Skip to content

Navigation Menu

Appearance settings

Explore
By company size
By use case
By industry
View all solutions
Topics
- AI
- DevOps
- Security
- Software Development
- View all
Explore
- GitHub Sponsors
  Fund open source developers
- The ReadME Project
  GitHub community articles
Repositories
- Enterprise platform
  AI-powered developer platform
Available add-ons
Pricing

Search code, repositories, users, issues, pull requests...

Search

Clear

Search syntax tips

Provide feedback

We read every piece of feedback, and take your input very seriously.

Include my email address so I can be contacted

Saved searches

Use saved searches to filter your results more quickly

Name

Query

To see all available qualifiers, see our documentation.

Appearance settings

You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session.

Dismiss alert

OWASP / wrongsecrets Public

Notifications
Fork 453
Star 1.3k

Vulnerable app with examples showing how to not use secrets

owasp.org/www-project-wrongsecrets/

License

AGPL-3.0 license

1.3k stars 453 forks Branches Tags Activity

Notifications

You must be signed in to change notification settings

Code
Issues 23
Pull requests 13
Discussions
Actions
Projects 1
Wiki
Security
Insights

Additional navigation options

Code
Issues
Pull requests
Discussions
Actions
Projects
Wiki
Security
Insights

OWASP/wrongsecrets

Error
Looks like something went wrong!

About

Vulnerable app with examples showing how to not use secrets

owasp.org/www-project-wrongsecrets/

Topics

java docker kubernetes aws security vault azure gcp secrets owasp ctf keepass hashicorp-vault vulnerable-web-app devsecops secrets-management terraform-aws terraform-gcp terraform-azure

Resources

License

AGPL-3.0 license

Code of conduct

Code of conduct

Security policy

Security policy

Uh oh!

There was an error while loading. Please reload this page.

Custom properties

Stars

Watchers

Forks

Report repository

Releases 85

V1.11.2: 55 Challenges and K8s 1.32 Latest

Sponsor this project

Uh oh!

There was an error while loading. Please reload this page.

https://owasp.org/donate/?reponame=www-project-wrongsecrets&title=OWASP+wrongsecrets
https://www.icrc.org/en/donate/ukraine

Learn more about GitHub Sponsors

Contributors 39

+ 25 contributors

Languages

Java 51.3%
HTML 16.8%
Shell 10.1%
HCL 5.3%
JavaScript 4.8%
C 4.1%
Other 7.6%

Footer

© 2025 GitHub, Inc.

Footer navigation

Terms
Privacy
Security
Status
Docs
Contact

You can’t perform that action at this time.