Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add hardcoded encryption key on top of a secret. #297

Open
Tracked by #37
commjoen opened this issue May 17, 2022 · 11 comments
Open
Tracked by #37

Add hardcoded encryption key on top of a secret. #297

commjoen opened this issue May 17, 2022 · 11 comments
Assignees
Labels
good first issue Good for newcomers help wanted Extra attention is needed New Challenge Adding a new Challenge

Comments

@commjoen
Copy link
Collaborator

commjoen commented May 17, 2022

Have a challenge about "bad encryption practices" where we hardocde the key and the secret in java.

Steps to take:

  • create a secret on your computer
  • encrypt it with your algorithm of choice (could be AES, 3DES, whatever you like) on your computer resulting in the ciphertext you need
  • now take the ciphertext and put that in the java code of the challenge
  • add the key you used to encrypt the challenge and a decryption method to the challenge. See contributing.md on how to create the challenge.
@commjoen commjoen added New Challenge Adding a new Challenge help wanted Extra attention is needed labels Feb 13, 2023
@commjoen commjoen added the good first issue Good for newcomers label Mar 2, 2023
@kshitijk4poor
Copy link

I would like to work on this one. could you please assign it to me?

@commjoen
Copy link
Collaborator Author

Welcome to the team sir! It is assigned to you now.

@commjoen
Copy link
Collaborator Author

commjoen commented Oct 4, 2023

Hi @kshitijk4poor , do you have any update on this?

@kshitijk4poor
Copy link

Hey @commjoen , yeah I'm on it

@divyanshuagarwal-23
Copy link

Hello @kshitijk4poor, I am new here
can I please work with you
so that I can get familiar with the code base and hence can contribute in the future

@CaduRoriz
Copy link
Contributor

/assign

@nick2432
Copy link

Can I contribute to this issue? I'm new here, but I have experience contributing to many other organizations. Is there a Discord channel or any other channel where I can discuss and get assistance?

@commjoen
Copy link
Collaborator Author

commjoen commented Dec 20, 2023

Dear all, the issue is still assigned to kshitijk4poor. once it is completed or he unassigns or it gets unassigned automatically, we will assign it to someone else.
For any potential contributor, please read our readme, code of conduct and contribution guidelines.
See https://github.com/OWASP/wrongsecrets/blob/master/README.md#support for how to get in touch via Slack to chat about the project.

@OWASP OWASP deleted a comment from nick2432 Dec 20, 2023
@commjoen
Copy link
Collaborator Author

Hi @kshitijk4poor how are you doing :) ? Do you have any update on the issue?

@commjoen
Copy link
Collaborator Author

The issue is opened for new assignees due to inactivity. Want to contribute? have a go at it :)

@jangalasriramd7
Copy link

Hi @commjoen ,

I would like to work on this one. Could you please assign it to me?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
good first issue Good for newcomers help wanted Extra attention is needed New Challenge Adding a new Challenge
Projects
Status: To do
Development

No branches or pull requests

6 participants