OWASP/wrongsecrets

View on GitHub

Vulnerable app with examples showing how to not use secrets

Stars: 1.5k
Forks: 625
Open beginner issues: 0
Indexed issues: 25
Avg merge: 14h 21m
Merged PRs (30d): 44

Dominant language: HTML
License: AGPL-3.0
Last GitHub push: Sep 18, 2026
Latest indexed: Sep 19, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: help wanted

Beginner friendly Everything

Open All

25 open issues indexed

Agent transcript holding a secret Open

New Challenge

OWASP/wrongsecrets#2657 · 3 comments · 1 assignee · Opened Sep 8, 2026
MOAR AI def issues Open

New Challenge

Difficulty 4/5 3-5 days Newbie friendliness 48/100

OWASP/wrongsecrets#2656 · Opened Sep 8, 2026
3. Exposed Vector Databases & Direct Augmentation Data Leaks Open

New Challenge

Difficulty 5/5 Over a week Newbie friendliness 35/100

OWASP/wrongsecrets#2653 · Opened Sep 8, 2026
Create translations with a language toggle Open

OWASP/wrongsecrets#2442 · 1 reaction · 2 assignees · Opened Mar 7, 2026
Support Upcloud Open

OWASP/wrongsecrets#2368 · 5 comments · 1 reaction · 2 assignees · Opened Jan 10, 2026
Challenge idea: sqlite file with username/password dumps Open

New Challenge

OWASP/wrongsecrets#2071 · 3 comments · 2 assignees · Opened Jun 24, 2025
Dependency Dashboard Open

Difficulty 5/5 Over a week Newbie friendliness 15/100

OWASP/wrongsecrets#1715 · Opened Nov 8, 2024
Migrate to build containers for wrongsecrets Open

OWASP/wrongsecrets#1667 · 5 comments · 1 assignee · Opened Oct 11, 2024
Goerli testnet is being deprecated: help us migrate to another testnet! Open

bug

OWASP/wrongsecrets#1360 · 4 comments · 1 assignee · Opened Apr 20, 2024
performance for the main screen load Open

enhancement help wanted

OWASP/wrongsecrets#1115 · 4 comments · 1 assignee · Opened Dec 7, 2023
Have a challenge with a backup bucket containing the secret Open

help wanted New Challenge

OWASP/wrongsecrets#982 · 15 comments · 1 assignee · Opened Sep 9, 2023
Nexus deployment credentials in settings.xml Open

help wanted New Challenge

OWASP/wrongsecrets#810 · 6 comments · 1 assignee · Opened May 8, 2023
Optimize Github actions Open

enhancement

OWASP/wrongsecrets#714 · 11 comments · 1 assignee · Opened Mar 20, 2023
DAST scan - Investigate & fix if required results of the ZAP scan Open

enhancement help wanted

OWASP/wrongsecrets#709 · 1 reaction · 2 assignees · Opened Mar 15, 2023
aad-pod-identity is no longer supported & K8S namespace does not enforce restricted policy in Azure Open

enhancement

OWASP/wrongsecrets#670 · 4 comments · 1 assignee · Opened Mar 5, 2023
Create challengecreatorcli Open

enhancement

OWASP/wrongsecrets#555 · 4 comments · 1 assignee · Opened Dec 28, 2022
Create a separate repo where you allow actions to run, so you can get the secret out Open

New Challenge

Difficulty 4/5 3-5 days Newbie friendliness 25/100

OWASP/wrongsecrets#425 · 3 comments · 1 reaction · Opened Sep 22, 2022
Find and fix memory leak Open

bug

OWASP/wrongsecrets#389 · 3 comments · 2 assignees · Opened Aug 31, 2022
Create improved documentation Open

documentation

OWASP/wrongsecrets#368 · 14 comments · 1 reaction · 1 assignee · Opened Aug 4, 2022
Log secret encoded from your cloud app towards the logging solution of your cloudprovider. Open

help wanted New Challenge

OWASP/wrongsecrets#345 · 3 comments · 1 assignee · Opened Jul 11, 2022
Create optional low value keys which can be used as canarotykens in AWS/GCP Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 15/100

OWASP/wrongsecrets#236 · 2 comments · Opened Mar 29, 2022
create a secrets detection testbed branch with revoked credentials Open

help wanted

Difficulty 5/5 Over a week Newbie friendliness 20/100

OWASP/wrongsecrets#201 · 3 comments · 1 reaction · Opened Feb 17, 2022
Improve ui of the overall app Open

enhancement

OWASP/wrongsecrets#198 · 2 assignees · Opened Feb 16, 2022
Record howto's Open

help wanted

OWASP/wrongsecrets#131 · 7 comments · 1 assignee · Opened Dec 17, 2021
Possible new ideas for challenges Open

help wanted

Difficulty 5/5 Over a week Newbie friendliness 15/100

OWASP/wrongsecrets#37 · 13 comments · Opened Nov 1, 2021

OWASP/wrongsecrets

Get new issues in your inbox