1<!DOCTYPE html><html data-dpl-id="dpl_4q6V3zUUMijAZo3wPsRhkLBFUenC" lang="en" translate="no" class="barlow_14edd22e-module__NqFZMW__variable poppins_3b1d1576-module__iqw2EW__variable"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="/_next/static/immutable/chunks/3uiqru8_otplb.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/immutable/chunks/03uk_u6y2squ_.css" data-precedence="next"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/immutable/chunks/00hpyem0iqafn.js"/>
1<script src="/_next/static/immutable/chunks/0vn_c-qtmgve7.js" async=""></script>
1<script src="/_next/static/immutable/chunks/0ch47p9ytldxi.js" async=""></script>
1<script src="/_next/static/immutable/chunks/10lh7n9pq1ovy.js" async=""></script>
1<script src="/_next/static/immutable/chunks/turbopack-1quw5a_frfyn5.js" async=""></script>
1<script src="/_next/static/immutable/chunks/33rna6oi0iw3t.js" async=""></script>
1<script src="/_next/static/immutable/chunks/107_ofu64faf1.js" async=""></script>
1<script src="/_next/static/immutable/chunks/1um69cr59sqou.js" async=""></script>
1<script src="/_next/static/immutable/chunks/3ds-k-orpkhzk.js" async=""></script>
1<script src="/_next/static/immutable/chunks/0hu0acat6exoy.js" async=""></script>
1<script src="/_next/static/immutable/chunks/0eh6zurchqbry.js" async=""></script>
1<script src="/_next/static/immutable/chunks/2-cemjxercs4q.js" async=""></script>
1<script src="/_next/static/immutable/chunks/3t-ncrc7b9zvt.js" async=""></script>
1<script src="/_next/static/immutable/chunks/356dk76xpnym8.js" async=""></script>
1<script src="/_next/static/immutable/chunks/0uw3g3bjzpqkx.js" async=""></script>
1<script src="/_next/static/immutable/chunks/41gltk3islpm9.js" async=""></script>
1<script src="/_next/static/immutable/chunks/2jb98t1ehc3i-.js" async=""></script>
1<meta name="next-size-adjust" content=""/><title>OWASP Juice Shop - Insecure Web Application for Security Training | OWASP Foundation</title><meta name="description" content="The most modern and sophisticated insecure web application for security training, awareness demos, CTFs and security tool testing. Contains OWASP Top 10 vulnerabilities."/><meta name="application-name" content="OWASP Foundation"/><meta name="author" content="OWASP Foundation"/><meta name="keywords" content="OWASP Juice Shop,OWASP project,open source security,OWASP,OWASP Foundation,application security,software security"/><meta name="publisher" content="OWASP Foundation"/><meta name="google" content="notranslate"/><link rel="canonical" href="https://owasp.org/projects/juice-shop"/><meta property="og:title" content="OWASP Juice Shop - Insecure Web Application for Security Training | OWASP Foundation"/><meta property="og:description" content="The most modern and sophisticated insecure web application for security training, awareness demos, CTFs and security tool testing. C
1ontains OWASP Top 10 vulnerabilities."/><meta property="og:url" content="https://owasp.org/projects/juice-shop"/><meta property="og:site_name" content="OWASP Foundation"/><meta property="og:locale" content="en_US"/><meta property="og:image" content="https://owasp.org/images/og/owasp-default.png"/><meta property="og:image:width" content="1200"/><meta property="og:image:height" content="630"/><meta property="og:image:alt" content="OWASP Foundation â the open source foundation for application security"/><meta property="og:type" content="website"/><meta name="twitter:card" content="summary_large_image"/><meta name="twitter:site" content="@owasp"/><meta name="twitter:creator" content="@owasp"/><meta name="twitter:title" content="OWASP Juice Shop - Insecure Web Application for Security Training | OWASP Foundation"/><meta name="twitter:description" content="The most modern and sophisticated insecure web application for security training, awareness demos, CTFs and security tool testing. Contains OWASP Top 10 vulnerabilities."/><meta name="twitter:image" content="https://owasp.org/images/og/owasp-default.png"/><meta name="twitter:image:alt" content="OWASP Foundation â the open source foundation for application security"/><meta name="twitter:image:width" content="1200"/><meta name="twitter:image:height" content="630"/><link rel="icon" href="/images/logos/favicon-owasp.svg"/><link rel="apple-touch-icon" href="/images/logos/favicon-owasp.svg"/>
1<script src="/_next/static/immutable/chunks/0c0hxoamwjsbw.js" noModule=""></script>
1</head><body translate="no" class="poppins_3b1d1576-module__iqw2EW__className"><div hidden=""><!--$--><!--/$--></div><div class="min-h-screen bg-gray-50"><header class="backdrop-blur-[5px] backdrop-filter bg-[#101820]/95 sticky top-0 w-full z-50 border-b border-white/10 shadow-sm transition-transform duration-300 ease-out translate-y-0"><div class="flex flex-row items-center h-20"><div class="box-border flex flex-row h-20 items-center justify-between px-4 sm:px-6 md:px-8 lg:px-12 xl:px-16 2xl:px-[120px] py-0 relative w-full max-w-[1440px] mx-auto"><a class="h-10 relative shrink-0 w-[132.894px] hover:opacity-90 transition-opacity" aria-label="OWASP home" href="/"><svg class="owasp-logo block h-full w-full" viewBox="0 0 133 40" preserveAspectRatio="none" role="img" aria-labelledby="owasp-logo-header" xmlns="http://www.w3.org/2000/svg"><title id="owasp-logo-header">OWASP Foundation</title><g clip-path="url(#clip0_67_1231)"><path d="M16.7029 0.219813C14.7688 0.571462 13.0106 1.15754 11.1791 2.05132C5.69925 4.73263 1.86042 9.5971 0.409874 15.7363C0.146138 16.8498 0.0875295 17.5385 0.0875295 19.8535C0.0728775 22.2564 0.116834 22.8425 0.409874 24.1759C1.23039 27.8535 2.88606 30.9451 5.47947 33.6704C8.48313 36.8059 12.2194 38.8425 16.4831 39.6484C18.4319 40.0293 21.8897 39.9854 23.8384 39.5751C29.2157 38.4469 33.7139 35.4286 36.6883 30.9451C38.8421 27.7216 39.8091 24.674 39.9557 20.6594C40.0729 17.2015 39.5161 14.4616 38.1095 11.5019C35.2231 5.43593 29.8604 1.37732 23.1645 0.219813C21.6406 -0.058575 18.1974 -0.043923 16.7029 0.219813ZM22.7835 3.44326C29.0692 4.4689 34.3146 9.12824 36.1022 15.2528C38.3732 23.1356 34.6956 31.4433 27.3403 35.0183C23.6626 36.8059 19.5601 37.1868 15.5308 36.1173C9.7139 34.5495 5.11317 29.7876 3.64797 23.8242C3.26702 22.2271 3.13515 19.4286 3.36958 17.6997C4.10218 12.2491 7.56006 7.4286 12.5271 4.93776C13.8018 4.30773 16.0729 3.57512 17.3183 3.3993C18.7835 3.17952 21.3476 3.20882 22.7835 3.44326Z" fill="var(--fill-0, white)"></path><path id="wasp-wings" d="M27.1058 7.7949C27.1058 7.88282 27.2524 8.26377 27.4135 8.61542C27.6919 9.17219 27.7066 9.33337 27.5601 9.83153C27.3989 10.3883 27.3696 10.403 27.0619 10.1832C26.5051 9.78758 26.0802 9.90479 25.3183 10.7107C24.615 11.4286 24.5857 11.4726 24.6443 12.2052L24.6883 12.9671H23.941C23.2524 12.9817 23.1791 12.9524 22.8568 12.4542C22.5637 12.0147 22.5198 11.7803 22.5491 10.8718C22.5784 9.84619 22.4026 9.43593 22.2121 10.1539C21.963 11.1649 21.9483 12.1172 22.1828 12.5715C22.3146 12.8352 22.3586 13.0403 22.2853 13.0403C21.9483 13.0403 21.5381 12.4396 21.245 11.5312C20.9373 10.5641 20.6443 10.2418 20.6736 10.8718C20.6736 11.0623 20.7908 11.6484 20.9227 12.1759C21.2304 13.348 21.1132 13.3627 20.0582 12.2638C19.2524 11.4286 18.9593 11.4286 19.5308 12.2638C20.1315 13.1575 20.571 13.5531 21.3036 13.8315C22.3879 14.2418 22.0949 14.3297 20.5857 14.0513C16.1315 13.1868 14.1388 12.9817 10.0069 12.9817C6.53442 12.9671 5.99229 12.9964 5.78716 13.2015C5.56738 13.4213 5.59669 13.4799 6.16812 13.9634C6.84211 14.5495 8.19009 15.3846 9.64064 16.1026C10.8128 16.6887 12.7762 17.1575 14.1388 17.1722C15.0912 17.1868 15.2963 17.1282 15.941 16.7326C16.8934 16.1466 17.4355 16.0147 19.5015 15.8242C21.8751 15.6191 21.9044 15.6191 22.0949 16.044C22.2707 16.4103 22.256 16.4249 21.7725 16.337C21.4209 16.2638 21.0692 16.3224 20.5857 16.5422C19.0326 17.2308 16.3952 19.7803 14.93 22.022C13.9923 23.4286 11.7505 27.7803 11.8824 27.9121C12.0289 28.0586 16.3806 25.7876 17.8897 24.7766C18.9593 24.0733 19.8971 23.2674 21.0253 22.0953C22.8421 20.2345 23.4868 19.1942 23.4721 18.2271C23.4721 17.6118 23.4721 17.6118 23.8238 17.7583C24.0143 17.8462 24.1754 17.9927 24.1754 18.0806C24.1754 18.1685 24.0729 19.2674 23.941 20.5129C23.7359 22.6374 23.6919 22.8425 23.2231 23.6191C22.5784 24.718 22.4905 25.4066 22.7835 27.1795C22.974 28.3663 23.1645 28.9524 23.7945 30.2564C24.615 31.9268 25.8165 33.7729 26.2707 34.0513C26.637 34.2857 26.7689 33.9927 26.9007 32.674C27.1645 29.8755 26.7395 24.6447 25.8751 19.7803C25.6846 18.696 25.5381 17.7876 25.5674 17.7583C25.582 17.7436 25.7872 18.0953 26.0216 18.5641C26.3146 19.1356 26.7102 19.6191 27.2524 20.0586C28.2487 20.8645 28.4831 20.5861 27.5161 19.707C26.4319 18.7253 26.4905 18.6081 27.9264 18.9451C29.7286 19.37 29.8458 19.0183 28.0875 18.4909C27.4868 18.3151 27.1352 18.1099 