OWASP Juice Shop - An Open Source Software and security Fairytale
summary
OWASP Juice Shop starts as a 2014 pet project and now ships a realistic web shop with 106 hacking challenges (expanded into ~137 tasks including coding puzzles), an Angular + Node.js stack with SQLite and an in-memory Mongo shim for NoSQL demos, end-to-end Cypress tests that actually exploit challenges, CTF support plus the multier Kubernetes deployer, a redesigned fast scoreboard, cheat-detection heuristics, and ~81 million Docker pulls proving wide use. It runs in a single Docker image and is actively maintained.
AI-written summary · about
chapters (9)
- 0:00OWASP Juice Shop intro
- 1:48Project history
- 9:37Challenge purpose
- 17:20Customization options
- 24:47Community growth
- 35:01Tech stack
- 41:21Project stats
- 46:01Side projects
- 56:04Q&A
related talks
01h 05mOWASP Juice Shop: Take your security vitamins!
39mOWASP JuiceShop
58mSqueezing The Last Drop Out Of OWASP Juice Shop
24mFlagship Projects: Juice Shop
48mHacking the Juice Shop
01h 00mJuice Shop Project
55mPlants vs thieves: Automated Tests in the World of Web Security
44mHack Yourself: Intro to pentesting with ZAP