking! Maybe you want to try #OWASP #WrongSecrets during the holidays? Check www.wrongsecrets.com and don't forget to give the repo a star if you like it :) .

Release v1.10.0 - Java 23, new challenge, and Renovate · OWASP/wrongsecrets What's Changed Version 1.10.0 introduces a move to Java 23, a new challenge, and Renovate for dependency management. Thanks to all involved for making it happen, notably @Shubham-Patel07 and @commj...

We just released 1.10.0 of #OWASP #WrongSecrets, now running on Java 23, with 51 challenges, and it is now using #renovate. See github.com/OWASP/wrongs... for more details or play at www.wrongsecrets.com. Like what you see? Please give the repo a 🌟.

#blackfriday deal: play #OWASP #wrongsecrets for free at wrongsecrets.com . All we need is you to star our GitHub repo!

#OWASP #WrongSecrets has an OWASP Project spotlight episode! youtu.be/inSkNPLDlWo?...

Where shall I post about? About the super nice vibe @ Bsky? Or something about my pet project #OWASP #Wrongsecrets ;-)?