{% if book.ctf %}

Pwning OWASP Juice Shop (CTF Edition)

{% else %}

Pwning OWASP Juice Shop

{% endif %}

Written by Björn Kimminich

{% if book.ctf %}

{% else %}

{% endif %}

This is the official companion guide to the OWASP Juice Shop application. Being a web application with a vast number of intended security vulnerabilities, the OWASP Juice Shop is supposed to be the opposite of a best practice or template application for web developers: It is an awareness, training, demonstration and exercise tool for security risks in modern web applications. The OWASP Juice Shop is an open-source project hosted by the non-profit Open Web Application Security Project® (OWASP) and is developed and maintained by volunteers. The content of this book was written for {{book.juiceShopVersion}} of OWASP Juice Shop.

The book is divided into three parts:

Part I - Hacking preparations

Part one helps you to get the application running and to set up optional hacking tools.

Part II - Challenge hunting

Part two gives an overview of the vulnerabilities found in the OWASP Juice Shop including hints how to find and exploit them in the application.

Part III - Getting involved

{% if book.ctf %}

Part three points you to the social media channels and tells you about donation options of the OWASP Juice Shop open source project.

{% else %}

Part three shows up various ways to contribute to the OWASP Juice Shop open source project.

Please be aware that this book is not supposed to be a comprehensive introduction to Web Application Security in general. For every category of vulnerabilities present in the OWASP Juice Shop you will find a brief explanation - typically by quoting and referencing to existing content on the given topic.

Download a .pdf, .epub, or .mobi file from:

• https://leanpub.com/juice-shop (official release)

Read the book online at:

• https://pwning.owasp-juice.shop

Contribute content, suggestions, and fixes on GitHub:

• https://github.com/juice-shop/pwning-juice-shop

Official OWASP Juice Shop project homepage:

• https://owasp-juice.shop

{% endif %}

Open Worldwide Application Security Project and OWASP are registered trademarks of the OWASP Foundation, Inc. This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.