diff --git a/.github/scripts/.bash_history b/.github/scripts/.bash_history index af44606c0..6ef25fda3 100644 --- a/.github/scripts/.bash_history +++ b/.github/scripts/.bash_history @@ -347,7 +347,7 @@ rm -rf jdk-18_linux-x64_bin.deb git rebase -i main git rebase -i master git stash -export tempPassword="9JrI2Z/bBdMdQhYfUUlQToF3/vvFUf0pkGrBKeuH7d8=" +export tempPassword="g8Z24I8DoAY39MOvLCbQbrAR7VQyIoGXSIY20kRWfB4=" mvn run tempPassword k6 npx k6 diff --git a/Dockerfile.web b/Dockerfile.web index 4a376cd44..2a1f6151d 100644 --- a/Dockerfile.web +++ b/Dockerfile.web @@ -1,5 +1,5 @@ -FROM jeroenwillemsen/wrongsecrets:1.9.0-no-vault -ARG argBasedVersion="1.9.0-no-vault" +FROM jeroenwillemsen/wrongsecrets:1.9.1-no-vault +ARG argBasedVersion="1.9.1-no-vault" ARG CANARY_URLS="http://canarytokens.com/terms/about/s7cfbdakys13246ewd8ivuvku/post.jsp,http://canarytokens.com/terms/about/y0all60b627gzp19ahqh7rl6j/post.jsp" ARG CTF_ENABLED=false ARG HINTS_ENABLED=true diff --git a/aws/k8s/secret-challenge-vault-deployment.yml b/aws/k8s/secret-challenge-vault-deployment.yml index c02ee9ffa..3656baa89 100644 --- a/aws/k8s/secret-challenge-vault-deployment.yml +++ b/aws/k8s/secret-challenge-vault-deployment.yml @@ -58,7 +58,7 @@ spec: volumeAttributes: secretProviderClass: "wrongsecrets-aws-secretsmanager" containers: - - image: jeroenwillemsen/wrongsecrets:1.9.0-k8s-vault + - image: jeroenwillemsen/wrongsecrets:1.9.1-k8s-vault imagePullPolicy: IfNotPresent name: secret-challenge command: [ "/bin/sh" ] diff --git a/azure/k8s/secret-challenge-vault-deployment.yml.tpl b/azure/k8s/secret-challenge-vault-deployment.yml.tpl index ea95a6f9e..b9489c3c4 100644 --- a/azure/k8s/secret-challenge-vault-deployment.yml.tpl +++ b/azure/k8s/secret-challenge-vault-deployment.yml.tpl @@ -61,7 +61,7 @@ spec: volumeAttributes: secretProviderClass: "azure-wrongsecrets-vault" containers: - - image: jeroenwillemsen/wrongsecrets:1.9.0-k8s-vault + - image: jeroenwillemsen/wrongsecrets:1.9.1-k8s-vault imagePullPolicy: IfNotPresent name: secret-challenge command: ["/bin/sh"] diff --git a/fly.toml b/fly.toml index 4b7fa6bb7..fe84159e1 100644 --- a/fly.toml +++ b/fly.toml @@ -8,7 +8,7 @@ app = "wrongsecrets" primary_region = "ams" [build] - image = "docker.io/jeroenwillemsen/wrongsecrets:1.9.0-no-vault" + image = "docker.io/jeroenwillemsen/wrongsecrets:1.9.1-no-vault" [env] K8S_ENV = "Fly(Docker)" diff --git a/gcp/k8s/secret-challenge-vault-deployment.yml.tpl b/gcp/k8s/secret-challenge-vault-deployment.yml.tpl index e7bc6ee21..6ce055711 100644 --- a/gcp/k8s/secret-challenge-vault-deployment.yml.tpl +++ b/gcp/k8s/secret-challenge-vault-deployment.yml.tpl @@ -58,7 +58,7 @@ spec: volumeAttributes: secretProviderClass: "wrongsecrets-gcp-secretsmanager" containers: - - image: jeroenwillemsen/wrongsecrets:1.9.0-k8s-vault + - image: