OWASP WrongSecrets Files

Vulnerable app with examples showing how to not use secrets

This is an exact mirror of the OWASP WrongSecrets project, hosted at https://github.com/OWASP/wrongsecrets?tab=readme-ov-file#owasp-wrongsecrets. SourceForge is not affiliated with OWASP WrongSecrets.

The interactive file manager requires Javascript. Please enable it or use sftp or scp.
You may still browse the files here.

Name	Modified	InfoDownloads / Week
1.13.5	2026-05-19	1
1.13.3	2026-04-22	0
1.13.2	2026-03-24	0
1.13.1	2026-03-07	0
1.12.11	2026-02-24	0
Totals: 5 Items		1

Other Useful Business Software

Ship Agents Faster

Transform your applications and workflows into powerful agentic systems at global scale.

Gemini Enterprise Agent Platform lets you rapidly build, scale, govern and optimize production-ready agents grounded in your organization's data. The platform enables developers to build custom or pre-built agents for virtually any use case. New customers get $300 in free credits.

Start Free

$300 Free Credits to Build on Google Cloud

New customers can spin up VMs, build with AI, and query data at no cost.

Put your $300 in credit toward real workloads, then keep building with free monthly usage for 20+ products. No commitment and no charge until you upgrade.

Start Free

Ship Agents Faster

Transform your applications and workflows into powerful agentic systems at global scale.

Start Free

Recommended Projects

SecretScanner
Find secrets and passwords in container images and file systems
OWASP Juice Shop
Probably the most modern and sophisticated insecure web application
External Secrets
External Secrets Operator reads information from a third-party service
Secrets for Android
Securely store and manage passwords and secrets on your Android phone
AWS Secrets Manager Go Caching Client
Enables in-process caching of secrets for Go applications

OWASP WrongSecrets Files

Vulnerable app with examples showing how to not use secrets

Get an email when there's a new version of OWASP WrongSecrets