OWASP WrongSecrets
Welcome to the OWASP WrongSecrets game! The game is packed with real-life examples of how not to store secrets in your software. Each challenge helps you recognize common mistakes in secrets management and reflect on your own strategy. Play the challenges on Heroku, Render.io, Railway, Minikube, AWS, GCP, Azure, or your own cloud environment.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
A compilation of Red Teaming resources including cheatsheets, notes, scripts, and practice platforms for cybersecurity learning and skill development.
A comprehensive guide to Python 3 syntax, features, and resources in a single image.
A workshop on hacking Bluetooth Smart locks, covering architecture, vulnerabilities, and exploitation techniques.
A reference cheat sheet documenting vulnerabilities in SSL/TLS protocol versions and cipher suites for security assessment purposes.
A docker container with multiple vulnerable applications for cybersecurity training.
A repository of CTF challenges and resources from various cybersecurity competitions.
A practical security handbook for .NET developers covering essential security controls, cryptographic functions, and secure coding practices.
INE Security offers a range of cybersecurity certifications, including penetration testing, mobile and web application security, and incident response.
PINNED
Mandos
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.