OWASP/wrongsecrets

Have a challenge with a backup bucket containing the secret

開放

#982 建立於 2023年9月9日

 (15 則留言) (0 個反應) (1 位負責人)Java (601 個分叉)github user discovery
New Challengehelp wanted

倉庫指標

星標
 (1,457 顆星)
PR 合併指標
 (平均合併 4天 1小時) (30 天內合併 29 個 PR)

描述

Context

  • What should the challenge scenario be like? Have a backup s3/storage bucket with a private ed25519 key publicly exposed
  • What should the participant learn from completing the challenge? Secure your backup at all cost
  • For what category would the challenge be? (e.g. Docker, K8s, binary) Docker/cloud depending on how we implement the backup solution

Actions:

  • create separate Terraform folder to have an S3 bucket (in our AWS folder) under the name "backupchallenge"
  • have the key copying logic in a shell script using AWS CLI as part of the backupchallenge folder
  • implement the challenge according to contributing.md and make sure you hide the key in your classfile.

貢獻者指南