Skip to content

GitBook markdown content for Bjoern Kimminich's free eBook "Pwning OWASP Juice Shop"

License

Notifications You must be signed in to change notification settings

korede/pwning-juice-shop

This branch is 528 commits behind juice-shop/pwning-juice-shop:master.

Folders and files

NameName
Last commit message
Last commit date
Apr 26, 2020
Apr 17, 2020
Oct 17, 2021
Feb 27, 2020
Oct 1, 2021
Apr 28, 2021
Sep 21, 2021
May 14, 2021
Dec 20, 2016
Sep 8, 2017
May 14, 2021
Dec 5, 2019
Sep 23, 2021
Oct 15, 2019
Oct 3, 2021
Oct 3, 2021
Jul 8, 2019
Jul 8, 2019
Nov 21, 2017
Nov 21, 2017

Repository files navigation

{% if book.ctf %}

Pwning OWASP Juice Shop (CTF Edition)

{% else %}

Pwning OWASP Juice Shop

{% endif %}

Written by Björn Kimminich

{% if book.ctf %}

Front Cover

{% else %}

Front Cover

{% endif %}

This is the official companion guide to the OWASP Juice Shop application. Being a web application with a vast number of intended security vulnerabilities, the OWASP Juice Shop is supposed to be the opposite of a best practice or template application for web developers: It is an awareness, training, demonstration and exercise tool for security risks in modern web applications. The OWASP Juice Shop is an open-source project hosted by the non-profit Open Web Application Security Project® (OWASP) and is developed and maintained by volunteers. The content of this book was written for {{book.juiceShopVersion}} of OWASP Juice Shop.

The book is divided into three parts:

Part I - Hacking preparations

Part one helps you to get the application running and to set up optional hacking tools.

Part II - Challenge hunting

Part two gives an overview of the vulnerabilities found in the OWASP Juice Shop including hints how to find and exploit them in the application.

Part III - Getting involved

{% if book.ctf %}

Part three points you to the social media channels and tells you about donation options of the OWASP Juice Shop open source project.

{% else %}

Part three shows up various ways to contribute to the OWASP Juice Shop open source project.


Please be aware that this book is not supposed to be a comprehensive introduction to Web Application Security in general. For every category of vulnerabilities present in the OWASP Juice Shop you will find a brief explanation - typically by quoting and referencing to existing content on the given topic.


Download a .pdf, .epub, or .mobi file from:

Read the book online at:

Contribute content, suggestions, and fixes on GitHub:

Official OWASP Juice Shop project homepage:

{% endif %}


CC BY-NC-ND 4.0

Open Web Application Security Project and OWASP are registered trademarks of the OWASP Foundation, Inc. This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.

About

GitBook markdown content for Bjoern Kimminich's free eBook "Pwning OWASP Juice Shop"

Resources

License

Stars

Watchers

Forks

Packages

No packages published