Challenge 31 ☆
Welcome to challenge Challenge 31. You need to guess the secret that is hidden in Java, Docker, Kubernetes, Vault, AWS or GCP.
A user accidentally spills the secret sauce while adding content to our website.
secret sauce
Can you spot the secret in our Website?
You can solve this challenge by the following steps:
Go to our Website.
Browse some tabs, surely the secret is in there :)
For several reasons, "hiding" secrets on a web page is not a good idea, even if it is only for internal use. First and foremost, websites are often accessible to a variety of parties, including employees, contractors and vendors. Keeping secrets on a website increases the risk that unauthorized parties will gain access to them through any vector. The possibility of a hacker pivoting after any compromise is greatly increased.
You have finished all the doable challenges! Congratulations!
We hope you have enjoyed the ride! And have learned something about the pitfalls in secrets management.