Skip to content

Latest commit

 

History

History
19 lines (10 loc) · 820 Bytes

README.md

File metadata and controls

19 lines (10 loc) · 820 Bytes

sops-predictor

Edit: hey i did a little blogpost about this https://blog.bethdevopsbunny.com/Predicting+Sops

sops doesnt hide the length of the encrypted fields very well, I noticed this and found that mozilla are aware of this bug, but that doesnt mean i cant have fun with it!

for all data types it can return you the legnth of the encrypted value.

for boolean however, as it can only be true or false having the length of the value allows you to assume its encrypted value as true has 4 characters and false has 5.

after re-reading the bug linked above, it shows that

here is the age encrypted file in sopsdata/secrets.enc.yml being predicted. image