From 2e3bfbf09d0af5f0d02515150ee68b3656e764a1 Mon Sep 17 00:00:00 2001 From: Jeroen Willemsen Date: Wed, 4 Oct 2023 20:47:40 +0200 Subject: [PATCH 1/4] Update POM file with new version: 1.7.0RC3 --- .github/scripts/.bash_history | 712 ++++++++++++++++++++++++ Dockerfile | 6 +- Dockerfile_webdesktop | 6 +- Dockerfile_webdesktopk8s | 2 +- src/main/resources/templates/about.html | 114 ++-- 5 files changed, 777 insertions(+), 63 deletions(-) create mode 100644 .github/scripts/.bash_history diff --git a/.github/scripts/.bash_history b/.github/scripts/.bash_history new file mode 100644 index 000000000..f09548d89 --- /dev/null +++ b/.github/scripts/.bash_history @@ -0,0 +1,712 @@ +vim updater.bash +bash updater.bash +vim updater.bash +apt-cache search gem +sudo gem install -V lolcat +cowthink heyhey +sudo apt-get install fortune +fortune +man fortune +fortune -o +man fortune +fortune -o +fortune +fortune | cowsay | lolcat +fortune +fortune | cowsay +fortune | cowsay | lolcat +top +ls +cd / +ls +ls -lah | lolcat +sudo apt-get install sl +sl | lolcat +sl +sl | lolcat +cd / +ls -lah | lolcat +wget http://introcs.cs.princeton.edu/java/data/dickens.txt +sudo apt-get install rubygems +sudo apt-get install ruby | gem +history +which ruby +ruby --version +sudo apt-get install rubygems +sudo apt-get -qq update +sudo apt-get upgrade +sudo apt-get dist-upgrade +sudo apt-get install tmux +sudo apt-get upgrade -y vim +vim --version +ls +ll +pwd +top +ls +vim copyall.sh +ll /etc/skel/ +vim copyall.sh +vim bootsrap.sh +bash bootsrap.sh +ls +mkdir +ls -lah +ll +mkdir userdata +cd userdata/ +ls +mkdir names +cd names/ +vim name-sources.txt +ls +cd .. +mkdir corpora && cd corpora +vim text-sources.txt +ls +cd userdata/ +ls +cd corpora/ +ls +ll +cowsay -d hello | lolcat +pinky | lolcat +pwd +sl +ls +pwd +cd .. +ls +mkdir funnythings +ls +cd funnythings/ +ls +pwd +touch hello.txt +ls +man ls +ls -ah +man ls +ls -lah +echo hi +echo hi > hello.txt +ls -lah +cat hello.txt +echo bobba > hello.txt +cat hello.txt +echo lalala >> hello.txt +cat hello.txt +pinky >> pinky.txt +cat pinky.txt +man wc +cat pinky.txt +wc -l pinky.txt +pinky >> pinky.txt +wc -l pinky.txt +wc -w pinky.txt +pinky >> pinky.txt +wc -w pinky.txt +cat pinky.txt +cat pinky.txt | grep user007 +man grep +cat pinky.txt | grep -C 2 user007 +cat pinky.txt | grep user007 +cat pinky.txt | grep user007 > superclient.txt +cat superclient.txt +ls +cat hello.txt +echo newtextfile > hello2.txt +ls +ls -lah +ls -lah | grep hello +cat hello* +cat hello* > hellocombined.txt +wc -l hellocombined.txt +cd .. +ls +cd +ls +ls +cd / +ls +cd home/ +ls -lah +ls +tree +sudo apt-get install tree +tree +cd .. +cd +ls +ls +tree +ls +pwd +tree +cd names/ +ls +cat name-sources.txt +cd +cd userdata/names/ +ls +cat name-sources.txt +cd +cd userdata/names/ +cat name-sources.txt +cat name-sources.txt | less +wget curl http://www.census.gov/genealogy/www/data/1990surnames/dist.female.first | awk '{print $1}' +wget curl http://www.census.gov/genealogy/www/data/1990surnames/dist.female.first +ls +cat name-sources.txt | less +cat name-sources.txt +ls +rm dist.female.first.1 +ls +cat dist.female.first +wc -l dist.female.first +cd +cd userdata/names/ +ll +cat dist.female.first +cat dist.female.first | less +cat dist.female.first +head dist.female.first +tail dist.female.first +cat dist.female.first +cat dist.female.first | sort +cat dist.female.first | sort -r +cat dist.female.first | cut -d -f1 +cat dist.female.first | cut -d -k1 +cat dist.female.first | cut -d'' -k1 +cat dist.female.first | cut -d' ' -k1 +cat dist.female.first | cut -d' ' -f1 +cat dist.female.first +cat dist.female.first | cut -d' ' -f1 +cat dist.female.first | cut -d' ' -f2 +cat dist.female.first | cut -d' ' -f3 +cat dist.female.first | cut -d' ' -f4 +cat dist.female.first | cut -d' ' -f5 +cat dist.female.first | cut -d' ' -f6 +cat dist.female.first | cut -d'\t' -f6 +cat dist.female.first | cut -d'\t' -f2 +cat dist.female.first | cut -d't' -f2 +man cut +cat dist.female.first | cut -f2 +cat dist.female.first | awk '{ print $1 }' +cat dist.female.first | awk '{ print $2 }' +cat dist.female.first | awk '{ print $3 }' +cat dist.female.first | awk '{ print $4 }' +cat dist.female.first | awk '{ print $4 $1 }' +cat dist.female.first | awk '{ print $4,$1 }' +cat dist.female.first | awk '{ print $4 ## $1 }' +cat dist.female.first | awk '{ print $4 "##" $1 }' +cat dist.female.first | grep ann | awk '{ print $4 "##" $1 }' +cat dist.female.first | grep ann +cat dist.female.first | grep an +cat dist.female.first +cat dist.female.first | grep ann +cat dist.female.first | grep ANN +cat dist.female.first | grep ANN | awk '{ print $4 "##" $1 }' +cat dist.female.first | grep ANN | awk '{ print $4 "\t" $1 }' +cat dist.female.first | grep ANN | awk '{ print $4 "group :ann" $1 }' +cat dist.female.first | grep ANN | awk '{ print $4 "\tgroup :ann\t" $1 }' +cat dist.female.first | grep ANN | awk '{ print $4 "\tgroup :ann\t" $1 }' | wc -l +ls +cat name-sources.txt +wget http://www.census.gov/genealogy/www/data/1990surnames/dist.male.first +ls +cat dist.* | grep ANN | awk '{ print $4 "\tgroup :ann\t" $1 }' | wc -l +cat dist.male.first | grep ANN | awk '{ print $4 "\tgroup :ann\t" $1 }' | wc -l +cat dist.male.first | grep ANN | awk '{ print $4 "\tgroup :ann\t" $1 }' +ls +diff dist.female.first dist.male.first +man diff +diff dist.female.first dist.male.first +diff dist.female.first dist.male.first | less +ls +wc -l dist.* +cat dist* +cat dist* > dist.combined.names +ls +ls -l +wc -l dist.female.first dist.male.first +cat dist.female.first dist.male.first | md5sum +cat dist.combined.names | md5sum +cat dist.combined.names +echo . +echo . >> dist.combined.names +cat dist.combined.names +cat dist.combined.names | md5sum +cat dist.female.first dist.male.first | md5sum +vim dist.combined.names +cat dist.combined.names | md5sum +echo "hi potch" | md5sum +echo "hi patch" | md5sum +cat dist.combined.names +man tr +cat dist.combined.names | tr -cd [:upper:] [:lower:] +man tr +cat dist.combined.names | tr [:upper:] [:lower:] +cd .. +ls +cd corpora/ +ll +cat text-sources.txt +wget http://introcs.cs.princeton.edu/java/data/dickens.txt +wc -l dickens.txt +wc -w dickens.txt +head dickens.txt +tail dickens.txt +cat dickens.txt | less +cat dickens.txt | tr -sc 'A-Za-z' '\12' | tr -d [:punct:] | tr [:upper:] [:lower:] +cat dickens.txt | tr -sc 'A-Za-z' '\12' | tr -d [:punct:] | tr [:upper:] [:lower:] | tr -d '\r' | sort | uniq -c | sort -nr > output_ngram.txt +cat output_ngram.txt +wc -l output_ngram.txt +output_ngram.txt +cat output_ngram.txt +head output_ngram.txt +tail output_ngram.txt +cat dickens.txt | grep -C 2 -i abbeville +cat dickens.txt | grep -C 4 -i abbeville +cat output_ngram.txt +cat output_ngram.txt | lolcat +cat output_ngram.txt | sort +man sort +cat output_ngram.txt | sort -n +cat dickens.txt | grep -i face +cat output_ngram.txt | wc -l +vim filename.txt +cat filename.txt +ls +w +pinky +history +pwd +cat .bash_history +ls +docker-compose up -d +k6 run tests/k6.js +npm run test:automatic +npm install k6 --save +npx k6 run tests/ +npx k6 run tests/k6.js +npm remove k6 +npm install --save @types/k6 +npx k6 +sudo apt remove k6 +k6 +npx k6 +npm remove @types/k6 +npm run tests:automatic +npm run test:automatic +k6 +npm run +npm start +npm install nodemon --save +npm start +npm install +git status +git checkout main +git status +git stash +git log +git checkout 0a34816be1f11496a33234ba9e723d676eb0400f +git checkout main +git checkout -b add-config +git rebase main +git rebase origin/main +ls +cd scripts/ +ls +cd .. +grep -r tests +ls +cd js +ls +cat package +cat package.json +cd .. +ls +ls +mvn --no-transfer-progress test +java --version +sudo apt remove java +sudo apt remove jre +sudo apt remove default-jre +wget https://download.oracle.com/java/18/latest/jdk-18_linux-x64_bin.deb +deb -i jdk-18_linux-x64_bin.deb +dpkg -i jdk-18_linux-x64_bin.deb +sudo dpkg -i jdk-18_linux-x64_bin.deb +sudo apt install libc6-i386 +sudo apt --fix-broken install +sudo dpkg -i jdk-18_linux-x64_bin.deb +java --version +mvn --no-transfer-progress test +git status +rm -rf jdk-18_linux-x64_bin.deb +git rebase -i main +git rebase -i master +git stash +export tempPassword="8l5wd+5pERCxBb0M1m6zBGNC5mL/kgERD2iR/Kj/wMU=" +mvn run tempPassword +k6 +npx k6 +npm remove @types/k6 +npm run tests:automatic +npm run test:automatic +k6 +npm run +npm start +npm install nodemon --save +npm start +npm install +git status +git checkout main +git status +git stash +git log +git checkout 0a34816be1f11496a33234ba9e723d676eb0400f +git checkout main +git checkout -b add-config +git rebase main +git rebase origin/main +ls +cd scripts/ +ls +cd .. +grep -r tests +ls +cd js +ls +cat package +cat package.json +cd .. +ls +ls +mvn --no-transfer-progress test +java --version +sudo apt remove java +sudo apt remove jre +sudo apt remove default-jre +wget https://download.oracle.com/java/18/latest/jdk-18_linux-x64_bin.deb +deb -i jdk-18_linux-x64_bin.deb +dpkg -i jdk-18_linux-x64_bin.deb +sudo dpkg -i jdk-18_linux-x64_bin.deb +sudo apt install libc6-i386 +sudo apt --fix-broken install +sudo dpkg -i jdk-18_linux-x64_bin.deb +whereis java +sudo rm /usr/bin/java +whereis java +sudo rm /usr/share/java +sudo rm -rf /usr/share/java +sudo rm /usr/share/man/man1/java.1.gz +sudo apt install openjdk-18-headless +java --version +sudo apt install openjdk-18-jre-headless +mvn --no-transfer-progress test +java +mvn --no-transfer-progress test +java --version +mvn +sudo apt remove maven +sudo apt update +sudo apt install maven +git branch +git pull +git stash +git pull +git reflog +git log +git checkout 02fcb97395b4a55040d5d29fd0310d8b36443368 +git status +git status +git log +git reset 02fcb97395b4a55040d5d29fd0310d8b36443368 +git status +git add src/run-tests.sh +vim updater.bash +bash updater.bash +vim updater.bash +apt-cache search gem +sudo gem install -V lolcat +cowthink heyhey +sudo apt-get install fortune +fortune +man fortune +fortune -o +man fortune +fortune -o +fortune +fortune | cowsay | lolcat +fortune +fortune | cowsay +fortune | cowsay | lolcat +top +ls +cd / +ls +ls -lah | lolcat +sudo apt-get install sl +sl | lolcat +sl +sl | lolcat +cd / +ls -lah | lolcat +wget http://introcs.cs.princeton.edu/java/data/dickens.txt +sudo apt-get install rubygems +sudo apt-get install ruby | gem +history +which ruby +ruby --version +sudo apt-get install rubygems +sudo apt-get -qq update +sudo apt-get upgrade +sudo apt-get dist-upgrade +sudo apt-get install tmux +sudo apt-get upgrade -y vim +vim --version +ls +ll +pwd +top +ls +vim copyall.sh +ll /etc/skel/ +vim copyall.sh +vim bootsrap.sh +bash bootsrap.sh +ls +mkdir +ls -lah +ll +mkdir userdata +cd userdata/ +ls +mkdir names +cd names/ +vim name-sources.txt +ls +cd .. +mkdir corpora && cd corpora +vim text-sources.txt +ls +cd userdata/ +ls +cd corpora/ +ls +ll +cowsay -d hello | lolcat +pinky | lolcat +pwd +sl +ls +pwd +cd .. +ls +mkdir funnythings +ls +cd funnythings/ +ls +pwd +touch hello.txt +ls +man ls +ls -ah +man ls +ls -lah +echo hi +echo hi > hello.txt +ls -lah +cat hello.txt +echo bobba > hello.txt +cat hello.txt +echo lalala >> hello.txt +cat hello.txt +pinky >> pinky.txt +cat pinky.txt +man wc +cat pinky.txt +wc -l pinky.txt +pinky >> pinky.txt +wc -l pinky.txt +wc -w pinky.txt +pinky >> pinky.txt +wc -w pinky.txt +cat pinky.txt +cat pinky.txt | grep user007 +man grep +cat pinky.txt | grep -C 2 user007 +cat pinky.txt | grep user007 +cat pinky.txt | grep user007 > superclient.txt +cat superclient.txt +ls +cat hello.txt +echo newtextfile > hello2.txt +ls +ls -lah +ls -lah | grep hello +cat hello* +cat hello* > hellocombined.txt +wc -l hellocombined.txt +cd .. +ls +cd +ls +ls +cd / +ls +cd home/ +ls -lah +ls +tree +sudo apt-get install tree +tree +cd .. +cd +ls +ls +tree +ls +pwd +tree +cd names/ +ls +cat name-sources.txt +cd +cd userdata/names/ +ls +cat name-sources.txt +cd +cd userdata/names/ +cat name-sources.txt +cat name-sources.txt | less +wget curl http://www.census.gov/genealogy/www/data/1990surnames/dist.female.first | awk '{print $1}' +wget curl http://www.census.gov/genealogy/www/data/1990surnames/dist.female.first +ls +cat name-sources.txt | less +cat name-sources.txt +ls +rm dist.female.first.1 +ls +cat dist.female.first +wc -l dist.female.first +cd +cd userdata/names/ +ll +cat dist.female.first +cat dist.female.first | less +cat dist.female.first +head dist.female.first +tail dist.female.first +cat dist.female.first +cat dist.female.first | sort +cat dist.female.first | sort -r +cat dist.female.first | cut -d -f1 +cat dist.female.first | cut -d -k1 +cat dist.female.first | cut -d'' -k1 +cat dist.female.first | cut -d' ' -k1 +cat dist.female.first | cut -d' ' -f1 +cat dist.female.first +cat dist.female.first | cut -d' ' -f1 +cat dist.female.first | cut -d' ' -f2 +cat dist.female.first | cut -d' ' -f3 +cat dist.female.first | cut -d' ' -f4 +cat dist.female.first | cut -d' ' -f5 +cat dist.female.first | cut -d' ' -f6 +cat dist.female.first | cut -d'\t' -f6 +cat dist.female.first | cut -d'\t' -f2 +cat dist.female.first | cut -d't' -f2 +man cut +cat dist.female.first | cut -f2 +cat dist.female.first | awk '{ print $1 }' +cat dist.female.first | awk '{ print $2 }' +cat dist.female.first | awk '{ print $3 }' +cat dist.female.first | awk '{ print $4 }' +cat dist.female.first | awk '{ print $4 $1 }' +cat dist.female.first | awk '{ print $4,$1 }' +cat dist.female.first | awk '{ print $4 ## $1 }' +cat dist.female.first | awk '{ print $4 "##" $1 }' +cat dist.female.first | grep ann | awk '{ print $4 "##" $1 }' +cat dist.female.first | grep ann +cat dist.female.first | grep an +cat dist.female.first +cat dist.female.first | grep ann +cat dist.female.first | grep ANN +cat dist.female.first | grep ANN | awk '{ print $4 "##" $1 }' +cat dist.female.first | grep ANN | awk '{ print $4 "\t" $1 }' +cat dist.female.first | grep ANN | awk '{ print $4 "group :ann" $1 }' +cat dist.female.first | grep ANN | awk '{ print $4 "\tgroup :ann\t" $1 }' +cat dist.female.first | grep ANN | awk '{ print $4 "\tgroup :ann\t" $1 }' | wc -l +ls +cat name-sources.txt +wget http://www.census.gov/genealogy/www/data/1990surnames/dist.male.first +ls +cat dist.