Vulnerable app with examples showing how to not use secrets

1.5K stars 611 forks 1.5K watchers Java GNU Affero General Public License v3.0
aws azure ctf devsecops docker gcp hashicorp-vault java keepass kubernetes owasp secrets secrets-management security terraform-aws terraform-azure terraform-gcp vault vulnerable-web-app
11 Open Issues Need Help Last updated: Sep 1, 2026

Open Issues Need Help

View All on GitHub
help wanted New Challenge

Vulnerable app with examples showing how to not use secrets

Java
#aws#azure#ctf#devsecops#docker#gcp#hashicorp-vault#java#keepass#kubernetes#owasp#secrets#secrets-management#security#terraform-aws#terraform-azure#terraform-gcp#vault#vulnerable-web-app
help wanted New Challenge

Vulnerable app with examples showing how to not use secrets

Java
#aws#azure#ctf#devsecops#docker#gcp#hashicorp-vault#java#keepass#kubernetes#owasp#secrets#secrets-management#security#terraform-aws#terraform-azure#terraform-gcp#vault#vulnerable-web-app

Vulnerable app with examples showing how to not use secrets

Java
#aws#azure#ctf#devsecops#docker#gcp#hashicorp-vault#java#keepass#kubernetes#owasp#secrets#secrets-management#security#terraform-aws#terraform-azure#terraform-gcp#vault#vulnerable-web-app
help wanted

Vulnerable app with examples showing how to not use secrets

Java
#aws#azure#ctf#devsecops#docker#gcp#hashicorp-vault#java#keepass#kubernetes#owasp#secrets#secrets-management#security#terraform-aws#terraform-azure#terraform-gcp#vault#vulnerable-web-app
help wanted good first issue New Challenge

Vulnerable app with examples showing how to not use secrets

Java
#aws#azure#ctf#devsecops#docker#gcp#hashicorp-vault#java#keepass#kubernetes#owasp#secrets#secrets-management#security#terraform-aws#terraform-azure#terraform-gcp#vault#vulnerable-web-app
help wanted New Challenge

Vulnerable app with examples showing how to not use secrets

Java
#aws#azure#ctf#devsecops#docker#gcp#hashicorp-vault#java#keepass#kubernetes#owasp#secrets#secrets-management#security#terraform-aws#terraform-azure#terraform-gcp#vault#vulnerable-web-app
enhancement help wanted

Vulnerable app with examples showing how to not use secrets

Java
#aws#azure#ctf#devsecops#docker#gcp#hashicorp-vault#java#keepass#kubernetes#owasp#secrets#secrets-management#security#terraform-aws#terraform-azure#terraform-gcp#vault#vulnerable-web-app

Vulnerable app with examples showing how to not use secrets

Java
#aws#azure#ctf#devsecops#docker#gcp#hashicorp-vault#java#keepass#kubernetes#owasp#secrets#secrets-management#security#terraform-aws#terraform-azure#terraform-gcp#vault#vulnerable-web-app

Vulnerable app with examples showing how to not use secrets

Java
#aws#azure#ctf#devsecops#docker#gcp#hashicorp-vault#java#keepass#kubernetes#owasp#secrets#secrets-management#security#terraform-aws#terraform-azure#terraform-gcp#vault#vulnerable-web-app

Vulnerable app with examples showing how to not use secrets

Java
#aws#azure#ctf#devsecops#docker#gcp#hashicorp-vault#java#keepass#kubernetes#owasp#secrets#secrets-management#security#terraform-aws#terraform-azure#terraform-gcp#vault#vulnerable-web-app
Record howto's 10 months ago
help wanted

Vulnerable app with examples showing how to not use secrets

Java
#aws#azure#ctf#devsecops#docker#gcp#hashicorp-vault#java#keepass#kubernetes#owasp#secrets#secrets-management#security#terraform-aws#terraform-azure#terraform-gcp#vault#vulnerable-web-app