wrongsecrets icon indicating copy to clipboard operation
wrongsecrets copied to clipboard

Add hardcoded encryption key on top of a secret.

Open commjoen opened this issue 2 years ago • 11 comments

Have a challenge about "bad encryption practices" where we hardocde the key and the secret in java.

Steps to take:

  • create a secret on your computer
  • encrypt it with your algorithm of choice (could be AES, 3DES, whatever you like) on your computer resulting in the ciphertext you need
  • now take the ciphertext and put that in the java code of the challenge
  • add the key you used to encrypt the challenge and a decryption method to the challenge. See contributing.md on how to create the challenge.

commjoen avatar May 17 '22 09:05 commjoen

I would like to work on this one. could you please assign it to me?

kshitijk4poor avatar Aug 18 '23 05:08 kshitijk4poor

Welcome to the team sir! It is assigned to you now.

commjoen avatar Aug 18 '23 05:08 commjoen

Hi @kshitijk4poor , do you have any update on this?

commjoen avatar Oct 04 '23 04:10 commjoen

Hey @commjoen , yeah I'm on it

kshitijk4poor avatar Oct 08 '23 13:10 kshitijk4poor

Hello @kshitijk4poor, I am new here can I please work with you so that I can get familiar with the code base and hence can contribute in the future

divyanshuagarwal-23 avatar Oct 12 '23 16:10 divyanshuagarwal-23

/assign

CaduRoriz avatar Oct 25 '23 15:10 CaduRoriz

Can I contribute to this issue? I'm new here, but I have experience contributing to many other organizations. Is there a Discord channel or any other channel where I can discuss and get assistance?

nick2432 avatar Dec 20 '23 09:12 nick2432

Dear all, the issue is still assigned to kshitijk4poor. once it is completed or he unassigns or it gets unassigned automatically, we will assign it to someone else. For any potential contributor, please read our readme, code of conduct and contribution guidelines. See https://github.com/OWASP/wrongsecrets/blob/master/README.md#support for how to get in touch via Slack to chat about the project.

commjoen avatar Dec 20 '23 09:12 commjoen

Hi @kshitijk4poor how are you doing :) ? Do you have any update on the issue?

commjoen avatar Feb 11 '24 21:02 commjoen