* | grep ANN | awk '{ print $4 "\tgroup :ann\t" $1 }' | wc -l +cat dist.male.first | grep ANN | awk '{ print $4 "\tgroup :ann\t" $1 }' | wc -l +cat dist.male.first | grep ANN | awk '{ print $4 "\tgroup :ann\t" $1 }' +ls +diff dist.female.first dist.male.first +man diff +diff dist.female.first dist.male.first +diff dist.female.first dist.male.first | less +ls +wc -l dist.* +cat dist* +cat dist* > dist.combined.names +ls +ls -l +wc -l dist.female.first dist.male.first +cat dist.female.first dist.male.first | md5sum +cat dist.combined.names | md5sum +cat dist.combined.names +echo . +echo . >> dist.combined.names +cat dist.combined.names +cat dist.combined.names | md5sum +cat dist.female.first dist.male.first | md5sum +vim dist.combined.names +cat dist.combined.names | md5sum +echo "hi potch" | md5sum +echo "hi patch" | md5sum +cat dist.combined.names +man tr +cat dist.combined.names | tr -cd [:upper:] [:lower:] +man tr +cat dist.combined.names | tr [:upper:] [:lower:] +cd .. +ls +cd corpora/ +ll +cat text-sources.txt +wget http://introcs.cs.princeton.edu/java/data/dickens.txt +wc -l dickens.txt +wc -w dickens.txt +head dickens.txt +tail dickens.txt +cat dickens.txt | less +cat dickens.txt | tr -sc 'A-Za-z' '\12' | tr -d [:punct:] | tr [:upper:] [:lower:] +cat dickens.txt | tr -sc 'A-Za-z' '\12' | tr -d [:punct:] | tr [:upper:] [:lower:] | tr -d '\r' | sort | uniq -c | sort -nr > output_ngram.txt +cat output_ngram.txt +wc -l output_ngram.txt +output_ngram.txt +cat output_ngram.txt +head output_ngram.txt +tail output_ngram.txt +cat dickens.txt | grep -C 2 -i abbeville +cat dickens.txt | grep -C 4 -i abbeville +cat output_ngram.txt +cat output_ngram.txt | lolcat +cat output_ngram.txt | sort +man sort +cat output_ngram.txt | sort -n +cat dickens.txt | grep -i face +cat output_ngram.txt | wc -l +vim filename.txt +cat filename.txt +ls +w +pinky +history +pwd +cat .bash_history diff --git a/Dockerfile b/Dockerfile index f0c3464d9..8b14cb532 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM amazoncorretto:21.0.0-al2023-headless +FROM amazoncorretto:21.0.0-alpine ARG argBasedPassword="default" ARG argBasedVersion="0.0.0" @@ -15,7 +15,9 @@ RUN echo "2vars" RUN echo "$ARG_BASED_PASSWORD" RUN echo "$argBasedPassword" -RUN useradd -u 2000 -m wrongsecrets +# RUN useradd -u 2000 -m wrongsecrets +RUN adduser -u 2000 -D wrongsecrets +USER wrongsecrets COPY --chown=wrongsecrets target/wrongsecrets-${argBasedVersion}-SNAPSHOT.jar /application.jar COPY --chown=wrongsecrets .github/scripts/ /var/tmp/helpers diff --git a/Dockerfile_webdesktop b/Dockerfile_webdesktop index 6c518e0ad..4b5e81c4d 100644 --- a/Dockerfile_webdesktop +++ b/Dockerfile_webdesktop @@ -9,7 +9,7 @@ RUN \ RUN \ echo "**** install packages ****" && \ - apk add --no-cache shadow keepassxc radare2 aws-cli geany git && \ + apk add --no-cache shadow keepassxc radare2 aws-cli geany git build-base && \ echo "**** adding abc user to root for Docker ****" && \ usermod -aG root abc && \ touch /var/run/docker.sock && \ @@ -20,8 +20,8 @@ RUN \ WORKDIR /config/Desktop COPY src/main/resources/executables/*linux* /config/Desktop/wrongsecrets/ -COPY src/test/resources/executables/decrypt /config/Desktop/wrongsecrets/ -COPY src/test/resources/executables/decrypt /config/Desktop/wrongsecrets/ +COPY src/main/resources/executables/decrypt /config/Desktop/wrongsecrets/ +COPY src/main/resources/executables/decrypt /config/Desktop/wrongsecrets/ COPY src/main/resources/executables/wrongsecrets-advanced-c-windows.exe /config/Desktop/wrongsecrets/ COPY src/test/resources/alibabacreds.kdbx /var/tmp/helpers/ COPY src/test/resources/alibabacreds.kdbx /var/tmp/wrongsecrets/ diff --git a/Dockerfile_webdesktopk8s b/Dockerfile_webdesktopk8s index 39ccfd134..19063550b 100644 --- a/Dockerfile_webdesktopk8s +++ b/Dockerfile_webdesktopk8s @@ -26,7 +26,7 @@ RUN echo "**** clone wrongsecrets.git for webtop in k8s ****" && \ WORKDIR /config/Desktop COPY src/main/resources/executables/*linux* /var/tmp/wrongsecrets/ -COPY src/test/resources/executables/decrypt /config/Desktop/wrongsecrets/ +COPY src/main/resources/executables/decrypt /config/Desktop/wrongsecrets/ COPY src/main/resources/executables/wrongsecrets-advanced-c-windows.exe /config/Desktop/wrongsecrets/ COPY src/test/resources/alibabacreds.kdbx /var/tmp/helpers/ COPY src/test/resources/alibabacreds.kdbx /var/tmp/wrongsecrets/ diff --git a/src/main/resources/templates/about.html b/src/main/resources/templates/about.html index 012cc46f3..8cdcad4d9 100644 --- a/src/main/resources/templates/about.html +++ b/src/main/resources/templates/about.html @@ -143,9 +143,9 @@
  • (Apache 2.0) io.grpc:grpc-services (io.grpc:grpc-services:1.56.1 - https://github.com/grpc/grpc-java)
  • (Apache 2.0) io.grpc:grpc-stub (io.grpc:grpc-stub:1.56.1 - https://github.com/grpc/grpc-java)
  • (Apache 2.0) io.grpc:grpc-xds (io.grpc:grpc-xds:1.56.1 - https://github.com/grpc/grpc-java)
    • -
  • (The Apache Software License, Version 2.0) micrometer-commons (io.micrometer:micrometer-commons:1.11.3 - https://github.com/micrometer-metrics/micrometer)
    • -
  • (The Apache Software License, Version 2.0) micrometer-core (io.micrometer:micrometer-core:1.11.3 - https://github.com/micrometer-metrics/micrometer)
    • -
  • (The Apache Software License, Version 2.0) micrometer-observation (io.micrometer:micrometer-observation:1.11.3 - https://github.com/micrometer-metrics/micrometer)
    • +
  • (The Apache Software License, Version 2.0) micrometer-commons (io.micrometer:micrometer-commons:1.11.4 - https://github.com/micrometer-metrics/micrometer)
    • +
  • (The Apache Software License, Version 2.0) micrometer-core (io.micrometer:micrometer-core:1.11.4 - https://github.com/micrometer-metrics/micrometer)
    • +
  • (The Apache Software License, Version 2.0) micrometer-observation (io.micrometer:micrometer-observation:1.11.4 - https://github.com/micrometer-metrics/micrometer)
  • (Apache License, Version 2.0) Netty/Buffer (io.netty:netty-buffer:4.1.97.Final - https://netty.io/netty-buffer/)
  • (Apache License, Version 2.0) Netty/Codec (io.netty:netty-codec:4.1.97.Final - https://netty.io/netty-codec/)
