~/talk

Squeezing The Last Drop Out Of OWASP Juice Shop

Talkat Global AppSec Dublin 2023 · 2023-02-15..02-16· [security]
links:none on file
slides:none on file

A modern vulnerable web app for training that actually delivers: 101 hacking challenges with six difficulty tiers, a built-in scoreboard and 26 coding challenges that pull real source snippets and ask for fixes; runs as a single Docker container (Angular front end, Express/Node back end, SQLite), integrates with CTF servers and multi-juicer, has Cypress end-to-end tests that exercise the challenges, simple cheat-detection by timing, ~7.7k GitHub stars and 57M Docker pulls.

AI-written summary · about

  1. 0:00Start
  2. 1:23OWASP JUICE SHOP
  3. 16:11Cheat Detection
  4. 31:34Configurative Customization
  5. 32:23Choose your own inventory
  6. 34:08Modern Web-Architecture
  7. 38:27Test Pyramid
  8. 48:27Project Roadmap
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.