26.93 17.8315C26.593 17.3773 26.6077 17.3627 27.2963 17.6557C27.7359 17.8315 28.0143 17.8462 28.9373 17.7143C29.5381 17.6264 30.0363 17.4945 30.0363 17.4213C30.0363 17.348 29.5381 17.2894 28.9373 17.2894C28.0436 17.2894 27.7359 17.2308 27.3403 16.9671C26.8714 16.6594 26.8421 16.5861 26.8421 15.8828L26.8568 15.1209L27.3403 15.1942C28.1022 15.3114 28.5564 15.1356 29.245 14.403C29.9483 13.6704 30.0509 13.2015 29.6113 12.7619C29.333 12.4835 29.333 12.4689 29.7725 12.3224C30.4172 12.0879 30.6956 12.1172 31.3842 12.4689C31.7505 12.6594 32.0289 12.718 32.1168 12.6301C32.278 12.4689 30.8861 11.7216 30.4465 11.7216C30.3 11.7216 29.9337 11.8242 29.6113 11.9561L29.0253 12.1905L27.604 10.7693L27.8678 10.1832C28.2047 9.40663 28.2047 9.27476 27.7505 8.38099C27.3989 7.66304 27.1058 7.3993 27.1058 7.7949Z" fill="var(--fill-0, white)"></path><path d="M47.8384 10.7693C46.4758 11.0183 45.7579 11.326 45.0985 11.9707C44.1168 12.9378 44.0875 13.1575 44.1315 19.6484C44.1754 26.022 44.1461 25.8169 45.1425 26.7839C46.1535 27.7656 48.3806 28.2198 51.5601 28.0879C54.9593 27.9414 56.278 27.414 57.0692 25.8608L57.5088 24.9964V13.6997L57.0985 12.8792C56.4685 11.5898 55.4282 11.0037 53.2597 10.7107C51.7798 10.5055 49.1132 10.5348 47.8384 10.7693ZM53.8311 12.6887C54.2267 12.8499 54.6809 13.1575 54.8568 13.3773C55.1498 13.7876 55.1645 13.9341 55.1645 19.3407C55.1645 24.7473 55.1498 24.8938 54.8568 25.3041C54.3879 25.9194 53.3623 26.2418 51.5014 26.3297C48.7322 26.4616 47.0619 26.0367 46.5637 25.0403C46.3293 24.6008 46.3 24 46.3 19.37C46.3 13.729 46.3293 13.4945 47.1351 12.9671C48.1754 12.2784 52.2927 12.1173 53.8311 12.6887Z" fill="var(--fill-0, white)"></path><path d="M87.8384 10.7693C86.4758 11.0183 85.7579 11.326 85.0839 11.9854C84.1168 12.9231 84.1022 13.0843 84.1022 20.9817V27.9854H86.3V21.685H95.2377V27.9854H97.4502L97.4062 20.7619C97.3623 14.0953 97.3476 13.5092 97.0839 12.9231C96.7469 12.1466 95.8531 11.3553 94.9593 11.077C93.3623 10.5495 89.8604 10.3883 87.8384 10.7693ZM93.5088 12.6008C94.2707 12.8205 94.9154 13.4066 95.0912 14.0367C95.1645 14.3297 95.2377 15.7363 95.2377 17.1429V19.707H86.2853L86.3293 16.7766C86.3732 14.2418 86.4025 13.7876 86.637 13.4506C86.9593 12.9964 87.6919 12.6154 88.6297 12.4542C89.4941 12.2931 92.8055 12.3956 93.5088 12.6008Z" fill="var(--fill-0, white)"></path><path d="M104.688 10.696C102.622 11.0183 101.523 11.6337 100.923 12.7912C100.674 13.2748 100.6 13.7583 100.542 14.989C100.454 17.0403 100.644 17.729 101.523 18.6081C102.373 19.4579 102.989 19.6484 106.666 20.2198C108.234 20.4689 109.787 20.7326 110.095 20.8205C111.296 21.1429 111.794 22.1685 111.604 23.9561C111.501 24.9231 111.179 25.5678 110.652 25.8462C109.245 26.5641 105.113 26.5641 103.707 25.8462C103.003 25.4799 102.813 25.011 102.725 23.4579L102.637 22.0513H100.586L100.542 23.2088C100.41 26.9158 102.051 28.1319 107.179 28.1319C110.886 28.1319 112.586 27.5165 113.45 25.8608C113.685 25.4066 113.758 24.9231 113.816 23.663C113.89 21.7143 113.729 20.9964 113.011 20.2052C112.131 19.2235 111.619 19.0623 107.56 18.3737C102.769 17.5825 102.666 17.5092 102.74 15.2088C102.783 13.8022 103.003 13.348 103.853 12.8499C104.571 12.4249 106.798 12.2198 108.556 12.4249C110.871 12.674 111.487 13.1722 111.619 14.9304L111.692 15.9707H113.89L113.816 14.7546C113.611 11.663 112.234 10.74 107.619 10.6227C106.49 10.5934 105.172 10.6227 104.688 10.696Z" fill="var(--fill-0, white)"></path><path d="M60.659 17.5825C60.659 21.9194 60.7176 24.718 60.8201 25.1868C61.245 27.1649 62.9886 28.1319 66.1388 28.1319C67.9996 28.1319 69.7579 27.5019 70.4319 26.6081L70.6956 26.2711L71.3989 26.9011C72.4392 27.8389 73.245 28.0586 75.5308 28.0586C78.4026 28.0586 79.7505 27.4726 80.4538 25.9194L80.8055 25.1282V10.7693L78.6956 10.6814L78.6516 17.685C78.6077 24.381 78.593 24.7033 78.3146 25.1868C77.8165 26.0367 77.0985 26.3004 75.311 26.3004C73.3916 26.3004 72.5857 25.9927 72.1461 25.1136C71.8824 24.5715 71.8678 24.1173 71.8238 17.6118L71.7798 10.6814L69.6699 10.7693L69.5967 17.8315C69.5234 24.674 69.5088 24.8938 69.2157 25.3041C68.6736 26.0513 67.941 26.3004 66.3 26.3004C64.1022 26.2857 63.3549 25.9194 63.0179 24.6887C62.9154 24.3077 62.8568 21.7729 62.8568 17.392V10.696H60.659V17.5825Z" fill="var(--fill-0, white)"></path><path d="M116.996 10.8718C116.952 10.9744 116.937 14.8572 116.952 19.4872L116.996 27.9
1121H119.135L119.194 23.077L123.077 23.0037C127.414 22.9011 127.824 22.8279 128.923 21.8755C130.11 20.8645 130.183 20.5861 130.183 16.9231V13.6997L129.743 12.9085C129.26 12.0147 128.468 11.4286 127.252 11.033C126.241 10.7107 117.113 10.5495 116.996 10.8718ZM126.74 12.9231C127.223 13.1722 127.487 13.4359 127.736 13.9194C128.029 14.5055 128.058 14.7693 128.058 16.9378C128.058 19.1063 128.029 19.3407 127.721 19.9268C127.106 21.0843 126.784 21.1722 122.681 21.2162L119.12 21.2601V12.6008H122.608C125.934 12.6008 126.124 12.6154 126.74 12.9231Z" fill="var(--fill-0, white)"></path><path d="M128.864 28.2638C127.853 28.8792 127.472 29.5971 127.472 30.8425C127.472 31.7949 127.648 32.3224 128.175 32.8645C128.762 33.4945 129.274 33.6997 130.183 33.6997C131.091 33.6997 131.604 33.4945 132.19 32.8645C132.718 32.3224 132.893 31.7949 132.893 30.8425C132.893 30.403 132.82 29.8755 132.732 29.6411C132.542 29.1429 131.926 28.4689 131.399 28.1905C130.813 27.8828 129.406 27.9268 128.864 28.2638ZM131.516 29.0257C132.073 29.5385 132.307 30.0806 132.307 30.8425C132.307 31.6484 132.044 32.2052 131.428 32.7326C130.769 33.2748 129.597 33.2748 128.937 32.7326C128.322 32.2052 128.058 31.6484 128.058 30.8425C128.058 30.0367 128.322 29.4799 128.967 28.9378C129.392 28.5861 129.523 28.5422 130.285 28.6008C130.93 28.6447 131.223 28.7473 131.516 29.0257Z" fill="var(--fill-0, white)"></path><path d="M129.084 30.8425C129.084 32.4249 129.099 32.5275 129.377 32.5275C129.626 32.5275 129.67 32.4249 129.67 31.8535C129.67 31.2235 129.699 31.1795 130.007 31.2674C130.183 31.3114 130.373 31.3553 130.432 31.3553C130.49 31.3553 130.593 31.6191 130.637 31.9414C130.725 32.4396 130.783 32.5275 131.091 32.5275C131.428 32.5275 131.443 32.4982 131.34 31.8242C131.296 31.4433 131.179 31.0623 131.106 30.9597C131.033 30.8572 131.033 30.7546 131.135 30.696C131.208 30.652 131.282 30.3883 131.282 30.1246C131.282 29.4213 130.915 29.1575 129.919 29.1575H129.084V30.8425ZM130.227 29.8315C130.842 30.0074 130.505 30.6081 129.787 30.6227C129.714 30.6227 129.67 30.4176 129.67 30.1832C129.67 29.7143 129.699 29.6997 130.227 29.8315Z" fill="var(--fill-0, white)"></path></g><defs><clipPath id="clip0_67_1231"><rect width="132.894" height="40" fill="white"></rect></clipPath></defs></svg></a><div class="absolute left-1/2 top-1/2 hidden w-full max-w-[calc(100%-640px)] -translate-x-1/2 -translate-y-1/2 flex-row items-center justify-center xl:flex " aria-hidden="false"><nav class="flex shrink-0 flex-row items-center bg-white/5 rounded-lg p-1 backdrop-blur-sm border border-white/10"><a class=" 2 relative flex flex-row items-center justify-center px-3 lg:px-4 py-2 h-10 3 rounded-md transition-all duration-300 group 4 text-white/80 hover:text-white hover:bg-white/10 5 " href="/"><span class="font-['Poppins'] text-sm font-medium relative flex items-center gap-1 whitespace-nowrap">Home</span></a><a class=" 6 relative flex flex-row items-center justify-center px-3 lg:px-4 py-2 h-10 7 rounded-md transition-all duration-300 group 8 bg-[#003594] text-white shadow-lg shadow-[#003594]/20 9 " href="/projects"><span class="font-['Poppins'] text-sm font-medium relative flex items-center gap-1 whitespace-nowrap">Projects<svg width="12" height="12" viewBox="0 0 24 24" fill="none" class="transition-transform duration-200 "><path d="M6 9l6 6 6-6" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"></path></svg><div class="absolute -bottom-1 left-0 right-0 h-0.5 bg-[#00A7E1] rounded-full"></div></span></a><a class=" 10 relative flex flex-row items-center justify-center px-3 lg:px-4 py-2 h-10 11 rounded-md transition-all duration-300 group 12 text-white/80 hover:text-white hover:bg-white/10 13 " href="/chapters"><span class="font-['Poppins'] text-sm font-medium relative flex items-center gap-1 whitespace-nowrap">Chapters<svg width="12" height="12" viewBox="0 0 24 24" fill="none" class="transition-transform duration-200 "><path d="M6 9l6 6 6-6" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"></path></svg></span></a><a class=" 14 relative flex flex-row items-center justify-center px-3 lg:px-4 py-2 h-10 15 rounded-md transition-all duration-300 group 16 text-white/80 hover:text-white hover:bg-white/10 17 " href="/events"><span class="font-['