  • (Apache License, Version 2.0) Netty/Codec/DNS (io.netty:netty-codec-dns:4.1.97.Final - https://netty.io/netty-codec-dns/)
    • @@ -171,16 +171,16 @@
  • (The Apache License, Version 2.0) OpenCensus (io.opencensus:opencensus-contrib-http-util:0.31.1 - https://github.com/census-instrumentation/opencensus-java)
  • (The Apache License, Version 2.0) OpenCensus (io.opencensus:opencensus-proto:0.2.0 - https://github.com/census-instrumentation/opencensus-proto)
  • (Apache 2.0) perfmark:perfmark-api (io.perfmark:perfmark-api:0.26.0 - https://github.com/perfmark/perfmark)
    • -
  • (Apache License, Version 2.0) Non-Blocking Reactive Foundation for the JVM (io.projectreactor:reactor-core:3.5.9 - https://github.com/reactor/reactor-core)
    • -
  • (The Apache Software License, Version 2.0) Core functionality for the Reactor Netty library (io.projectreactor.netty:reactor-netty-core:1.1.10 - https://github.com/reactor/reactor-netty)
    • -
  • (The Apache Software License, Version 2.0) HTTP functionality for the Reactor Netty library (io.projectreactor.netty:reactor-netty-http:1.1.10 - https://github.com/reactor/reactor-netty)
    • +
  • (Apache License, Version 2.0) Non-Blocking Reactive Foundation for the JVM (io.projectreactor:reactor-core:3.5.10 - https://github.com/reactor/reactor-core)
    • +
  • (The Apache Software License, Version 2.0) Core functionality for the Reactor Netty library (io.projectreactor.netty:reactor-netty-core:1.1.11 - https://github.com/reactor/reactor-netty)
    • +
  • (The Apache Software License, Version 2.0) HTTP functionality for the Reactor Netty library (io.projectreactor.netty:reactor-netty-http:1.1.11 - https://github.com/reactor/reactor-netty)
  • (Apache License 2.0) swagger-annotations-jakarta (io.swagger.core.v3:swagger-annotations-jakarta:2.2.15 - https://github.com/swagger-api/swagger-core/modules/swagger-annotations-jakarta)
  • (Apache License 2.0) swagger-core-jakarta (io.swagger.core.v3:swagger-core-jakarta:2.2.15 - https://github.com/swagger-api/swagger-core/modules/swagger-core-jakarta)
  • (Apache License 2.0) swagger-models-jakarta (io.swagger.core.v3:swagger-models-jakarta:2.2.15 - https://github.com/swagger-api/swagger-core/modules/swagger-models-jakarta)
  • (EDL 1.0) Jakarta Activation API (jakarta.activation:jakarta.activation-api:2.1.2 - https://github.com/jakartaee/jaf-api)
  • (EPL 2.0) (GPL2 w/ CPE) Jakarta Annotations API (jakarta.annotation:jakarta.annotation-api:2.1.1 - https://projects.eclipse.org/projects/ee4j.ca)
  • (Apache License 2.0) Jakarta Bean Validation API (jakarta.validation:jakarta.validation-api:3.0.2 - https://beanvalidation.org)
    • -
  • (Eclipse Distribution License - v 1.0) Jakarta XML Binding API (jakarta.xml.bind:jakarta.xml.bind-api:4.0.0 - https://github.com/eclipse-ee4j/jaxb-api/jakarta.xml.bind-api)
    • +
  • (Eclipse Distribution License - v 1.0) Jakarta XML Binding API (jakarta.xml.bind:jakarta.xml.bind-api:4.0.1 - https://github.com/eclipse-ee4j/jaxb-api/jakarta.xml.bind-api)
  • (CDDL/GPLv2+CE) JavaBeans Activation Framework API jar (javax.activation:javax.activation-api:1.2.0 - http://java.net/all/javax.activation-api/)
  • (CDDL + GPLv2 with classpath exception) javax.annotation API (javax.annotation:javax.annotation-api:1.3.2 - http://jcp.org/en/jsr/detail?id=250)
  • (The Apache Software License, Version 2.0) javax.inject (javax.inject:javax.inject:1 - http://code.google.com/p/atinject/)
    • @@ -205,7 +205,7 @@
  • (Apache License, Version 2.0) Apache Commons Lang (org.apache.commons:commons-lang3:3.12.0 - https://commons.apache.org/proper/commons-lang/)
  • (Apache License, Version 2.0) Apache Commons Pool (org.apache.commons:commons-pool2:2.11.1 - https://commons.apache.org/proper/commons-pool/)
  • (Apache License, Version 2.0) Apache Commons Text (org.apache.commons:commons-text:1.10.0 - https://commons.apache.org/proper/commons-text)
    • -
  • (The Apache Software License, Version 2.0) Apache Groovy (org.apache.groovy:groovy:4.0.14 - https://groovy-lang.org)
    • +
  • (The Apache Software License, Version 2.0) Apache Groovy (org.apache.groovy:groovy:4.0.15 - https://groovy-lang.org)
  • (Apache License, Version 2.0) Apache HttpClient (org.apache.httpcomponents:httpclient:4.5.14 - http://hc.apache.org/httpcomponents-client-ga)
  • (Apache License, Version 2.0) Apache HttpCore (org.apache.httpcomponents:httpcore:4.4.16 - http://hc.apache.org/httpcomponents-core-ga)
  • (Apache License, Version 2.0) Apache HttpClient (org.apache.httpcomponents.client5:httpclient5:5.2.1 - https://hc.apache.org/httpcomponents-client-5.0.x/5.2.1/httpclient5/)
    • @@ -236,9 +236,9 @@
  • (Apache License, Version 2.0) Apache Maven Dependency Tree (org.apache.maven.shared:maven-dependency-tree:3.2.1 - https://maven.apache.org/shared/maven-dependency-tree/)
  • (Apache License, Version 2.0) Apache Maven Shared Utils (org.apache.maven.shared:maven-shared-utils:3.1.0 - https://maven.apache.org/shared/maven-shared-utils/)
  • (Apache License, Version 2.0) Proton-J (org.apache.qpid:proton-j:0.33.8 - https://qpid.apache.org/proton/proton-j)
    • -
  • (Apache License, Version 2.0) tomcat-embed-core (org.apache.tomcat.embed:tomcat-embed-core:10.1.12 - https://tomcat.apache.org/)
    • -
  • (Apache License, Version 2.0) tomcat-embed-el (org.apache.tomcat.embed:tomcat-embed-el:10.1.12 - https://tomcat.apache.org/)
    • -
  • (Apache License, Version 2.0) tomcat-embed-websocket (org.apache.tomcat.embed:tomcat-embed-websocket:10.1.12 - https://tomcat.apache.org/)
    • +
  • (Apache License, Version 2.0) tomcat-embed-core (org.apache.tomcat.embed:tomcat-embed-core:10.1.13 - https://tomcat.apache.org/)
    • +
  • (Apache License, Version 2.0) tomcat-embed-el (org.apache.tomcat.embed:tomcat-embed-el:10.1.13 - https://tomcat.apache.org/)
    • +
  • (Apache License, Version 2.0) tomcat-embed-websocket (org.apache.tomcat.embed:tomcat-embed-websocket:10.1.13 - https://tomcat.apache.org/)
  • (Apache License, Version 2.0) Apache Velocity - Engine (org.apache.velocity:velocity-engine-core:2.3 - http://velocity.apache.org/engine/devel/velocity-engine-core/)
  • (The Apache Software License, Version 2.0) asciidoctorj (org.asciidoctor:asciidoctorj:2.5.10 - https://github.com/asciidoctor/asciidoctorj)
  • (The Apache Software License, Version 2.0) asciidoctorj-api (org.asciidoctor:asciidoctorj-api:2.5.10 - https://github.com/asciidoctor/asciidoctorj)
    • @@ -291,12 +291,12 @@
  • (The Apache Software License, Version 2.0) Dependency-Check Core (org.owasp:dependency-check-core:8.2.1 - https://github.com/jeremylong/DependencyCheck.git/dependency-check-core)
  • (The Apache Software License, Version 2.0) Dependency-Check Maven Plugin (org.owasp:dependency-check-maven:8.2.1 - https://github.com/jeremylong/DependencyCheck.git/dependency-check-maven)
