This is the official companion guide to the OWASP Juice Shop application. Being a web application with a vast number of intended security vulnerabilities, the OWASP Juice Shop is supposed to be the opposite of a best practice or template application for web developers: It is an awareness, training, demonstration and exercise tool for security risks in modern web applications. The OWASP Juice Shop is an open-source project hosted by the non-profit Open Web Application Security Project (OWASP) and is developed and maintained by volunteers.
The book is divided into three parts:
* Part I - Hacking preparations - helps you to get the application running and to set up optional hacking tools. * Part II - Challenge hunting - gives an overview of the vulnerabilities found in the OWASP Juice Shop including hints how to find and exploit them in the application. * Part III - Getting involved - shows up various ways to contribute to the OWASP Juice Shop open source project.