OWASP Juice Shop: Take your security vitamins!
summary
OWASP Juice Shop is a deliberately vulnerable realistic web shop that ships as a single Docker image (Node.js/Express backend, Angular v20 frontend, SQLite/Mast DB) and currently contains 110+ hacking challenges with a built‑in scoreboard and cheat‑detection based on solve timing. Automated Cypress end‑to‑end tests exploit every challenge to detect accidental fixes. A separate MultiJuicer team hosting platform spins up per‑team instances, aggregates scores and provides a 3D globe visualization. Official stats show about 85M Docker pulls.
AI-written summary · about
chapters (16)
- 0:00Welcome to Juice Shop
- 0:28What is Juice Shop
- 9:19Live demo shopping
- 17:10Behind Juice Shop
- 20:03Cheat detection
- 21:28Rebranding for demos
- 23:31Juice Shop tech stack
- 27:06Automated testing
- 31:24Introducing MultiJuicer
- 38:473D globe CTF
- 41:36LEGO tower case
- 44:27Contributors and community
- 48:42AI spam challenges
- 54:21Official jingle
- 57:10Success and roadmap
- 1:01:27Q&A cloud security
related talks
01h 01mOWASP Juice Shop - An Open Source Software and security Fairytale
58mSqueezing The Last Drop Out Of OWASP Juice Shop
48mHacking the Juice Shop
39mOWASP JuiceShop
24mFlagship Projects: Juice Shop
01h 00mJuice Shop Project
55mPlants vs thieves: Automated Tests in the World of Web Security
44mHack Yourself: Intro to pentesting with ZAP