Skip to content

Commit

Permalink
Update README.md with nr of challenges
Browse files Browse the repository at this point in the history
  • Loading branch information
commjoen authored Oct 10, 2024
1 parent 0efed93 commit a9db23d
Showing 1 changed file with 7 additions and 5 deletions.
12 changes: 7 additions & 5 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@

Welcome to the OWASP WrongSecrets game! The game is packed with real life examples of how to _not_ store secrets in your software. Each of these examples is captured in a challenge, which you need to solve using various tools and techniques. Solving these challenges will help you recognize common mistakes & can help you to reflect on your own secrets management strategy.

Can you solve all the 48 challenges?
Can you solve all the 50 challenges?

Try some of them on [our Heroku demo environment](https://wrongsecrets.herokuapp.com/).

Expand Down Expand Up @@ -74,7 +74,7 @@ Copyright (c) 2020-2024 Jeroen Willemsen and WrongSecrets contributors.

## Basic docker exercises

_Can be used for challenges 1-4, 8, 12-32, 34, 35-43_
_Can be used for challenges 1-4, 8, 12-32, 34, 35-43, 49-50_

For the basic docker exercises you currently require:

Expand Down Expand Up @@ -125,6 +125,8 @@ Now you can try to find the secrets by means of solving the challenge offered at
- [localhost:8080/challenge/challenge-41](http://localhost:8080/challenge/challenge-41)
- [localhost:8080/challenge/challenge-42](http://localhost:8080/challenge/challenge-42)
- [localhost:8080/challenge/challenge-43](http://localhost:8080/challenge/challenge-43)
- [localhost:8080/challenge/challenge-43](http://localhost:8080/challenge/challenge-49)
- [localhost:8080/challenge/challenge-43](http://localhost:8080/challenge/challenge-50)

Note that these challenges are still very basic, and so are their explanations. Feel free to file a PR to make them look
better ;-).
Expand Down Expand Up @@ -152,7 +154,7 @@ If you want to host WrongSecrets on Railway, you can do so by deploying [this on

## Basic K8s exercise

_Can be used for challenges 1-6, 8, 12-43, 48_
_Can be used for challenges 1-6, 8, 12-43, 48-50_

### Minikube based

Expand Down Expand Up @@ -227,7 +229,7 @@ now you can use the provided IP address and port to further play with the K8s va

## Vault exercises with minikube

_Can be used for challenges 1-8, 12-48_
_Can be used for challenges 1-8, 12-50_
Make sure you have the following installed:

- minikube with docker (or comment out line 8 and work at your own k8s setup),
Expand All @@ -245,7 +247,7 @@ This is because if you run the start script again it will replace the secret in

## Cloud Challenges

_Can be used for challenges 1-48_
_Can be used for challenges 1-50_

**READ THIS**: Given that the exercises below contain IAM privilege escalation exercises,
never run this on an account which is related to your production environment or can influence your account-over-arching
Expand Down

0 comments on commit a9db23d

Please sign in to comment.