OWASP JuiceShop
summary
A vulnerable web app born in 2014 grows from 23 hacking challenges to 107 hacking challenges including 31 linked coding exercises and a handful of Web3 puzzles; it ships Capture‑the‑Flag support, a CLI and Multier Kubernetes hosting that spins instances on demand and a Lego case with Raspberry Pis that runs a cluster for ~50–60 users. Tests include unit, API and end‑to‑end suites that actually exploit every challenge and Docker images record 82 million pulls.
AI-written summary · about
chapters (24)
- 0:00OWASP JuiceShop intro
- 1:03Project origin
- 3:11Demo apps to JuiceShop
- 6:23Name and logo
- 8:30Hacking challenges
- 12:27Coding challenges
- 14:59Scoreboard redesign
- 16:04Fake web shop features
- 17:09Hacking instructor mode
- 18:13Capture the Flag support
- 19:37Lego tower setup
- 21:43Theming support
- 23:53Cheat detection
- 25:41Grafana dashboard
- 26:48Documentation
- 27:29Tech stack
- 28:33Test automation
- 29:58Community contributors
- 31:47Project stats
- 32:49Fun facts
- 34:14Official jingle
- 34:59Google Summer of Code participation
- 36:04Project roadmap
- 37:30Q&A
related talks
01h 01mOWASP Juice Shop - An Open Source Software and security Fairytale
01h 05mOWASP Juice Shop: Take your security vitamins!
58mSqueezing The Last Drop Out Of OWASP Juice Shop
24mFlagship Projects: Juice Shop
01h 00mJuice Shop Project
48mHacking the Juice Shop
44mHack Yourself: Intro to pentesting with ZAP
36mLet's take baby steps to security testing