Challenge 12 ☆☆☆
Welcome to challenge Challenge 12.
Find the secret hidden in the WrongSecrets repository. This challenge focuses on Docker.
💡 Look for: Configuration files, source code, environment variables, Docker files, or cloud infrastructure related to this challenge.
Sometimes large parts of the local filesystem are copied over to the container so that they are available in the container for the convenience of the author.
In this challenge, we did some COPY’ing as well and hid a key there. Note that the key changes on every generation of the docker container, so you’d better extract and use it quickly :).
Try deepfenceio/secretscanning, docker history
of the image, or just docker exec
against a running container.