Browse

Runtime Secrets Management

Move hardcoded application secrets into a managed secret store issuing short-lived dynamic credentials, and confirm that a stolen credential expires before it is useful.

Intermediate 60m Secrets Management DevSecOps

LAB

Exfiltrating Secrets from a CI Pipeline

Run a malicious merge request that steals the pipeline's deploy token, then scope the secret to protected refs so an untrusted pipeline receives nothing while real deploys still work.

Advanced 60m CI/CD Secrets Management DevSecOps

LAB

Leaked Credential, End to End

A developer committed AWS credentials to the `payments-api` repository four commits ago, and the file is still tracked on the team's Git server. Detect the exposure with gitleaks, revoke the credential, purge it from every commit with `git filter-repo`, and discover that the remote is still dirty the moment that separates fixing your copy from fixing the exposure. You will finish by adding a pre-commit hook and a CI gate, then proving they work by trying to reintroduce a credential.

Intermediate 60m Secrets Management DevSecOps

Browse (3)

Runtime Secrets Management

Exfiltrating Secrets from a CI Pipeline

Leaked Credential, End to End