  • (The Apache Software License, Version 2.0) Dependency-Check Utils (org.owasp:dependency-check-utils:8.2.1 - https://github.com/jeremylong/DependencyCheck.git/dependency-check-utils)
    • -
  • (The MIT License) Project Lombok (org.projectlombok:lombok:1.18.28 - https://projectlombok.org)
    • +
  • (The MIT License) Project Lombok (org.projectlombok:lombok:1.18.30 - https://projectlombok.org)
  • (MIT-0) reactive-streams (org.reactivestreams:reactive-streams:1.0.4 - http://www.reactive-streams.org/)
  • (The MIT License) semver4j (org.semver4j:semver4j:4.3.0 - https://github.com/semver4j/semver4j)
    • -
  • (Apache License, Version 2.0) JCL 1.2 implemented over SLF4J (org.slf4j:jcl-over-slf4j:2.0.7 - http://www.slf4j.org)
    • -
  • (MIT License) JUL to SLF4J bridge (org.slf4j:jul-to-slf4j:2.0.7 - http://www.slf4j.org)
    • -
  • (MIT License) SLF4J API Module (org.slf4j:slf4j-api:2.0.7 - http://www.slf4j.org)
    • +
  • (Apache License, Version 2.0) JCL 1.2 implemented over SLF4J (org.slf4j:jcl-over-slf4j:2.0.9 - http://www.slf4j.org)
    • +
  • (MIT License) JUL to SLF4J bridge (org.slf4j:jul-to-slf4j:2.0.9 - http://www.slf4j.org)
    • +
  • (MIT License) SLF4J API Module (org.slf4j:slf4j-api:2.0.9 - http://www.slf4j.org)
  • (The Apache Software License, Version 2.0) Aether :: API (org.sonatype.aether:aether-api:1.7 - http://aether.sonatype.org/aether-api/)
  • (The Apache Software License, Version 2.0) Aether :: Implementation (org.sonatype.aether:aether-impl:1.7 - http://aether.sonatype.org/aether-impl/)
  • (The Apache Software License, Version 2.0) Aether :: SPI (org.sonatype.aether:aether-spi:1.7 - http://aether.sonatype.org/aether-spi/)
    • @@ -312,35 +312,35 @@
  • (The Apache License, Version 2.0) springdoc-openapi-starter-common (org.springdoc:springdoc-openapi-starter-common:2.2.0 - https://springdoc.org/springdoc-openapi-starter-common/)
  • (The Apache License, Version 2.0) springdoc-openapi-starter-webmvc-api (org.springdoc:springdoc-openapi-starter-webmvc-api:2.2.0 - https://springdoc.org/springdoc-openapi-starter-webmvc-api/)
  • (The Apache License, Version 2.0) springdoc-openapi-starter-webmvc-ui (org.springdoc:springdoc-openapi-starter-webmvc-ui:2.2.0 - https://springdoc.org/springdoc-openapi-starter-webmvc-ui/)
    • -
  • (Apache License, Version 2.0) Spring AOP (org.springframework:spring-aop:6.0.11 - https://github.com/spring-projects/spring-framework)
    • -
  • (Apache License, Version 2.0) Spring Beans (org.springframework:spring-beans:6.0.11 - https://github.com/spring-projects/spring-framework)
    • -
  • (Apache License, Version 2.0) Spring Context (org.springframework:spring-context:6.0.11 - https://github.com/spring-projects/spring-framework)
    • -
  • (Apache License, Version 2.0) Spring Core (org.springframework:spring-core:6.0.11 - https://github.com/spring-projects/spring-framework)
    • -
  • (Apache License, Version 2.0) Spring Expression Language (SpEL) (org.springframework:spring-expression:6.0.11 - https://github.com/spring-projects/spring-framework)
    • -
  • (Apache License, Version 2.0) Spring Commons Logging Bridge (org.springframework:spring-jcl:6.0.11 - https://github.com/spring-projects/spring-framework)
    • -
  • (Apache License, Version 2.0) Spring Web (org.springframework:spring-web:6.0.11 - https://github.com/spring-projects/spring-framework)
    • -
  • (Apache License, Version 2.0) Spring Web MVC (org.springframework:spring-webmvc:6.0.11 - https://github.com/spring-projects/spring-framework)
    • -
  • (Apache License, Version 2.0) spring-boot (org.springframework.boot:spring-boot:3.1.3 - https://spring.io/projects/spring-boot)
    • -
  • (Apache License, Version 2.0) spring-boot-actuator (org.springframework.boot:spring-boot-actuator:3.1.3 - https://spring.io/projects/spring-boot)
    • -
  • (Apache License, Version 2.0) spring-boot-actuator-autoconfigure (org.springframework.boot:spring-boot-actuator-autoconfigure:3.1.3 - https://spring.io/projects/spring-boot)
    • -
  • (Apache License, Version 2.0) spring-boot-autoconfigure (org.springframework.boot:spring-boot-autoconfigure:3.1.3 - https://spring.io/projects/spring-boot)
    • -
  • (Apache License, Version 2.0) spring-boot-starter (org.springframework.boot:spring-boot-starter:3.1.3 - https://spring.io/projects/spring-boot)
    • -
  • (Apache License, Version 2.0) spring-boot-starter-actuator (org.springframework.boot:spring-boot-starter-actuator:3.1.3 - https://spring.io/projects/spring-boot)
    • -
  • (Apache License, Version 2.0) spring-boot-starter-json (org.springframework.boot:spring-boot-starter-json:3.1.3 - https://spring.io/projects/spring-boot)
    • -
  • (Apache License, Version 2.0) spring-boot-starter-logging (org.springframework.boot:spring-boot-starter-logging:3.1.3 - https://spring.io/projects/spring-boot)
    • -
  • (Apache License, Version 2.0) spring-boot-starter-thymeleaf (org.springframework.boot:spring-boot-starter-thymeleaf:3.1.3 - https://spring.io/projects/spring-boot)
    • -
  • (Apache License, Version 2.0) spring-boot-starter-tomcat (org.springframework.boot:spring-boot-starter-tomcat:3.1.3 - https://spring.io/projects/spring-boot)
    • -
  • (Apache License, Version 2.0) spring-boot-starter-web (org.springframework.boot:spring-boot-starter-web:3.1.3 - https://spring.io/projects/spring-boot)
    • +
  • (Apache License, Version 2.0) Spring AOP (org.springframework:spring-aop:6.0.12 - https://github.com/spring-projects/spring-framework)
    • +
  • (Apache License, Version 2.0) Spring Beans (org.springframework:spring-beans:6.0.12 - https://github.com/spring-projects/spring-framework)
    • +
  • (Apache License, Version 2.0) Spring Context (org.springframework:spring-context:6.0.12 - https://github.com/spring-projects/spring-framework)
    • +
  • (Apache License, Version 2.0) Spring Core (org.springframework:spring-core:6.0.12 - https://github.com/spring-projects/spring-framework)
    • +
  • (Apache License, Version 2.0) Spring Expression Language (SpEL) (org.springframework:spring-expression:6.0.12 - https://github.com/spring-projects/spring-framework)
    • +
  • (Apache License, Version 2.0) Spring Commons Logging Bridge (org.springframework:spring-jcl:6.0.12 - https://github.com/spring-projects/spring-framework)
    • +
  • (Apache License, Version 2.0) Spring Web (org.springframework:spring-web:6.0.12 - https://github.com/spring-projects/spring-framework)
    • +
  • (Apache License, Version 2.0) Spring Web MVC (org.springframework:spring-webmvc:6.0.12 - https://github.com/spring-projects/spring-framework)
    • +
  • (Apache License, Version 2.0) spring-boot (org.springframework.boot:spring-boot:3.1.4 - https://spring.io/projects/spring-boot)
    • +
