IT-Sec_Group_K/it-sec-exercises
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 8 Wiki Activity

add stuff to a1 and a3 and first part of a3
All checks were successful
zip and release / build-and-release (push) Successful in 5s
Details

Browse Source
This commit is contained in:
Leo
2026-06-19 11:18:41 +02:00
parent accdaadc5b
commit 11db56b542
3 changed files with 37 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
sheet08/a3.txt Normal file
View File

@@ -0,0 +1,9 @@
• Passing passwords via command line arguments:
Benefits: fast and easy to type out for quick testing.
Drawbacks: Highly insecure. Passwords are saved in the .bash_history and are fully visible to any other user running the `ps` command. They also leak through `docker inspect`
• Passing passwords via an environment variable:
Benefits: Better than CLI arguments because they hide the secret from the ps process list.
Drawbacks: Still exposed. Anyone with access to docker can view them using `docker inspect`.
• Passing passwords via a file:
Benefits: The secrets do not show up in the `ps` process list or in the docker inspect metadata. Access to the file on the host can also be limited using chmod.
Drawbacks: Leaves a plaintext file on the physical hard drive, requiring manual cleanup.