17Poppins'] text-sm font-medium relative flex items-center gap-1 whitespace-nowrap">Events<svg width="12" height="12" viewBox="0 0 24 24" fill="none" class="transition-transform duration-200 "><path d="M6 9l6 6 6-6" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"></path></svg></span></a><a class=" 18 relative flex flex-row items-center justify-center px-3 lg:px-4 py-2 h-10 19 rounded-md transition-all duration-300 group 20 text-white/80 hover:text-white hover:bg-white/10 21 " href="/meetings"><span class="font-['Poppins'] text-sm font-medium relative flex items-center gap-1 whitespace-nowrap">Meetings<svg width="12" height="12" viewBox="0 0 24 24" fill="none" class="transition-transform duration-200 "><path d="M6 9l6 6 6-6" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"></path></svg></span></a><a class=" 22 relative flex flex-row items-center justify-center px-3 lg:px-4 py-2 h-10 23 rounded-md transition-all duration-300 group 24 text-white/80 hover:text-white hover:bg-white/10 25 " href="/news"><span class="font-['Poppins'] text-sm font-medium relative flex items-center gap-1 whitespace-nowrap">News<svg width="12" height="12" viewBox="0 0 24 24" fill="none" class="transition-transform duration-200 "><path d="M6 9l6 6 6-6" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"></path></svg></span></a><a class=" 26 relative flex flex-row items-center justify-center px-3 lg:px-4 py-2 h-10 27 rounded-md transition-all duration-300 group 28 text-white/80 hover:text-white hover:bg-white/10 29 " href="/about"><span class="font-['Poppins'] text-sm font-medium relative flex items-center gap-1 whitespace-nowrap">About<svg width="12" height="12" viewBox="0 0 24 24" fill="none" class="transition-transform duration-200 "><path d="M6 9l6 6 6-6" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"></path></svg></span></a></nav></div><div class="relative box-border flex shrink-0 flex-row items-center justify-start gap-2 lg:gap-3 p-0 xl:ml-6"><div class="hidden md:flex flex-row gap-2 lg:gap-3"><a href="/auth/sign-in"><button class=" 30 border-2 border-[#757575] h-9 md:h-10 px-3 md:px-4 text-white font-['Poppins'] font-semibold text-xs md:text-sm 31 hover:border-[#00A7E1]/60 hover:bg-[#00A7E1]/10 hover:text-[#00A7E1] 32 transition-all duration-300 rounded-lg backdrop-blur-sm 33 relative overflow-hidden group 34 "><span class="relative z-10 whitespace-nowrap">Sign in</span><div class="absolute inset-0 bg-gradient-to-r from-[#00A7E1]/0 via-[#00A7E1]/10 to-[#00A7E1]/0 35 translate-x-[-100%] group-hover:translate-x-[100%] transition-transform duration-1000"></div></button></a><a href="/donate"><button class=" 36 bg-[#ffc107] h-9 md:h-10 px-3 md:px-4 text-[#101820] font-['Poppins'] font-semibold text-xs md:text-sm 37 hover:bg-[#e0a800] hover:shadow-lg hover:shadow-[#ffc107]/30 38 transition-all duration-300 rounded-lg 39 relative overflow-hidden group 40 "><span class="relative z-10 whitespace-nowrap">Donate</span><div class="absolute inset-0 bg-gradient-to-r from-transparent via-white/20 to-transparent 41 translate-x-[-100%] group-hover:translate-x-[100%] transition-transform duration-700"></div></button></a><div class="hidden md:block relative"><div class=" 42 flex items-center justify-center h-9 w-9 md:h-10 md:w-10 rounded-lg transition-all duration-300 43 bg-white/5 hover:bg-white/10 44 "><button class="flex items-center justify-center w-full h-full rounded-lg transition-transform hover:scale-110" aria-label="Open search"><img alt="Search" loading="lazy" width="18" height="18" decoding="async" data-nimg="1" class="opacity-80" style="color:transparent" src="/images/icons/search.svg?dpl=dpl_4q6V3zUUMijAZo3wPsRhkLBFUenC"/></button></div></div></div><button class="xl:hidden flex items-center justify-center h-10 w-10 rounded-lg bg-white/5 hover:bg-white/10 transition-colors" aria-label="Toggle mobile menu"><div class="w-6 h-5 relative flex flex-col justify-between"><div class="w-6 h-0.5 bg-white transition-all duration-300 "></div><div class="w-6 h-0.5 bg-white transition-opacity duration-300 "></div><div class="w-6 h-0.5 bg-white transition-all duration-300 "></div></div></button></div></div></div></header><div class="bg-gradient-to-br from-[#1a237e] via-[#303f9f] to-[#42a5f5] relative overflow-hidden"><div class="max-w-[1440px] mx-auto px-4 sm:px-6 md:px-8 lg:px-12 xl:px-16 2xl:px-[120px] py-12 sm:py-16 lg:py-20"><div class="flex flex-col lg:flex-row gap-8 lg:gap-12 items-start justify-between"><div class="flex-1 flex flex-col gap-6 lg:gap-8"><h1 class="font-['Barlow'] font-bold text-white text-[32px] sm:text-[40px] lg:text-[48px] leading-tight tracking-[-0.96px]">OWASP Juice Shop</h1><div class="font-['
44Poppins'] text-white/90 text-lg leading-relaxed max-w-3xl prose prose-invert max-w-none"><p class="leading-relaxed">Probably the most modern and sophisticated insecure web application for security trainings, awareness demos and CTFs. Also great voluntary guinea pig for your security tools and DevSecOps pipelines!</p></div><div class="grid grid-cols-1 sm:grid-cols-none sm:grid-flow-col sm:auto-cols-fr gap-4 self-start w-full sm:w-auto"><a href="https://github.com/juice-shop/juice-shop" target="_blank" rel="noopener noreferrer" class="flex"><button class="flex w-full items-center justify-center gap-2 h-14 px-6 sm:px-8 box-border border-2 rounded-lg font-['Poppins'] font-semibold text-[15px] sm:text-[16px] leading-snug tracking-[-0.32px] transition-colors bg-white border-white text-[#003594] hover:bg-gray-100"><svg class="w-5 h-5 shrink-0" fill="currentColor" viewBox="0 0 24 24"><path fill-rule="evenodd" d="M12 2C6.477 2 2 6.484 2 12.017c0 4.425 2.865 8.18 6.839 9.504.5.092.682-.217.682-.483 0-.237-.008-.868-.013-1.703-2.782.605-3.369-1.343-3.369-1.343-.454-1.158-1.11-1.466-1.11-1.466-.908-.62.069-.608.069-.608 1.003.07 1.531 1.032 1.531 1.032.892 1.53 2.341 1.088 2.91.832.092-.647.35-1.088.636-1.338-2.22-.253-4.555-1.113-4.555-4.951 0-1.093.39-1.988 1.029-2.688-.103-.253-.446-1.272.098-2.65 0 0 .84-.27 2.75 1.026A9.564 9.564 0 0112 6.844c.85.004 1.705.115 2.504.337 1.909-1.296 2.747-1.027 2.747-1.027.546 1.379.202 2.398.1 2.651.64.7 1.028 1.595 1.028 2.688 0 3.848-2.339 4.695-4.566 4.943.359.309.678.92.678 1.855 0 1.338-.012 2.419-.012 2.747 0 .268.18.58.688.482A10.019 10.019 0 0022 12.017C22 6.484 17.522 2 12 2z" clip-rule="evenodd"></path></svg>View on GitHub</button></a><a href="https://pwning.owasp-juice.shop" target="_blank" rel="noopener noreferrer" class="flex"><button class="flex w-full items-center justify-center gap-2 h-14 px-6 sm:px-8 box-border border-2 rounded-lg font-['Poppins'] font-semibold text-[15px] sm:text-[16px] leading-snug tracking-[-0.32px] transition-colors bg-white/10 border-white text-white hover:bg-white/20 backdrop-blur-sm"><svg class="w-5 h-5 shrink-0" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M12 6.253v13m0-13C10.832 5.477 9.246 5 7.5 5S4.168 5.477 3 6.253v13C4.168 18.477 5.754 18 7.5 18s3.332.477 4.5 1.253m0-13C13.168 5.477 14.754 5 16.5 5c1.747 0 3.332.477 4.5 1.253v13C19.832 18.477 18.247 18 16.5 18c-1.746 0-3.332.477-4.5 1.253"></path></svg>Documentation</button></a><a target="_blank" rel="noopener noreferrer" class="flex" href="https://owasp-juice.shop"><button type="button" class="font-['Poppins'] font-semibold text-center transition-all duration-300 flex items-center justify-center rounded-lg cursor-pointer relative overflow-hidden group min-h-14 px-6 sm:px-8 py-3 text-[15px] sm:text-[16px] leading-snug tracking-[-0.32px] bg-[#003594] text-[#ffffff] shadow-sm hover:shadow-md h-14 w-full "><div class="absolute inset-0 bg-[#004bbb] transform -translate-x-full group-hover:translate-x-0 transition-transform duration-300 ease-out"></div><span class="relative z-10 whitespace-normal">Visit official Website</span></button></a></div></div><div class="w-full lg:w-[28rem] h-48 lg:h-80 relative bg-white/10 backdrop-blur-sm rounded-lg p-4 lg:p-6 flex items-center justify-center overflow-hidden"><div class="w-full h-full bg-no-repeat bg-center bg-contain rounded" style="background-image:url('/media/project-media/projects/57500e0b-c439-4edf-b734-33ddc38c1863/hero/1775811449329-up5wtol0v9s.png?v=2026-02-10T03%3A03%3A21.375%2B00%3A00')"></div></div></div></div></div><div class="max-w-[1440px] mx-auto px-4 sm:px-6 md:px-8 lg:px-12 xl:px-16 2xl:px-[120px] py-12 sm:py-16 lg:py-20"><div class="grid grid-cols-1 gap-8 lg:gap-12 lg:grid-cols-[1fr_minmax(340px,420px)]"><div class="space-y-8"><div class="border-b border-gray-200"><nav class="flex flex-wrap gap-2 lg:gap-8" aria-label="Tabs"><a href="?tab=overview" aria-current="page" class="flex items-center gap-2 py-3 px-4 lg:px-1 border-b-2 font-medium text-sm rounded-t-lg lg:rou
