OWASP Juice Shop - Insecure shop simulation
OWASP Juice Shop is arguably the most advanced and sophisticated insecure web application and is offered as a training simulation for professional security researchers and hackers.
It can be used in security training, awareness demos, CTFs and as a guinea pig for security tools! Juice Shop includes vulnerabilities from the entire OWASP Top Ten, as well as many more vulnerabilities found in real-world applications.
Juice Shop is written in Node.js, Express, and Angular. It was the first application written entirely in JavaScript to be included in the OWASP VWA Directory. The application contains a large number of hacking challenges of varying difficulty, where the user is asked to exploit underlying vulnerabilities. The progress of hacking is recorded on a scoreboard. Finding this scoreboard is one of the (easy) challenges. Aside from the hacker and awareness training use case, pentesting proxies or security scanners can use Juice Shop as a "guinea pig" application to test how well their tools handle JavaScript-heavy application front-ends and REST APIs.
The OWASP Juice Shop runs on our Heroku Cloud Platform as a Software as a Service (SaaS) application.
Test your security skills now and check our OWASP Juice Shop for OWASP top 10 vulnerabilities.
If you have any questions, please do not hesitate to contact our CRYPTRON Security Team.
Reference:
https://owasp.org/www-project-juice-shop
https://github.com/juice-shop/juice-shop
https://www.heroku.com