Skip to content
GitBook markdown content for the eBook "Pwning OWASP Juice Shop"
Branch: master
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
appendix
introduction
part1
part2 Fix XSS payload formatting with double-backticks Mar 25, 2019
part3
.appveyor.yml
.gitignore
LICENSE Properly format license note Sep 8, 2017
README.md
SUMMARY.md
book.json
cover.jpg
cover_small.jpg

README.md

Pwning OWASP Juice Shop

Written by Björn Kimminich

Front Cover

This is the official companion guide to the OWASP Juice Shop application. Being a web application with a vast number of intended security vulnerabilities, the OWASP Juice Shop is supposed to be the opposite of a best practice or template application for web developers: It is an awareness, training, demonstration and exercise tool for security risks in modern web applications. The OWASP Juice Shop is an open-source project hosted by the non-profit Open Web Application Security Project (OWASP) and is developed and maintained by volunteers. The content of this book was written for {{book.juiceShopVersion}} of OWASP Juice Shop.

The book is divided into three parts:

Part I - Hacking preparations

Part one helps you to get the application running and to set up optional hacking tools.

Part II - Challenge hunting

Part two gives an overview of the vulnerabilities found in the OWASP Juice Shop including hints how to find and exploit them in the application.

Part III - Getting involved

Part three shows up various ways to contribute to the OWASP Juice Shop open source project.


Please be aware that this book is not supposed to be a comprehensive introduction to Web Application Security in general. For every category of vulnerabilities present in the OWASP Juice Shop you will find a brief explanation - typically by quoting and referencing to existing content on the given topic.


Download a .pdf, .epub, or .mobi file from:

Read the book online at:

Contribute content, suggestions, and fixes on GitHub:

Official OWASP Juice Shop project homepage:


CC BY-NC-ND 4.0

This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.

You can’t perform that action at this time.