44nded-none transition-colors border-[#003594] text-[#003594] bg-blue-50 lg:bg-transparent"><img alt="" loading="lazy" width="16" height="16" decoding="async" data-nimg="1" class="opacity-100" style="color:transparent" src="/images/icons/book-open.svg?dpl=dpl_4q6V3zUUMijAZo3wPsRhkLBFUenC"/><span class="whitespace-nowrap">Overview</span></a><a href="?tab=additional-tab" class="flex items-center gap-2 py-3 px-4 lg:px-1 border-b-2 font-medium text-sm rounded-t-lg lg:rounded-none transition-colors border-transparent text-gray-500 hover:text-gray-700 hover:border-gray-300 hover:bg-gray-50 lg:hover:bg-transparent"><img alt="" loading="lazy" width="16" height="16" decoding="async" data-nimg="1" class="opacity-60" style="color:transparent" src="/images/icons/book-open.svg?dpl=dpl_4q6V3zUUMijAZo3wPsRhkLBFUenC"/><span class="whitespace-nowrap">Additional tab</span></a></nav></div><section><div class="group flex items-center gap-2 mb-6"><h2 class="font-['Barlow'] font-bold text-[#101820] text-[24px] lg:text-[32px]">About <!-- -->OWASP Juice Shop</h2><a href="?tab=overview" aria-label="Copy link to Overview tab" title="Copy link" class="inline-flex h-7 w-7 shrink-0 items-center justify-center rounded-md text-gray-400 transition hover:bg-gray-100 hover:text-[#003594] focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-[#003594] opacity-0 group-hover:opacity-100 group-focus-within:opacity-100 focus-visible:opacity-100 [@media(hover:none)]:opacity-100"><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="lucide lucide-link2 lucide-link-2 h-4 w-4" aria-hidden="true"><path d="M9 17H7A5 5 0 0 1 7 7h2"></path><path d="M15 7h2a5 5 0 1 1 0 10h-2"></path><line x1="8" x2="16" y1="12" y2="12"></line></svg></a></div><div class="prose prose-lg max-w-none font-['Poppins'] text-[#757575] leading-relaxed"><p class="leading-relaxed">OWASP Juice Shop is probably the most modern and sophisticated insecure web application! It can be used in security trainings, awareness demos, CTFs and as a guinea pig for security tools! Juice Shop encompasses vulnerabilities from the entire <a target="_blank" rel="noopener noreferrer" class="text-[#003594] underline" href="https://juice-shop.github.io/www-project-top-ten">OWASP Top Ten</a> along with many other security flaws found in real-world applications! Juice Shop is written in Node.js, Express and Angular. It was the first application written entirely in JavaScript listed in the <a target="_blank" rel="noopener noreferrer" class="text-[#003594] underline" href="https://vwad.owasp.org/">OWASP VWA Directory</a>. The application contains a vast number of hacking challenges of varying difficulty where the user is supposed to exploit the underlying vulnerabilities. The hacking progress is tracked on a score board. Finding this score board is actually one of the (easy) challenges! Apart from the hacker and awareness training use case, pentesting proxies or security scanners can use Juice Shop as a âguinea pigâ-application to check how well their tools cope with JavaScript-heavy application frontends and REST APIs.</p></div></section></div><div class="space-y-8"><div class="bg-white rounded-lg p-6 shadow-sm"><h3 class="font-['Barlow'] font-bold text-[#101820] text-xl mb-4">Project Resources</h3><ul class="space-y-3"><li><a href="https://pwning.owasp-juice.shop/" target="_blank" rel="noopener noreferrer" class="inline-flex items-center gap-2 text-[#003594] hover:text-[#0056b3] font-medium text-sm"><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="lucide lucide-book-open h-5 w-5 shrink-0 text-[#003594]" aria-hidden="true"><path d="M12 7v14"></path><path d="M3 18a1 1 0 0 1-1-1V4a1 1 0 0 1 1-1h5a4 4 0 0 1 4 4 4 4 0 0 1 4-4h5a1 1 0 0 1 1 1v13a1 1 0 0 1-1 1h-6a3 3 0 0 0-3 3 3 3 0 0 0-3-3z"></path></svg><span class="underline break-words">Documentation</span></a></li><li><a href="https://github.com/juice-shop/juice-shop" target="_blank" rel="noopener noreferrer" class="inline-flex items-center gap-2 text-[#003594] hover:text-[#0056b3] font-medium text-sm"><svg viewBox="0 0 24 24" class="shrink-0 h-5 w-5" fill="currentColor" style="color:#181717" role="img" aria-hidden="true"><path d="M12 .297c-6.63 0-12 5.373-12 12 0 5.303 3.438 9.8 8.205 11.385.6.113.82-.258.82-.577 0-.285-.01-1.04-.015-2.04-3.338.724-4.042-1.61-4.042-1.61C4.422 18.07 3.633 17.7 3.633 17.7c-1.087-.744.084-.729.084-.729 1.205.084 1.838 1.236 1.838 1.236 1.07 1.835 2.809 1.305 3.495.998.108-.776.417-1.305.76-1.605-2.665-.3-5.466-1.332-5.466-5.93 0-1.31.465-2.38 1.235-3.22-.135-.303-.54-1.523.105-3.176 0 0 1.005-.322 3.3 1.23.96-.267 1.98-.399 3-.405 1.02.006 2.04.138 3 .405 2.28-1.552 3.285-1.23 3.285-1.23.645 1.653.24 2.873.12 3.176.765.84 1.23 1.91 1.23 3.22 0 4.61-2.805 5.625-5.475 5.92.42.36.81 1.096.81 2.22 0 1.606-.015 2.896-.015 3.286 0 .315.21.69.825.57C20.565 22.092 24 17.592 24 12.297c0-6.627-5.373-12-12-12"></path></svg><span class="underline break-words">GitHub</span></a></li></ul></div><div class="bg-white rounded-lg p-6 shadow-sm space-y-8"><div><h3 class="font-['Barlow'] font-bold text-[#101820] text-xl mb-4">Project Leaders</h3><div class="flex flex-col gap-4"><div class="border border-gray-200 rounded-lg p-4 min-w-0"><h4 class="text-lg font-semibold text-[#003594] break-words">Björn Kimminich</h4><p class="text-sm mt-3 flex flex-wrap gap-x-4 gap-y-1"><a href="mailto:[email protected]" class="inline-flex items-center gap-1 text-[#003594] hover:text-[#0056b3] underline">Email</a><a href="https://bsky.app/profile/bkimminich.bsky.social" target="_blank" rel="noopener noreferrer" class="inline-flex items-center gap-1 text-[#003594] hover:text-[#0056b3] underline"><svg viewBox="0 0 24 24" class="shrink-0 h-4 w-4" fill="currentColor" style="color:#1185FE" role="img" aria-hidden="true"><path d="M12 10.8c-1.087-2.114-4.046-6.053-6.798-7.995C2.566.944 1.561 1.266.902 1.565.139 1.908
440 3.08 0 3.768c0 .69.378 5.65.624 6.479.815 2.736 3.713 3.66 6.383 3.364.136-.02.275-.039.415-.056-.138.022-.276.04-.415.056-3.912.58-7.387 2.005-2.83 7.078 5.013 5.19 6.87-1.113 7.823-4.308.953 3.195 2.05 9.271 7.733 4.308 4.267-4.308 1.172-6.498-2.74-7.078a8.741 8.741 0 0 1-.415-.056c.14.017.279.036.415.056 2.67.297 5.568-.628 6.383-3.364.246-.828.624-5.79.624-6.478 0-.69-.139-1.861-.902-2.206-.659-.298-1.664-.62-4.3 1.24C16.046 4.748 13.087 8.687 12 10.8Z"></path></svg>Bluesky</a></p></div><div class="border border-gray-200 rounded-lg p-4 min-w-0"><h4 class="text-lg font-semibold text-[#003594] break-words">Jannik Hollenbach</h4><p class="text-gray-600 text-sm mb-2 break-words"> </p><p class="text-sm mt-3 flex flex-wrap gap-x-4 gap-y-1"><a href="mailto:[email protected]" class="inline-flex items-center gap-1 text-[#003594] hover:text-[#0056b3] underline">Email</a><a href="https://bsky.app/profile/jannik-hollenbach.bsky.social" target="_blank" rel="noopener noreferrer" class="inline-flex items-center gap-1 text-[#003594] hover:text-[#0056b3] underline"><svg viewBox="0 0 24 24" class="shrink-0 h-4 w-4" fill="currentColor" style="color:#1185FE" role="img" aria-hidden="true"><path d="M12 10.8c-1.087-2.114-4.046-6.053-6.798-7.995C2.566.944 1.561 1.266.902 1.565.139 1.908 0 3.08 0 3.768c0 .69.378 5.65.624 6.479.815 2.736 3.713 3.66 6.383 3.364.136-.02.275-.039.415-.056-.138.022-.276.04-.415.056-3.912.58-7.387 2.005-2.83 7.078 5.013 5.19 6.87-1.113 7.823-4.308.953 3.195 2.05 9.271 7.733 4.308 4.267-4.308 1.172-6.498-2.74-7.078a8.741 8.741 0 0 1-.415-.056c.14.017.279.036.415.056 2.67.297 5.568-.628 6.383-3.364.246-.828.624-5.79.624-6.478 0-.69-.139-1.861-.902-2.206-.659-.298-1.664-.62-4.3 1.24C16.046 4.748 13.087 8.687 12 10.8Z"></path></svg>Bluesky</a></p></div></div></div></div><div class="bg-white rounded-lg p-6 shadow-sm"><h3 class="font-['Barlow'] font-bold text-[#101820] text-xl mb-4">Project Information</h3><div class="space-y-4"><div class="font-['Poppins'] font-medium text-[#101820] text-sm flex items-center gap-2"><span aria-hidden="true">ð©</span>Flagship Project</div><div><div class="font-['Poppins'] font-medium text-[#101820] text-sm mb-1">Classification</div><div class="font-['Poppins'] text-[#757575] text-sm flex items-center gap-2"><span aria-hidden="true">ð</span>Training</div></div><div><div class="font-['Poppins'] font-medium text-[#101820] text-sm mb-1">Language</div><div class="font-['Poppins'] text-[#757575] text-sm">TypeScript</div></div><div><div class="font-['Poppins'] font-medium text-[#101820] text-sm mb-1">License</div><div class="font-['Poppins'] text-[#757575] text-sm">MIT</div></div><div><div class="font-['Poppins'] font-medium text-[#101820] text-sm mb-1">Latest Version</div><div class="font-['Poppins'] text-[#757575] text-sm">v19.2.1</div></div><div><div class="font-['Poppins'] font-medium text-[#101820] text-sm mb-1">Contributors</div><div class="font-['Poppins'] text-[#757575] text-sm">147</div></div><div><div class="font-['Poppins'] font-medium text-[#101820] text-sm mb-1">GitHub Stars</div><div class="font-['Poppins'] text-[#757575] text-sm">12893</div></div></div></div></div></div></div><div class="box-border content-stretch flex flex-col items-start justify-start overflow-clip p-0 relative shrink-0 w-full"><div class="bg-[#151515] box-border content-stretch flex flex-col gap-6 lg:gap-8 xl:gap-10 items-center justify-center px-4 sm:px-6 md:px-8 lg:px-12 xl:px-16 2xl:px-[120px] py-8 sm:py-10 lg:py-12 xl:py-16 relative shrink-0 w-full"><div class="font-['Barlow'] font-medium text-[24px] sm:text-[28px] lg:text-[32px] text-[rgba(255,255,255,0.5)] text-center tracking-[-0.48px] lg:tracking-[-0.64px] leading-[30px] sm:leading-[35px] lg:leading-[40px]">Corporate Supporters</div><div class="box-border content-stretch flex flex-col gap-6 lg:gap-10 items-center justify-center p-0 relative shrink-0 w-full max-w-[1440px]"><div class="flex flex-col sm:flex-row gap-3 sm:gap-4 items-center justify-center"><a href="/supporters"><button type="button" class="font-['
