Email the Author

About the Book

This is the official companion guide to the OWASP Juice Shop application. Being a web application with a vast number of intended security vulnerabilities, the OWASP Juice Shop is supposed to be the opposite of a best practice or template application for web developers: It is an awareness, training, demonstration and exercise tool for security risks in modern web applications. The OWASP Juice Shop is an open-source project hosted by the non-profit Open Worldwide Application Security Project® (OWASP) and is developed and maintained by volunteers.

The book is divided into five parts:

Part I - Hacking preparations

Part one helps you to get the application running and to set up optional hacking tools.

Part II - Challenge hunting

Part two gives an overview of the vulnerabilities found in the OWASP Juice Shop including hints how to find and exploit them in the application.

Part III - Getting involved

Part three points out various ways to contribute to the OWASP Juice Shop open source project.

Part IV - Advanced user guides

Part four contains a troubleshooting section alongside guides on custom theming, Capture-the-Flags as well as technical integration, monitoring and a trainer’s guidance.

Part V - Advanced developer guides

Part five gives detailed guidance on special "behind the scenes" topics like cheat detection or coding challenge implementation.

About the Author

Björn Kimminich

@bkimminich

Instagram

Björn has over two decades of programming experience with expertise on software sustainability, clean code and test automation as well as application security. He is the project leader of the OWASP Juice Shop and member of the German OWASP Chapter Board.