wrongsecrets
wrongsecrets copied to clipboard
Add hardcoded encryption key on top of a secret.
Have a challenge about "bad encryption practices" where we hardocde the key and the secret in java.
Steps to take:
- create a secret on your computer
- encrypt it with your algorithm of choice (could be AES, 3DES, whatever you like) on your computer resulting in the ciphertext you need
- now take the ciphertext and put that in the java code of the challenge
- add the key you used to encrypt the challenge and a decryption method to the challenge. See contributing.md on how to create the challenge.
I would like to work on this one. could you please assign it to me?
Welcome to the team sir! It is assigned to you now.
Hi @kshitijk4poor , do you have any update on this?
Hey @commjoen , yeah I'm on it
Hello @kshitijk4poor, I am new here can I please work with you so that I can get familiar with the code base and hence can contribute in the future
/assign
Can I contribute to this issue? I'm new here, but I have experience contributing to many other organizations. Is there a Discord channel or any other channel where I can discuss and get assistance?
Dear all, the issue is still assigned to kshitijk4poor. once it is completed or he unassigns or it gets unassigned automatically, we will assign it to someone else. For any potential contributor, please read our readme, code of conduct and contribution guidelines. See https://github.com/OWASP/wrongsecrets/blob/master/README.md#support for how to get in touch via Slack to chat about the project.
Hi @kshitijk4poor how are you doing :) ? Do you have any update on the issue?