44Poppins'] font-semibold text-center transition-all duration-300 flex items-center justify-center rounded-lg cursor-pointer relative overflow-hidden group min-h-12 px-5 sm:px-6 py-2.5 text-[14px] leading-snug tracking-[-0.28px] bg-[#ffc107] text-[#101820] shadow-sm hover:shadow-md "><div class="absolute inset-0 bg-[#e0a800] transform -translate-x-full group-hover:translate-x-0 transition-transform duration-300 ease-out"></div><span class="relative z-10 whitespace-normal">Become a Corporate Supporter</span></button></a><a href="/supporters/bios"><button type="button" class="font-['Poppins'] font-semibold text-center transition-all duration-300 flex items-center justify-center rounded-lg cursor-pointer relative overflow-hidden group min-h-12 px-5 sm:px-6 py-2.5 text-[14px] leading-snug tracking-[-0.28px] bg-[#ffc107] text-[#101820] shadow-sm hover:shadow-md "><div class="absolute inset-0 bg-[#e0a800] transform -translate-x-full group-hover:translate-x-0 transition-transform duration-300 ease-out"></div><span class="relative z-10 whitespace-normal">Meet our Corporate Supporters</span></button></a></div></div></div><div class="bg-[#101820] box-border content-stretch flex flex-col gap-8 lg:gap-12 xl:gap-16 items-center justify-center px-4 sm:px-6 md:px-8 lg:px-12 xl:px-16 2xl:px-[120px] py-8 sm:py-10 lg:py-12 xl:py-16 relative shrink-0 w-full"><div class="flex flex-col lg:flex-row gap-8 lg:gap-12 items-start justify-start w-full max-w-[1440px]"><div class="bg-[#151515] flex flex-col items-start justify-between p-6 sm:p-8 w-full lg:w-[480px] min-h-[200px] lg:min-h-[300px]"><div class="h-12 sm:h-14 lg:h-16 w-[160px] sm:w-[186px] lg:w-[213px] mb-4 lg:mb-0"><img alt="OWASP Logo" loading="lazy" width="213" height="64" decoding="async" data-nimg="1" class="block max-w-none size-full" style="color:transparent" src="/images/logos/owasp-logo-footer.svg?dpl=dpl_4q6V3zUUMijAZo3wPsRhkLBFUenC"/></div><div class="font-['Poppins'] text-[#ffffff] text-[13px] sm:text-[14px] leading-[18px] sm:leading-[20px]">OWASP is a nonprofit foundation improving software security through open-source projects, global communities, and education. All resources are free and open to everyone.</div></div><div class="flex flex-col gap-8 w-full lg:flex-1"><div class="grid grid-cols-1 sm:grid-cols-3 gap-8 sm:gap-6 w-full"><div class="flex flex-col gap-4"><div class="font-['Poppins'] text-[14px] sm:text-[16px] text-[rgba(244,244,244,0.5)] tracking-[-0.28px] sm:tracking-[-0.32px] leading-[20px] sm:leading-[24px]">Quick Links</div><div class="flex flex-col gap-3"><a class="font-['Barlow'] font-medium text-[#ffffff] text-[16px] sm:text-[18px] lg:text-[20px] tracking-[-0.32px] sm:tracking-[-0.36px] lg:tracking-[-0.4px] leading-[22px] sm:leading-[24px] lg:leading-[26px] hover:text-[#ffb81b] transition-colors" href="/awards">Awards</a><a class="font-['Barlow'] font-medium text-[#ffffff] text-[16px] sm:text-[18px] lg:text-[20px] tracking-[-0.32px] sm:tracking-[-0.36px] lg:tracking-[-0.4px] leading-[22px] sm:leading-[24px] lg:leading-[26px] hover:text-[#ffb81b] transition-colors" href="/chapters">Chapters</a><a class="font-['Barlow'] font-medium text-[#ffffff] text-[16px] sm:text-[18px] lg:text-[20px] tracking-[-0.32px] sm:tracking-[-0.36px] lg:tracking-[-0.4px] leading-[22px] sm:leading-[24px] lg:leading-[26px] hover:text-[#ffb81b] transition-colors" href="/community">Community</a><a class="font-['Barlow'] font-medium text-[#ffffff] text-[16px] sm:text-[18px] lg:text-[20px] tracking-[-0.32px] sm:tracking-[-0.36px] lg:tracking-[-0.4px] leading-[22px] sm:leading-[24px] lg:leading-[26px] hover:text-[#ffb81b] transition-colors" href="/contact">Contact</a><a class="font-['Barlow'] font-medium text-[#ffffff] text-[16px] sm:text-[18px] lg:text-[20px] tracking-[-0.32px] sm:tracking-[-0.36px] lg:tracking-[-0.4px] leading-[22px] sm:leading-[24px] lg:leading-[26px] hover:text-[#ffb81b] transition-colors" href="/supporters">Corporate Supporters</a><a class="font-['Barlow'] font-medium text-[#ffffff] text-[16px] sm:text-[18px] lg:text-[20px] tracking-[-0.32px] sm:tracking-[-0.36px] lg:tracking-[-0.4px] leading-[22px] sm:leading-[24px] lg:leading-[26px] hover:text-[#ffb81b] transition-colors" href="/events">Events</a><a class="font-['Barlow'] font-medium text-[#ffffff] text-[16px] sm:text-[18px] lg:text-[20px] tracking-[-0.32px] sm:tracking-[-0.36px] lg:tracking-[-0.4px] leading-[22px] sm:leading-[24px] lg:leading-[26px] hover:text-[#ffb81b] transition-colors" href="/news">News</a><a href="https://community.owasp.org" target="_blank" rel="noopener noreferrer" class="font-['Barlow'] font-medium text-[#ffffff] text-[16px] sm:text-[18px] lg:text-[20px] tracking-[-0.32px] sm:tracking-[-0.36px] lg:tracking-[-0.4px] leading-[22px] sm:leading-[24px] lg:leading-[26px] hover:text-[#ffb81b] transition-colors">OWASP Community</a><a class="font-['Barlow'] font-medium text-[#ffffff] text-[16px] sm:text-[18px] lg:text-[20px] tracking-[-0.32px] sm:tracking-[-0.36px] lg:tracking-[-0.4px] leading-[22px] sm:leading-[24px] lg:leading-[26px] hover:text-[#ffb81b] transition-colors" href="/projects">Projects</a><a class="font-['Barlow'] font-medium text-[#ffffff] text-[16px] sm:text-[18px] lg:text-[20px] tracking-[-0.32px] sm:tracking-[-0.36px] lg:tracking-[-0.4px] leading-[22px] sm:leading-[24px] lg:leading-[26px] hover:text-[#ffb81b] transition-colors" href="/security">Security</a><a class="font-['Barlow'] font-medium text-[#ffffff] text-[16px] sm:text-[18px] lg:text-[20px] tracking-[-0.32px] sm:tracking-[-0.36px] lg:tracking-[-0.4px] leading-[22px] sm:leading-[24px] lg:leading-[26px] hover:text-[#ffb81b] transition-colors" href="/staff">Staff</a><a href="https://cybersecgames.com/pages/owasp-merchandise" target="_blank" rel="noopener noreferrer" class="font-['Barlow'] font-medium text-[#ffffff] text-[16px] sm:text-[18px] lg:text-[20px] tracking-[-0.32px] sm:tracking-[-0.36px] lg:tracking-[-0.4px] leading-[22px] sm:leading-[24px] lg:leading-[26px] hover:text-[#ffb81b] transition-colors">OWASP Merch</a></div></div><div class="flex flex-col gap-4"><div class="font-['
44Poppins'] text-[14px] sm:text-[16px] text-[rgba(244,244,244,0.5)] tracking-[-0.28px] sm:tracking-[-0.32px] leading-[20px] sm:leading-[24px]">Legal & Governance</div><div class="flex flex-col gap-3"><a class="font-['Barlow'] font-medium text-[#ffffff] text-[16px] sm:text-[18px] lg:text-[20px] tracking-[-0.32px] sm:tracking-[-0.36px] lg:tracking-[-0.4px] leading-[22px] sm:leading-[24px] lg:leading-[26px] hover:text-[#ffb81b] transition-colors" href="/about">About OWASP</a><a class="font-['Barlow'] font-medium text-[#ffffff] text-[16px] sm:text-[18px] lg:text-[20px] tracking-[-0.32px] sm:tracking-[-0.36px] lg:tracking-[-0.4px] leading-[22px] sm:leading-[24px] lg:leading-[26px] hover:text-[#ffb81b] transition-colors" href="/board">Board</a><a class="font-['Barlow'] font-medium text-[#ffffff] text-[16px] sm:text-[18px] lg:text-[20px] tracking-[-0.32px] sm:tracking-[-0.36px] lg:tracking-[-0.4px] leading-[22px] sm:leading-[24px] lg:leading-[26px] hover:text-[#ffb81b] transition-colors" href="/board-eu">Board EU</a><a class="font-['Barlow'] font-medium text-[#ffffff] text-[16px] sm:text-[18px] lg:text-[20px] tracking-[-0.32px] sm:tracking-[-0.36px] lg:tracking-[-0.4px] leading-[22px] sm:leading-[24px] lg:leading-[26px] hover:text-[#ffb81b] transition-colors" href="/finance">Finance (all documents)</a><a class="font-['Barlow'] font-medium text-[#ffffff] text-[16px] sm:text-[18px] lg:text-[20px] tracking-[-0.32px] sm:tracking-[-0.36px] lg:tracking-[-0.4px] leading-[22px] sm:leading-[24px] lg:leading-[26px] hover:text-[#ffb81b] transition-colors" href="/finance-governance">Finance & Governance</a><a