Challenge 29 help!

[djvinnie]

I have been working my way through the challenges over the weekend and they have been super fun! With challenge 29 though, I am little confused - I did look through all issues with screenshots in them and #742 stood out to me in particular but when I try the Generated Security Password as the answer, it is not working for me..! Am I missing anything here? Appreciate the help!

[commjoen]

Hi @djvinnie ! I hope to investigate the issue this week, looks like the decryption of the challenge fails resulting in the wrong answer. I hope to get back to you soon ;-)

[commjoen]

https://gpa.43z.one/ takes some time to come up. It works now

[commjoen]

Re32: if you visit once and then 15 minute later it should work. Will create a pr to make that more clear. I can fix that later this/next week. Or feel free file a pr in the mean time.

Re29: it seems we forgot to make the path loading in

wrongsecrets/src/main/java/org/owasp/wrongsecrets/challenges/docker/Challenge29.java

Line 77 in c6f8545

String privateKeyFilePath = "src/test/resources/RSAprivatekey.pem";

dynamic. I can fix that later this/next week. Or feel free file a pr in the mean time.

[commjoen]

Re32: initial extra text to explain added in #948

[djvinnie]

Re32: Thank you for the change!
Re29: I will find time this week to file a pr.

[commjoen]

That would be awesome @djvinnie ! I first have some PR-reviews todo before I can jump onto Re29 :) .

[commjoen]

#949 could possible fix challenge29

[commjoen]

i will create a container out of it to test it :)

[commjoen]

Re29: it is now fixed in #949 ;) . you can test this already locally by doing:

docker run -p 8080:8080 jeroenwillemsen/wrongsecrets:1.6.9RC2-no-vault
Now try to solve challenge 29 at http://localhost:8080/challenge/29 ;-)

[djvinnie]

Heyy you said you'll look into it later during the week! Thank you though, once I am done with all of the challenges I will start solving any arising issues in the application. I will test out the challenge fix in some time.

[djvinnie]

Re29: Worked perfectly fine!
Re32: I opened the hxxps://gpa[.]43z[.]one site, wrote my prompt and saw the 502 error. I waited for a couple of minutes and tried again, and I got a 503 (service temporarily unavailable) error. I then waited for 15 minutes, refreshed the website and tried my prompt again but it still did not work for me. 🤔

[commjoen]

Hmm it seems dead now:
HELP: Keep this game alive
Unfortunately this game could stop being playable at any moment. It's very costly to keep it running - peak times $15/day. If you want to keep it running for longer so everyone can enjoy it, please send a few bucks to my bitcoin address bc1quuwxf4a2tge96ydz7f5dck2cp7yrs8zkge4w3x if you can afford it. Or DM me an API key that you don't need anymore. Anyway It was fun while it lasted :)

[commjoen]

I guess we need to disable the challenge for now. What do you think @bendehaan ?

[commjoen]

Re32: we can replace it with https://gandalf.lakera.ai/

[commjoen]

Now replaced 32 with Gandalf: #950 . And we fixed 29 with #949 . This means both issues are addressed in this discussion. I will close this discussion to ensure we have some oversight on all the things.
Thank you for playing and validating the challenges!
Can you please, for any new issue you encounter open a new discussion/issue on github or contact us on slack :) ?

[djvinnie]

Thank you for the quick turnaround with the issues I encountered @commjoen !

Sure, I will be happy to start a new discussion thread here. Since you mentioned slack, how do I access the slack channels for the project? Is there a link that you can provide me?

[commjoen]

Need support? Contact us via OWASP Slack for which you sign up here