  • (Apache License, Version 2.0) spring-boot-actuator (org.springframework.boot:spring-boot-actuator:3.1.4 - https://spring.io/projects/spring-boot)
    • +
  • (Apache License, Version 2.0) spring-boot-actuator-autoconfigure (org.springframework.boot:spring-boot-actuator-autoconfigure:3.1.4 - https://spring.io/projects/spring-boot)
    • +
  • (Apache License, Version 2.0) spring-boot-autoconfigure (org.springframework.boot:spring-boot-autoconfigure:3.1.4 - https://spring.io/projects/spring-boot)
    • +
  • (Apache License, Version 2.0) spring-boot-starter (org.springframework.boot:spring-boot-starter:3.1.4 - https://spring.io/projects/spring-boot)
    • +
  • (Apache License, Version 2.0) spring-boot-starter-actuator (org.springframework.boot:spring-boot-starter-actuator:3.1.4 - https://spring.io/projects/spring-boot)
    • +
  • (Apache License, Version 2.0) spring-boot-starter-json (org.springframework.boot:spring-boot-starter-json:3.1.4 - https://spring.io/projects/spring-boot)
    • +
  • (Apache License, Version 2.0) spring-boot-starter-logging (org.springframework.boot:spring-boot-starter-logging:3.1.4 - https://spring.io/projects/spring-boot)
    • +
  • (Apache License, Version 2.0) spring-boot-starter-thymeleaf (org.springframework.boot:spring-boot-starter-thymeleaf:3.1.4 - https://spring.io/projects/spring-boot)
    • +
  • (Apache License, Version 2.0) spring-boot-starter-tomcat (org.springframework.boot:spring-boot-starter-tomcat:3.1.4 - https://spring.io/projects/spring-boot)
    • +
  • (Apache License, Version 2.0) spring-boot-starter-web (org.springframework.boot:spring-boot-starter-web:3.1.4 - https://spring.io/projects/spring-boot)
  • (Apache License, Version 2.0) Spring Cloud Commons (org.springframework.cloud:spring-cloud-commons:4.0.4 - https://projects.spring.io/spring-cloud/spring-cloud-commons/)
  • (Apache License, Version 2.0) Spring Cloud Context (org.springframework.cloud:spring-cloud-context:4.0.4 - https://projects.spring.io/spring-cloud/spring-cloud-context/)
  • (Apache License, Version 2.0) spring-cloud-starter (org.springframework.cloud:spring-cloud-starter:4.0.4 - https://projects.spring.io/spring-cloud)
  • (Apache License, Version 2.0) Spring Cloud Starter Vault Config (org.springframework.cloud:spring-cloud-starter-vault-config:4.0.1 - https://cloud.spring.io/spring-cloud-vault/)
  • (Apache License, Version 2.0) Spring Cloud Vault Configuration Integration (org.springframework.cloud:spring-cloud-vault-config:4.0.1 - https://spring.io/spring-cloud/spring-cloud-vault-parent/spring-cloud-vault-config)
    • -
  • (Apache License, Version 2.0) spring-security-config (org.springframework.security:spring-security-config:6.1.3 - https://spring.io/projects/spring-security)
    • -
  • (Apache License, Version 2.0) spring-security-core (org.springframework.security:spring-security-core:6.1.3 - https://spring.io/projects/spring-security)
    • -
  • (Apache License, Version 2.0) spring-security-crypto (org.springframework.security:spring-security-crypto:6.1.3 - https://spring.io/projects/spring-security)
    • +
  • (Apache License, Version 2.0) spring-security-config (org.springframework.security:spring-security-config:6.1.4 - https://spring.io/projects/spring-security)
    • +
  • (Apache License, Version 2.0) spring-security-core (org.springframework.security:spring-security-core:6.1.4 - https://spring.io/projects/spring-security)
    • +
  • (Apache License, Version 2.0) spring-security-crypto (org.springframework.security:spring-security-crypto:6.1.4 - https://spring.io/projects/spring-security)
  • (Apache 2.0) spring-security-rsa (org.springframework.security:spring-security-rsa:1.0.12.RELEASE - http://github.com/spring-projects/spring-security-oauth)
    • -
  • (Apache License, Version 2.0) spring-security-web (org.springframework.security:spring-security-web:6.1.3 - https://spring.io/projects/spring-security)
    • +
  • (Apache License, Version 2.0) spring-security-web (org.springframework.security:spring-security-web:6.1.4 - https://spring.io/projects/spring-security)
  • (Apache License, Version 2.0) Spring Vault Core (org.springframework.vault:spring-vault-core:3.0.2 - https://projects.spring.io/spring-vault/spring-vault-core/)
  • (BSD-3-Clause) ThreeTen backport (org.threeten:threetenbp:1.6.8 - https://www.threeten.org/threetenbp)
  • (The Apache Software License, Version 2.0) thymeleaf (org.thymeleaf:thymeleaf:3.1.2.RELEASE - http://www.thymeleaf.org/thymeleaf-lib/thymeleaf)
    • @@ -355,25 +355,25 @@
  • (BSD 2-Clause) github-buttons (org.webjars.npm:github-buttons:2.14.1 - https://www.webjars.org)
  • (Common Public 1.0) pecoff4j (org.whitesource:pecoff4j:0.0.2.1 - https://github.com/whitesource/pecoff4j-maven)
  • (Apache License, Version 2.0) SnakeYAML (org.yaml:snakeyaml:1.33 - https://bitbucket.org/snakeyaml/snakeyaml)
    • -
  • (Apache License, Version 2.0) AWS Java SDK :: Annotations (software.amazon.awssdk:annotations:2.20.139 - https://aws.amazon.com/sdkforjava/core/annotations)
    • -
  • (Apache License, Version 2.0) AWS Java SDK :: HTTP Clients :: Apache (software.amazon.awssdk:apache-client:2.20.139 - https://aws.amazon.com/sdkforjava/http-clients/apache-client)
    • -
  • (Apache License, Version 2.0) AWS Java SDK :: Auth (software.amazon.awssdk:auth:2.20.139 - https://aws.amazon.com/sdkforjava)
    • -
  • (Apache License, Version 2.0) AWS Java SDK :: AWS Core (software.amazon.awssdk:aws-core:2.20.139 - https://aws.amazon.com/sdkforjava)
    • -
  • (Apache License, Version 2.0) AWS Java SDK :: Core :: Protocols :: AWS Json Protocol (software.amazon.awssdk:aws-json-protocol:2.20.139 - https://aws.amazon.com/sdkforjava)
    • -
  • (Apache License, Version 2.0) AWS Java SDK :: Core :: Protocols :: AWS Query Protocol (software.amazon.awssdk:aws-query-protocol:2.20.139 - https://aws.amazon.com/sdkforjava)
    • -
  • (Apache License, Version 2.0) AWS Java SDK :: Endpoints SPI (software.amazon.awssdk:endpoints-spi:2.20.139 - https://aws.amazon.com/sdkforjava/core/endpoints-spi)
    • -
  • (Apache License, Version 2.0) AWS Java SDK :: HTTP Client Interface (software.amazon.awssdk:http-client-spi:2.20.139 - https://aws.amazon.com/sdkforjava/http-client-spi)
    • -
  • (Apache License, Version 2.0) AWS Java SDK :: Core :: Protocols :: Json Utils (software.amazon.awssdk:json-utils:2.20.139 - https://aws.amazon.com/sdkforjava)
    • -
  • (Apache License, Version 2.0) AWS Java SDK :: Metrics SPI (software.amazon.awssdk:metrics-spi:2.20.139 - https://aws.amazon.com/sdkforjava/core/metrics-spi)
    • -
  • (Apache License, Version 2.0) AWS Java SDK :: HTTP Clients :: Netty Non-Blocking I/O (software.amazon.awssdk:netty-nio-client:2.20.139 - https://aws.amazon.com/sdkforjava/http-clients/netty-nio-client)
    • -