class="font-['Barlow'] font-medium text-[#ffffff] text-[16px] sm:text-[18px] lg:text-[20px] tracking-[-0.32px] sm:tracking-[-0.36px] lg:tracking-[-0.4px] leading-[22px] sm:leading-[24px] lg:leading-[26px] hover:text-[#ffb81b] transition-colors" href="/policy">Policies</a><a href="/docs/OWASP-Impact-Report-2025.pdf" target="_blank" rel="noopener noreferrer" class="font-['Barlow'] font-medium text-[#ffffff] text-[16px] sm:text-[18px] lg:text-[20px] tracking-[-0.32px] sm:tracking-[-0.36px] lg:tracking-[-0.4px] leading-[22px] sm:leading-[24px] lg:leading-[26px] hover:text-[#ffb81b] transition-colors">Impact Report 2025</a><a href="/docs/OWASP-Foundation-Strategic-Plan.pdf" target="_blank" rel="noopener noreferrer" class="font-['Barlow'] font-medium text-[#ffffff] text-[16px] sm:text-[18px] lg:text-[20px] tracking-[-0.32px] sm:tracking-[-0.36px] lg:tracking-[-0.4px] leading-[22px] sm:leading-[24px] lg:leading-[26px] hover:text-[#ffb81b] transition-colors">Strategic Plan 2026</a></div></div><div class="flex flex-col gap-4"><div class="font-['Poppins'] text-[14px] sm:text-[16px] text-[rgba(244,244,244,0.5)] tracking-[-0.28px] sm:tracking-[-0.32px] leading-[20px] sm:leading-[24px]">Socials</div><div class="flex flex-col gap-3"><a href="https://bsky.app/profile/owasp.org" target="_blank" rel="noopener noreferrer" class="font-['Barlow'] font-medium text-[#ffffff] text-[16px] sm:text-[18px] lg:text-[20px] tracking-[-0.32px] sm:tracking-[-0.36px] lg:tracking-[-0.4px] leading-[22px] sm:leading-[24px] lg:leading-[26px] hover:text-[#ffb81b] transition-colors">Bluesky</a><a href="https://github.com/OWASP" target="_blank" rel="noopener noreferrer" class="font-['Barlow'] font-medium text-[#ffffff] text-[16px] sm:text-[18px] lg:text-[20px] tracking-[-0.32px] sm:tracking-[-0.36px] lg:tracking-[-0.4px] leading-[22px] sm:leading-[24px] lg:leading-[26px] hover:text-[#ffb81b] transition-colors">GitHub</a><a href="https://www.linkedin.com/company/owasp/" target="_blank" rel="noopener noreferrer" class="font-['Barlow'] font-medium text-[#ffffff] text-[16px] sm:text-[18px] lg:text-[20px] tracking-[-0.32px] sm:tracking-[-0.36px] lg:tracking-[-0.4px] leading-[22px] sm:leading-[24px] lg:leading-[26px] hover:text-[#ffb81b] transition-colors">LinkedIn</a><a href="https://infosec.exchange/@owasp" target="_blank" rel="noopener noreferrer" class="font-['Barlow'] font-medium text-[#ffffff] text-[16px] sm:text-[18px] lg:text-[20px] tracking-[-0.32px] sm:tracking-[-0.36px] lg:tracking-[-0.4px] leading-[22px] sm:leading-[24px] lg:leading-[26px] hover:text-[#ffb81b] transition-colors">Mastodon</a><a class="font-['Barlow'] font-medium text-[#ffffff] text-[16px] sm:text-[18px] lg:text-[20px] tracking-[-0.32px] sm:tracking-[-0.36px] lg:tracking-[-0.4px] leading-[22px] sm:leading-[24px] lg:leading-[26px] hover:text-[#ffb81b] transition-colors inline-flex items-center gap-2" href="/slack/invite"><img alt="" aria-hidden="true" loading="lazy" width="20" height="20" decoding="async" data-nimg="1" class="shrink-0" style="color:transparent" src="/images/logos/slack-logo.svg?dpl=dpl_4q6V3zUUMijAZo3wPsRhkLBFUenC"/>Slack</a><a href="https://twitter.com/owasp" target="_blank" rel="noopener noreferrer" class="font-['Barlow'] font-medium text-[#ffffff] text-[16px] sm:text-[18px] lg:text-[20px] tracking-[-0.32px] sm:tracking-[-0.36px] lg:tracking-[-0.4px] leading-[22px] sm:leading-[24px] lg:leading-[26px] hover:text-[#ffb81b] transition-colors">X</a><a href="https://www.youtube.com/@OWASPGlobal" target="_blank" rel="noopener noreferrer" class="font-['Barlow'] font-medium text-[#ffffff] text-[16px] sm:text-[18px] lg:text-[20px] tracking-[-0.32px] sm:tracking-[-0.36px] lg:tracking-[-0.4px] leading-[22px] sm:leading-[24px] lg:leading-[26px] hover:text-[#ffb81b] transition-colors">YouTube</a></div></div></div><div class="flex flex-col sm:flex-row gap-3 items-start sm:items-center flex-wrap"><a href="/donate"><button class="bg-[#ffb81b] h-10 sm:h-12 px-4 sm:px-6 font-['
44Poppins'] font-semibold text-[#101820] text-[12px] sm:text-[14px] tracking-[-0.24px] sm:tracking-[-0.28px] leading-[18px] sm:leading-[20px] hover:bg-[#ffc947] transition-colors rounded-sm w-full sm:w-auto">Make a Donation</button></a><a href="https://owasp.glueup.com/organization/6727/memberships"><button class="border-2 border-[#ffffff] h-10 sm:h-12 px-4 sm:px-6 font-['Poppins'] font-semibold text-[#ffffff] text-[12px] sm:text-[14px] tracking-[-0.24px] sm:tracking-[-0.28px] leading-[18px] sm:leading-[20px] hover:bg-white/10 transition-colors rounded-sm w-full sm:w-auto">Join Now</button></a><a href="/slack/invite"><button class="inline-flex items-center justify-center gap-2 bg-[#4A154B] h-10 sm:h-12 px-4 sm:px-6 font-['Poppins'] font-semibold text-[#ffffff] text-[12px] sm:text-[14px] tracking-[-0.24px] sm:tracking-[-0.28px] leading-[18px] sm:leading-[20px] hover:bg-[#611f69] transition-colors rounded-sm w-full sm:w-auto"><img alt="" aria-hidden="true" loading="lazy" width="18" height="18" decoding="async" data-nimg="1" class="shrink-0" style="color:transparent" src="/images/logos/slack-logo.svg?dpl=dpl_4q6V3zUUMijAZo3wPsRhkLBFUenC"/>Join Slack</button></a></div></div></div><div class="flex flex-col lg:flex-row gap-4 lg:gap-16 items-start lg:items-end justify-between w-full max-w-[1440px] text-[#d7d7d7] text-[10px] sm:text-[11px] lg:text-[12px] tracking-[-0.2px] sm:tracking-[-0.22px] lg:tracking-[-0.24px]"><div class="font-['Poppins'] leading-[14px] sm:leading-[15px] lg:leading-[16px] order-2 lg:order-1 flex-1">OWASP, the OWASP logo, and Global AppSec are registered trademarks and AppSec Days, AppSec California, AppSec Cali, SnowFROC, OWASP Boston Application Security Conference, and LASCON are trademarks of the OWASP Foundation, Inc.</div><div class="font-['Poppins'] leading-[14px] sm:leading-[15px] lg:leading-[16px] order-1 lg:order-2 whitespace-nowrap">© 2026, OWASP Foundation Inc. All rights reserved.</div></div></div></div></div><!--$--><!--/$--><section aria-label="Notifications alt+T" tabindex="-1" aria-live="polite" aria-relevant="additions text" aria-atomic="false" data-react-aria-top-layer="true"></section>
44<script src="/_next/static/immutable/chunks/00hpyem0iqafn.js" id="_R_" async=""></script>
44<script>(self.__next_f=self.__next_f||[]).push([0])</script>
44<script>self.__next_f.push([1,"1:\"$Sreact.fragment\"\n2:I[152368,[\"/_next/static/immutable/chunks/33rna6oi0iw3t.js\",\"/_next/static/immutable/chunks/107_ofu64faf1.js\",\"/_next/static/immutable/chunks/1um69cr59sqou.js\",\"/_next/static/immutable/chunks/3ds-k-orpkhzk.js\",\"/_next/static/immutable/chunks/0hu0acat6exoy.js\"],\"LocaleProvider\"]\n3:I[347101,[\"/_next/static/immutable/chunks/33rna6oi0iw3t.js\",\"/_next/static/immutable/chunks/107_ofu64faf1.js\",\"/_next/static/immutable/chunks/1um69cr59sqou.js\",\"/_next/static/immutable/chunks/3ds-k-orpkhzk.js\",\"/_next/static/immutable/chunks/0hu0acat6exoy.js\"],\"ConfirmDialogProvider\"]\n4:I[78095,[\"/_next/static/immutable/chunks/33rna6oi0iw3t.js\",\"/_next/static/immutable/chunks/107_ofu64faf1.js\",\"/_next/static/immutable/chunks/1um69cr59sqou.js\",\"/_next/static/immutable/chunks/3ds-k-orpkhzk.js\",\"/_next/static/immutable/chunks/0hu0acat6exoy.js\"],\"default\"]\n5:I[339756,[\"/_next/static/immutable/chunks/33rna6oi0iw3t.js\",\"/_next/static/immutable/chunks/107_ofu64faf1.js\",\"/_next/static/immutable/chunks/1um69cr59sqou.js\",\"/_next/static/immutable/chunks/3ds-k-orpkhzk.js\",\"/_next/static/immutable/chunks/0hu0acat6exoy.js\"],\"default\"]\n6:I[837457,[\"/_next/static/immutable/chunks/33rna6oi0iw3t.js\",\"/_next/static/immutable/chunks/107_ofu64faf1.js\",\"/_next/static/immutable/chunks/1um69cr59sqou.js\",\"/_next/static/immutable/chunks/3ds-k-orpkhzk.js\",\"/_next/static/immutable/chunks/0hu0acat6exoy.js\"],\"default\"]\n7:I[329306,[\"/_next/static/immutable/chunks/33rna6oi0iw3t.js\",\"/_next/static/immutable/chunks/107_ofu64faf1.js\",\"/_next/static/immutable/chunks/1um69cr59sqou.js\",\"/_next/static/immutable/chunks/3ds-k-orpkhzk.js\",\"/_next/static/immutable/chunks/0hu0acat6exoy.js\",\"/_next/static/immutable/chunks/0eh6zurchqbry.js\",\"/_next/static/immutable/chunks/2-cemjxercs4q.js\"],\"default\"]\n8:I[713354,[\"/_next/static/immutable/chunks/33rna6oi0iw3t.js\",\"/_next/static/immutable/chunks/107_ofu64faf1.js\",\"/_next/static/immutable/chunks/1um69cr59sqou.js\",\"/_next/static/immutable/chunks/3ds-k-orpkhzk.js\",\"/_next/static/immutable/chunks/0hu0acat6exoy.js\"],\"Toaster\"]\na:I[897367,[\"/_next/static/immutable/chunks/33rna6oi0iw3t.js\",\"/_next/static/immutable/chunks/107_ofu64faf1.js\",\"/_next/static/immutable/chunks/1um69cr59sqou.js\",\"/_next/static/immutable/chunks/3ds-k-orpkhzk.js\",\"/_next/static/immutable/chunks/0hu0acat6exoy.js\"],\"OutletBoundary\"]\nb:\"$Sreact.suspense\"\ne:I[897367,[\"/_next/static/immutable/chunks/33rna6oi0iw3t.js\",\"/_next/static/immutable/chunks/107_ofu64faf1.js\",\"/_next/static/immutable/chunks/1um69cr59sqou.js\",\"/_next/static/immutable/chunks/3ds-k-orpkhzk.js\",\"/_next/static/immutable/chunks/0hu0acat6exoy.js\"],\"ViewportBoundary\"]\n10:I[897367,[\"/_next/static/immutable/chunks/33rna6oi0iw3t.js\",\"/_next/static/immutable/chunks/107_ofu64faf1.js\",\"/_next/static/immutable/chunks/1um69cr59sqou.js\",\"/_next/static/immutable/chunks/3ds-k-orpkhzk.js\",\"/_next/static/immutable/chunks/0hu0acat6exoy.js\"],\"MetadataBoundary\"]\n12:I[168027,[\"/_next/static/immutable/chunks/33rna6oi0iw3t.js\",\"/_next/static/immutable/chunks/107_ofu64faf1.js\",\"/_next/static/immutable/chunks/1um69cr59sqou.js\",\"/_next/static/immutable/chunks/3ds-k-orpkhzk.js\",\"/_next/static/immutable/chunks/0hu0acat6exoy.js\"],\"default\",1]\n:HL[\"/_next/static/immutable/chunks/3uiqru8_otplb.css\",\"style\"]\n:HL[\"/_next/static/immutable/chunks/03uk_u6y2squ_.css\",\"style\"]\n:HL[\"/_next/static/immutable/media/8e6fa89aa22d24ec-s.p.1bg6trwi21i5q.woff2\",\"font\",{\"crossOrigin\":\"\",\"type\":\"font/woff2\"}]\n:HL[\"/_next/static/immutable/media/a083361d37caf3d1-s.p.00u70rl5ce7ry.woff2\",\"font\",{\"crossOrigin\":\"\",\"type\":\"font/woff2\"}]\n:HL[\"/_next/static/immutable/media/a218039a3287bcfd-s.p.17e3l4txdrufi.woff2\",\"font\",{\"crossOrigin\":\"\",\"type\":\"font/woff2\"}]\n:HL[\"/_next/static/immutable/media/e2334d715941921e-s.p.2g9xiodaln20i.woff2\",\"font\",{\"crossOrigin\":\"\",\"type\":\"font/woff2\"}]\nd:X\n0:{\"P\":null,\"c\":[\"\",\"projects\",\"juice-shop\"],\"q\":\"\",\"i\":false,\"f\":[[[\"\",{\"children\":[\"projects\",{\"children\":[[\"slug\",\"juice-shop\",\"d\",[]],{\"children\":[\"__PAGE__\",{},\"$undefined\",\"$undefined\",4096]},\"$undefined\",\"$undefined\",4096]},\"$undefined\",\"$undefined\",4096]},\"$undefined\",\"$undefined\",4112],[[\"$\",\"$1\",\"c\",{\"children\":[[[\"$\",\"link\",\"0\",{\"rel\":\"stylesheet\",\"href\":\"/_next/static/immutable/chunks/3uiqru8_otplb.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\",\"nonce\":\"$undefined\"}],[\"$\",\"link\",\"1\",{\"rel\":\"stylesheet\",\"href\":\"/_next/static/immutable/chunks/03uk_u6y2squ_.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\",\"nonce\":\"$undefined\"}],[\"$\",\"script\",\"script-0\",{\"src\":\"/_next/static/immutable/chunks/33rna6oi0iw3t.js\",\"async\":true,\"nonce\":\"$undefined\"}],[\"$\",\"script\",\"script-1\",{\"src\":\"/_next/static/immutable/chunks/107_ofu64faf1.js\",\"async\":true,\"nonce\":\"$undefined\"}
44],[\"$\",\"script\",\"script-2\",{\"src\":\"/_next/static/immutable/chunks/1um69cr59sqou.js\",\"async\":true,\"nonce\":\"$undefined\"}],[\"$\",\"script\",\"script-3\",{\"src\":\"/_next/static/immutable/chunks/3ds-k-orpkhzk.js\",\"async\":true,\"nonce\":\"$undefined\"}],[\"$\",\"script\",\"script-4\",{\"src\":\"/_next/static/immutable/chunks/0hu0acat6exoy.js\",\"async\":true,\"nonce\":\"$undefined\"}]],[\"$\",\"html\",null,{\"lang\":\"en\",\"translate\":\"no\",\"className\":\"barlow_14edd22e-module__NqFZMW__variable poppins_3b1d1576-module__iqw2EW__variable\",\"children\":[\"$\",\"body\",null,{\"translate\":\"no\",\"className\":\"poppins_3b1d1576-module__iqw2EW__className\",\"children\":[\"$\",\"$L2\",null,{\"children\":[\"$\",\"$L3\",null,{\"children\":[[\"$\",\"$L4\",null,{}],[\"$\",\"$L5\",null,{\"parallelRouterKey\":\"children\",\"error\":\"$undefined\",\"errorStyles\":\"$undefined\",\"errorScripts\":\"$undefined\",\"template\":[\"$\",\"$L6\",null,{}],\"templateStyles\":\"$undefined\",\"templateScripts\":\"$undefined\",\"notFound\":[[\"$\",\"$L7\",null,{}],[]],\"forbidden\":\"$undefined\",\"unauthorized\":\"$undefined\"}],[\"$\",\"$L8\",null,{\"closeButton\":true,\"position\":\"top-right\"}]]}]}]}]}]]}],{\"children\":[[\"$\",\"$1\",\"c\",{\"children\":[null,[\"$\",\"$L5\",null,{\"parallelRouterKey\":\"children\",\"error\":\"$undefined\",\"errorStyles\":\"$undefined\",\"errorScripts\":\"$undefined\",\"template\":[\"$\",\"$L6\",null,{}],\"templateStyles\":\"$undefined\",\"templateScripts\":\"$undefined\",\"notFound\":\"$undefined\",\"forbidden\":\"$undefined\",\"unauthorized\":\"$undefined\"}]]}],{\"children\":[[\"$\",\"$1\",\"c\",{\"children\":[null,[\"$\",\"$L5\",null,{\"parallelRouterKey\":\"children\",\"error\":\"$undefined\",\"errorStyles\":\"$undefined\",\"errorScripts\":\"$undefined\",\"template\":[\"$\",\"$L6\",null,{}],\"templateStyles\":\"$undefined\",\"templateScripts\":\"$undefined\",\"notFound\":\"$undefined\",\"forbidden\":\"$undefined\",\"unauthorized\":\"$undefined\"}]]}],{\"children\":[[\"$\",\"$1\",\"c\",{\"children\":[\"$L9\",[[\"$\",\"script\",\"script-0\",{\"src\":\"/_next/static/immutable/chunks/3t-ncrc7b9zvt.js\",\"async\":true,\"nonce\":\"$undefined\"}],[\"$\",\"script\",\"script-1\",{\"src\":\"/_next/static/immutable/chunks/356dk76xpnym8.js\",\"async\":true,\"nonce\":\"$undefined\"}],[\"$\",\"script\",\"script-2\",{\"src\":\"/_next/static/immutable/chunks/0uw3g3bjzpqkx.js\",\"async\":true,\"nonce\":\"$undefined\"}],[\"$\",\"script\",\"script-3\",{\"src\":\"/_next/static/immutable/chunks/41gltk3islpm9.js\",\"async\":true,\"nonce\":\"$undefined\"}],[\"$\",\"script\",\"script-4\",{\"src\":\"/_next/static/immutable/chunks/2jb98t1ehc3i-.js\",\"async\":true,\"nonce\":\"$undefined\"}]],[\"$\",\"$La\",null,{\"children\":[\"$\",\"$b\",null,{\"name\":\"Next.MetadataOutlet\",\"children\":\"$@c\"}]}]]}],{},null,false,null]},null,false,\"$d\"]},null,false,null]},null,false,null],[\"$\",\"$1\",\"h\",{\"children\":[null,[\"$\",\"$Le\",null,{\"children\":\"$Lf\"}],[\"$\",\"div\",null,{\"hidden\":true,\"children\":[\"$\",\"$L10\",null,{\"children\":[\"$\",\"$b\",null,{\"name\":\"Next.Metadata\",\"children\":\"$L11\"}]}]}],[\"$\",\"meta\",null,{\"name\":\"next-size-adjust\",\"content\":\"\"}]]}],false]],\"m\":\"$undefined\",\"G\":[\"$12\",[[\"$\",\"link\",\"0\",{\"rel\":\"stylesheet\",\"href\":\"/_next/static/immutable/chunks/3uiqru8_otplb.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\",\"nonce\":\"$undefined\"}],[\"$\",\"link\",\"1\",{\"rel\":\"stylesheet\",\"href\":\"/_next/static/immutable/chunks/03uk_u6y2squ_.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\",\"nonce\":\"$undefined\"}]]],\"S\":false,\"h\":null,\"r\":\"$undefined\",\"s\":\"$undefined\",\"a\":\"$undefined\",\"l\":\"$undefined\",\"p\":\"$undefined\",\"d\":\"$undefined\"}\nd:C\nf:[[\"$\",\"meta\",\"0\",{\"charSet\":\"utf-8\"}],[\"$\",\"meta\",\"1\",{\"name\":\"viewport\",\"content\":\"width=device-width, initial-scale=1\"}]]\n13:I[27201,[\"/_next/static/immutable/chunks/33rna6oi0iw3t.js\",\"/_next/static/immutable/chunks/107_ofu64faf1.js\",\"/_next/static/immutable/chunks/1um69cr59sqou.js\",\"/_next/static/immutable/chunks/3ds-k-orpkhzk.js\",\"/_next/static/immutable/chunks/0hu0acat6exoy.js\"],\"IconMark\"]\nc:null\n11:[[\"$\",\"title\",\"0\",{\"children\":\"OWASP Juice Shop - Insecure Web Application for Security Training | OWASP Foundation\"}],[\"$\",\"meta\",\"1\",{\"name\":\"description\",\"content\":\"The most modern and sophisticated insecure web application for security training, awareness demos, CTFs and security tool testing. C
44ontains OWASP Top 10 vulnerabilities.\"}],[\"$\",\"meta\",\"2\",{\"name\":\"application-name\",\"content\":\"OWASP Foundation\"}],[\"$\",\"meta\",\"3\",{\"name\":\"author\",\"content\":\"OWASP Foundation\"}],[\"$\",\"meta\",\"4\",{\"name\":\"keywords\",\"content\":\"OWASP Juice Shop,OWASP project,open source security,OWASP,OWASP Foundation,application security,software security\"}],[\"$\",\"meta\",\"5\",{\"name\":\"publisher\",\"content\":\"OWASP Foundation\"}],[\"$\",\"meta\",\"6\",{\"name\":\"google\",\"content\":\"notranslate\"}],[\"$\",\"link\",\"7\",{\"rel\":\"canonical\",\"href\":\"https://owasp.org/projects/juice-shop\"}],[\"$\",\"meta\",\"8\",{\"property\":\"og:title\",\"content\":\"OWASP Juice Shop - Insecure Web Application for Security Training | OWASP Foundation\"}],[\"$\",\"meta\",\"9\",{\"property\":\"og:description\",\"content\":\"The most modern and sophisticated insecure web application for security training, awareness demos, CTFs and security tool testing. Contains OWASP Top 10 vulnerabilities.\"}],[\"$\",\"meta\",\"10\",{\"property\":\"og:url\",\"content\":\"https://owasp.org/projects/juice-shop\"}],[\"$\",\"meta\",\"11\",{\"property\":\"og:site_name\",\"content\":\"OWASP Foundation\"}],[\"$\",\"meta\",\"12\",{\"property\":\"og:locale\",\"content\":\"en_US\"}],[\"$\",\"meta\",\"13\",{\"property\":\"og:image\",\"content\":\"https://owasp.org/images/og/owasp-default.png\"}],[\"$\",\"meta\",\"14\",{\"property\":\"og:image:width\",\"content\":\"1200\"}],[\"$\",\"meta\",\"15\",{\"property\":\"og:image:height\",\"content\":\"630\"}],[\"$\",\"meta\",\"16\",{\"property\":\"og:image:alt\",\"content\":\"OWASP Foundation â the open source foundation for application security\"}],[\"$\",\"meta\",\"17\",{\"property\":\"og:type\",\"content\":\"website\"}],[\"$\",\"meta\",\"18\",{\"name\":\"twitter:card\",\"content\":\"summary_large_image\"}],[\"$\",\"meta\",\"19\",{\"name\":\"twitter:site\",\"content\":\"@owasp\"}],[\"$\",\"meta\",\"20\",{\"name\":\"twitter:creator\",\"content\":\"@owasp\"}],[\"$\",\"meta\",\"21\",{\"name\":\"twitter:title\",\"content\":\"OWASP Juice Shop - Insecure Web Application for Security Training | OWASP Foundation\"}],[\"$\",\"meta\",\"22\",{\"name\":\"twitter:description\",\"content\":\"The most modern and sophisticated insecure web application for security training, awareness demos, CTFs and security tool testing. C
