OWASP/wrongsecrets

wrongsecrets

✅ Recently maintained

Vulnerable app with examples showing how to not use secrets

1,477Stars
655Forks
+47-day stars

HTML · AGPL-3.0 · Last push 2026-11-02

Official repository & installation ↗
hashicorp-vaultjavakubernetessecretssecrets-managementdevsecopssecurityawsgcpazure

Star history

2025-09-292026-11-02
View historical data
DateStars
2026-10-041,469
2026-10-051,469
2026-10-061,469
2026-10-071,469
2026-10-081,469
2026-10-091,469
2026-10-101,469
2026-10-111,469
2026-10-121,469
2026-10-131,470
2026-10-141,470
2026-10-151,471
2026-10-161,471
2026-10-171,471
2026-10-181,471
2026-10-191,471
2026-10-201,472
2026-10-211,473
2026-10-221,473
2026-10-231,473
2026-10-241,473
2026-10-251,473
2026-10-261,474
2026-10-271,474
2026-10-281,474
2026-10-291,474
2026-10-301,476
2026-10-311,476
2026-11-011,477
2026-11-021,477

Get the project

git clone https://github.com/OWASP/wrongsecrets.git

Related projects & alternative candidates

Related domains do not imply feature parity. Review official documentation and licenses.

trivy

Comprehensive open-source security scanner for vulnerabilities, misconfigurations, secrets, and SBOMs across containers and code.

★ 38,902kubernetes

Production-grade container orchestration system for cloud-native apps.

★ 128,826cs-video-courses

List of Computer Science courses with video lectures.

★ 84,489