  • (Apache License, Version 2.0) AWS Java SDK :: Profiles (software.amazon.awssdk:profiles:2.20.139 - https://aws.amazon.com/sdkforjava)
    • -
  • (Apache License, Version 2.0) AWS Java SDK :: Core :: Protocols :: Protocol Core (software.amazon.awssdk:protocol-core:2.20.139 - https://aws.amazon.com/sdkforjava)
    • -
  • (Apache License, Version 2.0) AWS Java SDK :: Regions (software.amazon.awssdk:regions:2.20.139 - https://aws.amazon.com/sdkforjava/core/regions)
    • -
  • (Apache License, Version 2.0) AWS Java SDK :: SDK Core (software.amazon.awssdk:sdk-core:2.20.139 - https://aws.amazon.com/sdkforjava)
    • -
  • (Apache License, Version 2.0) AWS Java SDK :: Services :: AWS Simple Systems Management (SSM) (software.amazon.awssdk:ssm:2.20.139 - https://aws.amazon.com/sdkforjava)
    • -
  • (Apache License, Version 2.0) AWS Java SDK :: Services :: AWS STS (software.amazon.awssdk:sts:2.20.139 - https://aws.amazon.com/sdkforjava)
    • -
  • (Apache License, Version 2.0) AWS Java SDK :: Third Party :: Jackson-core (software.amazon.awssdk:third-party-jackson-core:2.20.139 - https://aws.amazon.com/sdkforjava)
    • -
  • (Apache License, Version 2.0) AWS Java SDK :: Utilities (software.amazon.awssdk:utils:2.20.139 - https://aws.amazon.com/sdkforjava/utils)
    • +
  • (Apache License, Version 2.0) AWS Java SDK :: Annotations (software.amazon.awssdk:annotations:2.20.157 - https://aws.amazon.com/sdkforjava/core/annotations)
    • +
  • (Apache License, Version 2.0) AWS Java SDK :: HTTP Clients :: Apache (software.amazon.awssdk:apache-client:2.20.157 - https://aws.amazon.com/sdkforjava/http-clients/apache-client)
    • +
  • (Apache License, Version 2.0) AWS Java SDK :: Auth (software.amazon.awssdk:auth:2.20.157 - https://aws.amazon.com/sdkforjava)
    • +
  • (Apache License, Version 2.0) AWS Java SDK :: AWS Core (software.amazon.awssdk:aws-core:2.20.157 - https://aws.amazon.com/sdkforjava)
    • +
  • (Apache License, Version 2.0) AWS Java SDK :: Core :: Protocols :: AWS Json Protocol (software.amazon.awssdk:aws-json-protocol:2.20.157 - https://aws.amazon.com/sdkforjava)
    • +
  • (Apache License, Version 2.0) AWS Java SDK :: Core :: Protocols :: AWS Query Protocol (software.amazon.awssdk:aws-query-protocol:2.20.157 - https://aws.amazon.com/sdkforjava)
    • +
  • (Apache License, Version 2.0) AWS Java SDK :: Endpoints SPI (software.amazon.awssdk:endpoints-spi:2.20.157 - https://aws.amazon.com/sdkforjava/core/endpoints-spi)
    • +
  • (Apache License, Version 2.0) AWS Java SDK :: HTTP Client Interface (software.amazon.awssdk:http-client-spi:2.20.157 - https://aws.amazon.com/sdkforjava/http-client-spi)
    • +
  • (Apache License, Version 2.0) AWS Java SDK :: Core :: Protocols :: Json Utils (software.amazon.awssdk:json-utils:2.20.157 - https://aws.amazon.com/sdkforjava)
    • +
  • (Apache License, Version 2.0) AWS Java SDK :: Metrics SPI (software.amazon.awssdk:metrics-spi:2.20.157 - https://aws.amazon.com/sdkforjava/core/metrics-spi)
    • +
  • (Apache License, Version 2.0) AWS Java SDK :: HTTP Clients :: Netty Non-Blocking I/O (software.amazon.awssdk:netty-nio-client:2.20.157 - https://aws.amazon.com/sdkforjava/http-clients/netty-nio-client)
    • +
  • (Apache License, Version 2.0) AWS Java SDK :: Profiles (software.amazon.awssdk:profiles:2.20.157 - https://aws.amazon.com/sdkforjava)
    • +
  • (Apache License, Version 2.0) AWS Java SDK :: Core :: Protocols :: Protocol Core (software.amazon.awssdk:protocol-core:2.20.157 - https://aws.amazon.com/sdkforjava)
    • +
  • (Apache License, Version 2.0) AWS Java SDK :: Regions (software.amazon.awssdk:regions:2.20.157 - https://aws.amazon.com/sdkforjava/core/regions)
    • +
  • (Apache License, Version 2.0) AWS Java SDK :: SDK Core (software.amazon.awssdk:sdk-core:2.20.157 - https://aws.amazon.com/sdkforjava)
    • +
  • (Apache License, Version 2.0) AWS Java SDK :: Services :: AWS Simple Systems Management (SSM) (software.amazon.awssdk:ssm:2.20.157 - https://aws.amazon.com/sdkforjava)
    • +
  • (Apache License, Version 2.0) AWS Java SDK :: Services :: AWS STS (software.amazon.awssdk:sts:2.20.157 - https://aws.amazon.com/sdkforjava)
    • +
  • (Apache License, Version 2.0) AWS Java SDK :: Third Party :: Jackson-core (software.amazon.awssdk:third-party-jackson-core:2.20.157 - https://aws.amazon.com/sdkforjava)
    • +
  • (Apache License, Version 2.0) AWS Java SDK :: Utilities (software.amazon.awssdk:utils:2.20.157 - https://aws.amazon.com/sdkforjava/utils)
  • (Apache License, Version 2.0) AWS Event Stream (software.amazon.eventstream:eventstream:1.0.1 - https://github.com/awslabs/aws-eventstream-java)
  • (Apache-2.0) CPE Parser (us.springett:cpe-parser:2.0.2 - https://github.com/stevespringett/CPE-Parser)
    • From f13b390134e28c9f5288e1acd2a45df7e09f223b Mon Sep 17 00:00:00 2001 From: Jeroen Willemsen Date: Wed, 4 Oct 2023 20:55:03 +0200 Subject: [PATCH 2/4] finishing touches for webtop --- Dockerfile_webdesktop | 1 - Dockerfile_webdesktopk8s | 2 +- 2 files changed, 1 insertion(+), 2 deletions(-) diff --git a/Dockerfile_webdesktop b/Dockerfile_webdesktop index 4b5e81c4d..9ae039408 100644 --- a/Dockerfile_webdesktop +++ b/Dockerfile_webdesktop @@ -21,7 +21,6 @@ WORKDIR /config/Desktop COPY src/main/resources/executables/*linux* /config/Desktop/wrongsecrets/ COPY src/main/resources/executables/decrypt /config/Desktop/wrongsecrets/ -COPY src/main/resources/executables/decrypt /config/Desktop/wrongsecrets/ COPY src/main/resources/executables/wrongsecrets-advanced-c-windows.exe /config/Desktop/wrongsecrets/ COPY src/test/resources/alibabacreds.kdbx /var/tmp/helpers/ COPY src/test/resources/alibabacreds.kdbx /var/tmp/wrongsecrets/ diff --git a/Dockerfile_webdesktopk8s b/Dockerfile_webdesktopk8s index 19063550b..7a913e8f4 100644 --- a/Dockerfile_webdesktopk8s +++ b/Dockerfile_webdesktopk8s @@ -9,7 +9,7 @@ RUN \ RUN \ echo "**** install packages ****" && \ - apk add --no-cache shadow keepassxc radare2 aws-cli geany git && \ + apk add --no-cache shadow keepassxc radare2 aws-cli geany git build-base && \ echo "**** adding abc user to root for Docker ****" && \ usermod -aG root abc && \ touch /var/run/docker.sock && \ From 1f2107549fef0fe412491e73d6fc281df9d15319 Mon Sep 17 00:00:00 2001 From: Jeroen Willemsen Date: Thu, 5 Oct 2023 06:55:51 +0200 Subject: [PATCH 3/4] Updated contributors --- Dockerfile.web | 4 ++-- README.md | 17 +++++++++-------- src/main/resources/templates/welcome.html | 7 ++++--- 3 files changed, 15 insertions(+), 13 deletions(-) diff --git a/Dockerfile.web b/Dockerfile.web index d1b54969a..792dc7625 100644 --- a/Dockerfile.web +++ b/Dockerfile.web @@ -1,5 +1,5 @@ -FROM jeroenwillemsen/wrongsecrets:1.6.10-no-vault -ARG argBasedVersion="1.6.10-no-vault" +FROM jeroenwillemsen/wrongsecrets:1.7.0RC3-no-vault +ARG argBasedVersion="1.7.0RC3-no-vault" ARG