~/talk

Hacking the Juice Shop

on YouTube 48m
Talkat NDC Security 2023 · 2023-01-16..01-19· [security, developer-experience]

speaker

name:Cecilia Wirén
links:none on file

resources

video:https://youtu.be/1HrTpehfdPM
slides:none on file

summary

Shows how to run OWASP Juice Shop locally or via Docker, explains architecture (Node, Angular, SQLite) and practical tools: browser devtools, Postman and simple scripts. Demonstrations include SQL injection to bypass login (logging in as Jim), using a %00 null‑byte trick to retrieve a forgotten backup PDF, and solving four demo challenges from a pool of hundreds (challenges scale to six stars). Covers hosting a CTF: per‑user instances, generating game XML with the Juice Shop CLI, and using Docker + Root the Box scoring server with optional private keys to prevent cheating.

AI-written summary · about

chapters (9)

  1. 0:00Introduction
  2. 3:54OWASP Juice Shop project
  3. 7:34Juice Shop setup
  4. 11:59Hidden scoreboard challenge
  5. 16:02Login Bender SQLi
  6. 22:35Code challenge feature
  7. 22:57Confidential documents
  8. 30:27Juice Shop CTF
  9. 43:50Q&A

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.