OWASP WrongSecrets

Examples with how to not use secrets

About OWASP WrongSecrets

Wrongsecrets Desktop

Want to try out the secrets-hunting, but don’t want to install all the recommended tools? Try to use our WrongSecrets desktop. You can run all the tools and a desktop environment in a container by doing the following: docker run -p 3000:3000 jeroenwillemsen/wrongsecrets-desktop:latest and open a browser at http://localhost:3000. Want to know more? Checkout the Readme at the WrongSecrets github repo.

• WrongSecrets desktop

• http://localhost:3000

• Readme at the WrongSecrets github repo

Project Resources

Project Leaders

Jeroen Willemsen

Project Lead

Ben de Haan

Project Lead

Project Information

Production Project

Classification

Training

Language

HTML

License

GNU Affero General Public License v3.0

Contributors

GitHub Stars

1471

Downloads

1369

Corporate Supporters

Become a Corporate Supporter Meet our Corporate Supporters Supporter Job Postings

OWASP is a nonprofit foundation improving software security through open-source projects, global communities, and education. All resources are free and open to everyone.

OWASP, the OWASP logo, and Global AppSec are registered trademarks and AppSec Days, AppSec California, AppSec Cali, SnowFROC, OWASP Boston Application Security Conference, and LASCON are trademarks of the OWASP Foundation, Inc.