CANARY_URLS="http://canarytokens.com/terms/about/s7cfbdakys13246ewd8ivuvku/post.jsp,http://canarytokens.com/terms/about/y0all60b627gzp19ahqh7rl6j/post.jsp" ARG CTF_ENABLED=false ARG HINTS_ENABLED=true diff --git a/README.md b/README.md index 7bb48707e..bd48af8a0 100644 --- a/README.md +++ b/README.md @@ -15,7 +15,7 @@ Welcome to the OWASP WrongSecrets game! The game is packed with real life examples of how to _not_ store secrets in your software. Each of these examples is captured in a challenge, which you need to solve using various tools and techniques. Solving these challenges will help you recognize common mistakes & can help you to reflect on your own secrets management strategy. -Can you solve all the 37 challenges? +Can you solve all the 38 challenges? Try some of them on [our Heroku demo environment](https://wrongsecrets.herokuapp.com/) or on our [Okteto demo environment (might need to awake again)](https://wrongsecrets-commjoen.cloud.okteto.net/). @@ -71,7 +71,7 @@ Copyright (c) 2020-2023 Jeroen Willemsen and WrongSecrets contributors. ## Basic docker exercises -_Can be used for challenges 1-4, 8, 12-32, 34, 35-37_ +_Can be used for challenges 1-4, 8, 12-32, 34, 35-38_ For the basic docker exercises you currently require: @@ -116,6 +116,7 @@ Now you can try to find the secrets by means of solving the challenge offered at - [localhost:8080/challenge/35](http://localhost:8080/challenge/35) - [localhost:8080/challenge/36](http://localhost:8080/challenge/36) - [localhost:8080/challenge/37](http://localhost:8080/challenge/37) +- [localhost:8080/challenge/38](http://localhost:8080/challenge/38) Note that these challenges are still very basic, and so are their explanations. Feel free to file a PR to make them look better ;-). @@ -136,7 +137,7 @@ Want to deploy yourself with Render? Click the button below: ## Basic K8s exercise -_Can be used for challenges 1-6, 8, 12-37_ +_Can be used for challenges 1-6, 8, 12-38_ ### Minikube based @@ -193,7 +194,7 @@ Don't want to go over the hassle of setting up K8S yourself? visit [https://wron ## Vault exercises with minikube -_Can be used for challenges 1-8, 12-37_ +_Can be used for challenges 1-8, 12-38_ Make sure you have the following installed: - minikube with docker (or comment out line 8 and work at your own k8s setup), @@ -211,7 +212,7 @@ This is because if you run the start script again it will replace the secret in ## Cloud Challenges -_Can be used for challenges 1-37_ +_Can be used for challenges 1-38_ **READ THIS**: Given that the exercises below contain IAM privilege escalation exercises, never run this on an account which is related to your production environment or can influence your account-over-arching @@ -264,15 +265,15 @@ Leaders: Top contributors: -- [Nanne Baars @nbaars](https://github.com/nbaars) - [Joss Sparkes @remakingeden](https://github.com/remakingeden) +- [Nanne Baars @nbaars](https://github.com/nbaars) +- [Puneeth Y @puneeth072003](https://github.com/puneeth072003) - [Marcin Nowak @drnow4u](https://github.com/drnow4u) +- [Divyanshu Dev @Novice-expert](https://github.com/Novice-expert) - [Tibor Hercz @tiborhercz](https://github.com/tiborhercz) - [Rodolfo Cabral Neves @roddas](https://github.com/roddas) - [Chris Elbring Jr. @neatzsche](https://github.com/neatzsche) -- [Puneeth Y @puneeth072003](https://github.com/puneeth072003) - [Mike Woudenberg @mikewoudenberg](https://github.com/mikewoudenberg) -- [Divyanshu Dev @Novice-expert](https://github.com/Novice-expert) - [Filip Chyla @fchyla](https://github.com/fchyla) - [Dmitry Litosh @Dlitosh](https://github.com/Dlitosh) - [Josh Grossman @tghosth](https://github.com/tghosth) diff --git a/src/main/resources/templates/welcome.html b/src/main/resources/templates/welcome.html index e312d8d22..57a80caa4 100644 --- a/src/main/resources/templates/welcome.html +++ b/src/main/resources/templates/welcome.html @@ -108,14 +108,15 @@ Top Contributors:
      +
    • Joss Sparkes @remakingeden
    • Nanne Baars @nbaars
      • +
    • Puneeth Y @puneeth072003
    • Marcin Nowak @drnow4u
      • -
    • Joss Sparkes @remakingeden
      • -
    • Tibor Hercz @tiborhercz
      • +
    • Rodolfo Cabral Neves @roddas
    • Chris Elbring Jr. @neatzsche
      • -
    • Puneeth Y @puneeth072003
      • +
    • Tibor Hercz @tiborhercz
    • Mike Woudenberg @mikewoudenberg
    • Divyanshu Dev @Novice-expert
    • Filip Chyla @fchyla
      • From 81a5c1ea00f35e0c093c9b72762d8d6ef8889492 Mon Sep 17 00:00:00 2001 From: Jeroen Willemsen Date: Thu, 5 Oct 2023 22:14:21 +0200 Subject: [PATCH 4/4] Updated status --- Dockerfile.web | 4 ++-- README.md | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/Dockerfile.web b/Dockerfile.web index 792dc7625..1fe44945d 100644 --- a/Dockerfile.web +++ b/Dockerfile.web @@ -1,5 +1,5 @@ -FROM jeroenwillemsen/wrongsecrets:1.7.0RC3-no-vault -ARG argBasedVersion="1.7.0RC3-no-vault" +FROM jeroenwillemsen/wrongsecrets:1.7.0RC4-no-vault +ARG argBasedVersion="1.7.0RC4-no-vault" ARG CANARY_URLS="http://canarytokens.com/terms/about/s7cfbdakys13246ewd8ivuvku/post.jsp,http://canarytokens.com/terms/about/y0all60b627gzp19ahqh7rl6j/post.jsp" ARG CTF_ENABLED=false ARG HINTS_ENABLED=true diff --git a/README.md b/README.md index bd48af8a0..5f7f0d5be 100644 --- a/README.md +++ b/README.md @@ -9,7 +9,7 @@ [![Test minikube script (k8s)](https://github.com/OWASP/wrongsecrets/actions/workflows/minikube-k8s-test.yml/badge.svg)](https://github.com/OWASP/wrongsecrets/actions/workflows/minikube-k8s-test.yml) [![Test minikube script (k8s&vault)](https://github.com/OWASP/wrongsecrets/actions/workflows/minikube-vault-test.yml/badge.svg)](https://github.com/OWASP/wrongsecrets/actions/workflows/minikube-vault-test.yml) [![Docker container test](https://github.com/OWASP/wrongsecrets/actions/workflows/container_test.yml/badge.svg)](https://github.com/OWASP/wrongsecrets/actions/workflows/container_test.yml)[![Test container on podman and Colima](https://github.com/OWASP/wrongsecrets/actions/workflows/container-alts-test.yml/badge.svg)](https://github.com/OWASP/wrongsecrets/actions/workflows/container-alts-test.yml) [![DAST with ZAP](https://github.com/OWASP/wrongsecrets/actions/workflows/dast-zap-test.yml/badge.svg)](https://github.com/OWASP/wrongsecrets/actions/workflows/dast-zap-test.yml) -[![OWASP Lab Project](https://img.shields.io/badge/OWASP-lab%20project-48A646.svg)](https://owasp.org/projects/) +[![OWASP Production Project](https://img.shields.io/badge/OWASP-production%20project-48A646.svg)](https://owasp.org/projects/) [![OpenSSF Best Practices](https://bestpractices.coreinfrastructure.org/projects/7024/badge)](https://bestpractices.coreinfrastructure.org/projects/7024) [![Discussions](https://img.shields.io/github/discussions/OWASP/wrongsecrets)](https://github.com/OWASP/wrongsecrets/discussions)