Add hardcoded encryption key on top of a secret.

[commjoen]

Have a challenge about "bad encryption practices" where we hardocde the key and the secret in java.

Steps to take:

• create a secret on your computer
• encrypt it with your algorithm of choice (could be AES, 3DES, whatever you like) on your computer resulting in the ciphertext you need
• now take the ciphertext and put that in the java code of the challenge
• add the key you used to encrypt the challenge and a decryption method to the challenge. See contributing.md on how to create the challenge.

[kshitijk4poor]

I would like to work on this one. could you please assign it to me?

[commjoen]

Welcome to the team sir! It is assigned to you now.

[commjoen]

Hi @kshitijk4poor , do you have any update on this?

[kshitijk4poor]

Hey @commjoen , yeah I'm on it

[divyanshuagarwal-23]

Hello @kshitijk4poor, I am new here
can I please work with you
so that I can get familiar with the code base and hence can contribute in the future

[CaduRoriz]

/assign

[nick2432]

Can I contribute to this issue? I'm new here, but I have experience contributing to many other organizations. Is there a Discord channel or any other channel where I can discuss and get assistance?

[commjoen]

Dear all, the issue is still assigned to kshitijk4poor. once it is completed or he unassigns or it gets unassigned automatically, we will assign it to someone else.
For any potential contributor, please read our readme, code of conduct and contribution guidelines.
See https://github.com/OWASP/wrongsecrets/blob/master/README.md#support for how to get in touch via Slack to chat about the project.

[commjoen]

Hi @kshitijk4poor how are you doing :) ? Do you have any update on the issue?

[commjoen]

The issue is opened for new assignees due to inactivity. Want to contribute? have a go at it :)

[jangalasriramd7]

Hi @commjoen ,

I would like to work on this one. Could you please assign it to me?

[vishakha-mali]

If by chance he couldn't complete, allow me to try.

[commjoen]

@jangalasriramd7 do you have any updates on this? Otherwise I would like to hand it over to @vishakha-mali

[vishakha-mali]

Till new updates @commjoen Can you guide me on which file I have to refer to as,I'm excited to apply cryptography algorithms

[commjoen]

see https://github.com/OWASP/wrongsecrets/blob/master/CONTRIBUTING.md on hwo to create a new challenge :) feel free to contact us via slack for more questions/answers

[vishakha-mali]

Problem in How to get started with the project in IntelliJ IDEA:
I'm at Step:6 Reload the project
Further use the OWASP WrongSecrets --> Lifecycle --> install step to load all the dependencies

I tried many times to re-run but the problem remains.

NOTE: Indians and other Asia-Pacific countries users may have to use VPN if you encounter this exception org.owasp.dependencycheck.utils.DownloadFailedException: TLS Connection Reset.

Question:How to use VPN (India) in Intellij while downloading??

[commjoen]

This seems to be something more testing related. can you please get in touch over Slack good sir :) ? then we can easily help you over DM. it looks like some tests failed.

[vishakha-mali]

I joined the Slack , I mean where to share the query in whole community or personal project group is there??or your individual slack id?

[commjoen]

See the readme: there is a link to the slack channel

[vishakha-mali]

hey, added my query to the community.