owasp-juice-shop

Tool to export Juice Shop challenges and hints in data format compatible with CTFd, RootTheBox or FBCTF

Antora/Asciidoc content for Bjoern Kimminich's free eBook "Pwning OWASP Juice Shop"

Demo - how to easily build security testing for Web App, using Zap and Glue

All Labs of the Security for Developers Training

Universal Prompt Security Standard (UPSS): A framework for externalizing, securing, and managing LLM prompts and genAI systems, inspired by and extending OWASP OPSS concepts for any organization or project.

bustme is a directory brute forcing tool that assesses if pages exist according to the returned response body.

owasp juice chop ctf tryhackme walkthrough

A web application security scanner a very big competitor of OWASP ZAP and Burp Suit — intercepting proxy, passive scanner, spider, active scanner, and a native desktop GUI.

Open-source autonomous AI pentester that proves every exploit — 87/113 on OWASP Juice Shop, black-box, on a budget model and a flawless 22 of 22 on Escape's Duck Store API — fully autonomous, black-box, outscoring Cascade and a bare Claude Opus 4.8 on the very same board, all while running on one of the cheapest models on the market.

Bash script to install docker and OWASPs juice-shop vulnerable webapp. Run this and browse to http://localhost:3000

A collection of write-ups for capture the flag challenges and wargames.

A RESTful API brute-forcing tool in Go for ethical hacking practice. **Gobrute** is built for testing login passwords with multithreading, progress tracking, and customizable payloads, ideal for controlled environments like OWASP Juice Shop.

A CI/CD Security Pipeline with OWASP ZAP & GitHub Actions

Projeto de Pentest em aplicação web, OWASP Juice Shop, com identificação de vulnerabilidades e sugestão de correção. como entrega de atividade do programa Desenvolve do Grupo Boticário em parceria com a Alura.

Comprehensive Write-ups for OWASP Juice Shop challenges, organized by OWASP Top 10 vulnerabilities

Cybersecurity portfolio project: OWASP Juice Shop pentest with Critical/High findings, risk ratings, and a consulting-style PDF report.

Hands-on cybersecurity home lab covering vulnerability assessment, OWASP web security, Docker, NGINX hardening, network reconnaissance, remediation, and security verification.

End-to-end web application security assessment of OWASP Juice Shop, including vulnerability identification, manual exploitation and detailed remediation reports.

Internship capstone on OWASP Juice Shop — Web App Vulnerability Assessment & Report

IaC for IAST of OWASP Juice Shop app.