Juice Shop Project
summary
An interactive insecure web application exists as a complete training environment with 100 hacking challenges, an Angular front end, Node/Express back end and SQLite, packaged as a single Docker image and deployable to Heroku or Kubernetes. It includes coding challenges, a filterable scoreboard with cheat detection and hooks for CTF score servers, supports multi-instance training and theming, and reports community reach like 48 million Docker pulls while tests and CI keep challenges working.
AI-written summary · about
chapters (16)
- 0:00Introduction to Juice Shop
- 1:34Juice Shop demo
- 8:00Project goals and features
- 12:07First hacking challenge
- 16:53Cross-site scripting example
- 19:31Tutorial and cheat detection
- 22:34Coding challenges
- 28:35CTF event configuration
- 32:22Kubernetes and multi-user
- 34:03Application customization
- 38:12Technical architecture
- 41:18Language support and testing
- 45:01Third-party integrations
- 46:52Documentation resources
- 48:21Project success and roadmap
- 50:54Q&A session
related talks
58mSqueezing The Last Drop Out Of OWASP Juice Shop
01h 05mOWASP Juice Shop: Take your security vitamins!
01h 01mOWASP Juice Shop - An Open Source Software and security Fairytale
39mOWASP JuiceShop
48mHacking the Juice Shop
24mFlagship Projects: Juice Shop
28mFlagship Projects: Security Shepherd
55mPlants vs thieves: Automated Tests in the World of Web Security