~/talk

Flagship Projects: Juice Shop

Talkat OWASP 20th Anniversary 2021 · on Friday, 2021-09-24· [security]
slides:none on file

Shows that OWASP Juice Shop is a playable vulnerable e‑commerce app with 100 hacking exercises and about 20 live coding challenges that load the real source code, ask for the exact vulnerable lines, present selectable fixes in a diff view and track attempts and accuracy via a webhook. Demonstrates working DOM XSS exploit, the code‑snippet loader, fix selection UI and plans for cheat detection and progress metrics with surprising usage stats like 33 million docker pulls and detailed implementation notes.

AI-written summary · about

  1. 0:00Intro
  2. 0:37Juice Shop
  3. 2:27Challenges
  4. 3:45Crosssite scripting
  5. 5:38Coding challenges
  6. 11:29Google Summer of Code
  7. 12:23Future enhancements
  8. 14:23Accuracy
  9. 16:04Solution Webhook
  10. 18:35Feature Enhancements
  11. 21:36Statistics
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.