jeroenwillemsen/wrongsecrets:1.9.1-k8s-vault imagePullPolicy: IfNotPresent name: secret-challenge command: ["/bin/sh"] diff --git a/js/index.js b/js/index.js index 0e4f2166f..654ef1955 100644 --- a/js/index.js +++ b/js/index.js @@ -1,5 +1,5 @@ function secret() { - var password = "bLyTXxM=" + 9 + "vucJ" + 6 + "F30=" + 2 + "Hqp3" + 7; + var password = "gPDAvOc=" + 9 + "oscR" + 6 + "HmU=" + 2 + "iwPi" + 7; return password; } diff --git a/k8s/secret-challenge-deployment.yml b/k8s/secret-challenge-deployment.yml index 45f020e7a..f6f746c0b 100644 --- a/k8s/secret-challenge-deployment.yml +++ b/k8s/secret-challenge-deployment.yml @@ -28,7 +28,7 @@ spec: runAsGroup: 2000 fsGroup: 2000 containers: - - image: jeroenwillemsen/wrongsecrets:1.9.0-no-vault + - image: jeroenwillemsen/wrongsecrets:1.9.1-no-vault imagePullPolicy: IfNotPresent name: secret-challenge ports: diff --git a/k8s/secret-challenge-vault-deployment.yml b/k8s/secret-challenge-vault-deployment.yml index 1a4c915bb..eae4f157e 100644 --- a/k8s/secret-challenge-vault-deployment.yml +++ b/k8s/secret-challenge-vault-deployment.yml @@ -50,7 +50,7 @@ spec: type: RuntimeDefault serviceAccountName: vault containers: - - image: jeroenwillemsen/wrongsecrets:1.9.0-k8s-vault + - image: jeroenwillemsen/wrongsecrets:1.9.1-k8s-vault imagePullPolicy: IfNotPresent name: secret-challenge command: ["/bin/sh"] diff --git a/okteto/k8s/secret-challenge-ctf-deployment.yml b/okteto/k8s/secret-challenge-ctf-deployment.yml index 83cdcabe0..7e3e7a453 100644 --- a/okteto/k8s/secret-challenge-ctf-deployment.yml +++ b/okteto/k8s/secret-challenge-ctf-deployment.yml @@ -28,7 +28,7 @@ spec: runAsGroup: 2000 fsGroup: 2000 containers: - - image: jeroenwillemsen/wrongsecrets:1.9.0-no-vault + - image: jeroenwillemsen/wrongsecrets:1.9.1-no-vault name: secret-challenge-ctf imagePullPolicy: IfNotPresent securityContext: diff --git a/okteto/k8s/secret-challenge-deployment.yml b/okteto/k8s/secret-challenge-deployment.yml index b18eb668b..e0153ab75 100644 --- a/okteto/k8s/secret-challenge-deployment.yml +++ b/okteto/k8s/secret-challenge-deployment.yml @@ -28,7 +28,7 @@ spec: runAsGroup: 2000 fsGroup: 2000 containers: - - image: jeroenwillemsen/wrongsecrets:1.9.0-no-vault + - image: jeroenwillemsen/wrongsecrets:1.9.1-no-vault name: secret-challenge imagePullPolicy: IfNotPresent securityContext: diff --git a/pom.xml b/pom.xml index 9c99a6eba..a26e27204 100644 --- a/pom.xml +++ b/pom.xml @@ -11,7 +11,7 @@ org.owasp wrongsecrets - 1.9.0-SNAPSHOT + 1.9.1-SNAPSHOT OWASP WrongSecrets Examples with how to not use secrets diff --git a/src/main/resources/templates/about.html b/src/main/resources/templates/about.html index 90ac15788..dd7543ceb 100644 --- a/src/main/resources/templates/about.html +++ b/src/main/resources/templates/about.html @@ -35,38 +35,38 @@ The list below is generated with `mvn license:add-third-party`