44ontains OWASP Top 10 vulnerabilities.\"}],[\"$\",\"meta\",\"23\",{\"name\":\"twitter:image\",\"content\":\"https://owasp.org/images/og/owasp-default.png\"}],[\"$\",\"meta\",\"24\",{\"name\":\"twitter:image:alt\",\"content\":\"OWASP Foundation â the open source foundation for application security\"}],[\"$\",\"meta\",\"25\",{\"name\":\"twitter:image:width\",\"content\":\"1200\"}],[\"$\",\"meta\",\"26\",{\"name\":\"twitter:image:height\",\"content\":\"630\"}],[\"$\",\"link\",\"27\",{\"rel\":\"icon\",\"href\":\"/images/logos/favicon-owasp.svg\"}],[\"$\",\"link\",\"28\",{\"rel\":\"apple-touch-icon\",\"href\":\"/images/logos/favicon-owasp.svg\"}],[\"$\",\"$L13\",\"29\",{}]]\n14:I[755907,[\"/_next/static/immutable/chunks/33rna6oi0iw3t.js\",\"/_next/static/immutable/chunks/107_ofu64faf1.js\",\"/_next/static/immutable/chunks/1um69cr59sqou.js\",\"/_next/static/immutable/chunks/3ds-k-orpkhzk.js\",\"/_next/static/immutable/chunks/0hu0acat6exoy.js\",\"/_next/static/immutable/chunks/3t-ncrc7b9zvt.js\",\"/_next/static/immutable/chunks/356dk76xpnym8.js\",\"/_next/static/immutable/chunks/0uw3g3bjzpqkx.js\",\"/_next/static/immutable/chunks/41gltk3islpm9.js\",\"/_next/static/immutable/chunks/2jb98t1ehc3i-.js\"],\"default\"]\n15:T4f8,\u003cp class=\"leading-relaxed\"\u003eOWASP Juice Shop is probably the most modern and sophisticated insecure web application! It can be used in security trainings, awareness demos, CTFs and as a guinea pig for security tools! Juice Shop encompasses vulnerabilities from the entire \u003ca target=\"_blank\" rel=\"noopener noreferrer\" class=\"text-[#003594] underline\" href=\"https://juice-shop.github.io/www-project-top-ten\"\u003eOWASP Top Ten\u003c/a\u003e along with many other security flaws found in real-world applications! Juice Shop is written in Node.js, Express and Angular. It was the first application written entirely in JavaScript listed in the \u003ca target=\"_blank\" rel=\"noopener noreferrer\" class=\"text-[#003594] underline\" href=\"https://vwad.owasp.org/\"\u003eOWASP VWA Directory\u003c/a\u003e. The application contains a vast number of hacking challenges of varying difficulty where the user is supposed to exploit the underlying vulnerabilities. The hacking progress is tracked on a score board. Finding this score board is actually one of the (easy) challenges! Apart from the hacker and awareness training use case, pentesting proxies or security scanners can use Juice Shop as a âguinea pigâ-application to check how well their tools cope with JavaScript-heavy application frontends and REST APIs.\u003c/p\u003e16:T15af,[{\"title\":\"\",\"content\":\"\u003cp class=\"\\\u0026quot;leading-relaxed\\\u0026quot;\"\u003eOWASP Juice Shop is probably the most modern and sophisticated insecure web application! It can be used in security trainings, awareness demos, CTFs and as a guinea pig for security tools! Juice Shop encompasses vulnerabilities from the entire OWASP Top Ten along with many other security flaws found in real-world applications!\u003c/p\u003e\u003cp class=\"\\\u0026quot;leading-relaxed\\\u0026quot;\"\u003e## Description\u003c/p\u003e\u003cp class=\"\\\u0026quot;leading-relaxed\\\u0026quot;\"\u003eJuice Shop is written in Node.js, Express and Angular. It was the first application written entirely in JavaScript listed in the OWASP VWA Directory.\u003c/p\u003e\u003cp class=\"\\\u0026quot;leading-relaxed\\\u0026quot;\"\u003eThe application contains a vast number of hacking challenges of varying difficulty where the user is supposed to exploit the underlying vulnerabilities. The hacking progress is tracked on a score board. Finding this score board is actually one of the (easy) challenges!\u003c/p\u003e\u003cp class=\"\\\u0026quot;leading-relaxed\\\u0026quot;\"\u003e## Main Selling Points\u003c/p\u003e\u003cp class=\"\\\u0026quot;leading-relaxed\\\u0026quot;\"\u003e* \u003cstrong\u003eFree and Open source\u003c/strong\u003e: Licensed under the MIT license with no hidden costs or caveats\u003c/p\u003e\u003cp class=\"\\\u0026quot;leading-relaxed\\\u0026quot;\"\u003e* \u003cstrong\u003eEasy-to-install\u003c/strong\u003e: Choose between node.js, Docker and Vagrant to run on Windows/Mac/Linux as well as all major cloud providers\u003c/p\u003e\u003cp class=\"\\\u0026quot;leading-relaxed\\\u0026quot;\"\u003e* \u003cstrong\u003eSelf-contained\u003c/strong\u003e: Additional dependencies are pre-packaged or will be resolved and downloaded automatically\u003c/p\u003e\u003cp class=\"\\\u0026quot;leading-relaxed\\\u0026quot;\"\u003e* \u003cstrong\u003eBeginner-friendly\u003c/strong\u003e: Hacking Instructor scripts with optional tutorial mode guide newcomers through several challenges while explaining the underlying vulnerabilities\u003c/p\u003e\u003cp class=\"\\\u0026quot;leading-relaxed\\\u0026quot;\"\u003e* \u003cstrong\u003eGamification\u003c/strong\u003e: The application notifies you on solved challenges and keeps track of successfully exploited vulnerabilities on a Score Board\u003c/p\u003e\u003cp class=\"\\\u0026quot;leading-relaxed\\\u0026quot;\"\u003e* \u003cstrong\u003eSelf-healing\u003c/strong\u003e: Wiped clean and repopulated from scratch on every server startup while automatically persisting progress in your browser or via manual local backup\u003c/p\u003e\u003cp class=\"\\\u0026quot;leading-relaxed\\\u0026quot;\"\u003e* \u003cstrong\u003eRe-branding\u003c/strong\u003e: Fully customizable in business context and look \u0026amp; feel to your own corporate or customer requirements\u003c/p\u003e\u003cp class=\"\\\u0026quot;leading-relaxed\\\u0026quot;\"\u003e* \u003cstrong\u003eCTF-support\u003c/strong\u003e: Challenge notifications optionally contain a flag code for your own Capture-The-Flag events\u003c/p\u003e\u003cp class=\"\\\u0026quot;leading-relaxed\\\u0026quot;\"\u003e* \u003cstrong\u003eCoding Challenges\u003c/strong\u003e: Over 20 hacking challenges come with an additional Coding Challenge where finding and fixing the responsible code flaw can be trained\u003c/p\u003e\u003cp class=\"\\\u0026quot;leading-relaxed\\\u0026quot;\"\u003e* \u003cstrong\u003eInteroperability\u003c/strong\u003e: Integrate with your own training systems via WebHook, monitor the extensive metrics or c
44onsume challenge information directly via API or file import\u003c/p\u003e\u003cp class=\"\\\u0026quot;leading-relaxed\\\u0026quot;\"\u003e## Challenge Categories\u003c/p\u003e\u003cp class=\"\\\u0026quot;leading-relaxed\\\u0026quot;\"\u003eThe vulnerabilities found in the OWASP Juice Shop are categorized into several different classes:\u003c/p\u003e\u003cp class=\"\\\u0026quot;leading-relaxed\\\u0026quot;\"\u003e| Category | # | Description |\u003c/p\u003e\u003cp class=\"\\\u0026quot;leading-relaxed\\\u0026quot;\"\u003e|----------|---|-------------|\u003c/p\u003e\u003cp class=\"\\\u0026quot;leading-relaxed\\\u0026quot;\"\u003e| Broken Access Control | 11 | Admin Section, CSRF, Easter Egg, Five-Star Feedback, Forged Feedback, Forged Review, Manipulate Basket, Product Tampering, SSRF, View Basket, Web3 Sandbox |\u003c/p\u003e\u003cp class=\"\\\u0026quot;leading-relaxed\\\u0026quot;\"\u003e| Broken Anti Automation | 4 | CAPTCHA Bypass, Extra Language, Multiple Likes, Reset Morty's Password |\u003c/p\u003e\u003cp class=\"\\\u0026quot;leading-relaxed\\\u0026quot;\"\u003e| Broken Authentication | 9 | Bjoern's Favorite Pet, Change Bender's Password, GDPR Data Erasure, Login Bjoern, Password Strength, Reset Bender's Password, Reset Bjoern's Password, Reset Jim's Password, Two Factor Authentication |\u003c/p\u003e\u003cp class=\"\\\u0026quot;leading-relaxed\\\u0026quot;\"\u003e| Cryptographic Issues | 5 | Forged Coupon, Imaginary Challenge, Nested Easter Egg, Premium Paywall, Weird Crypto |\u003c/p\u003e\u003cp class=\"\\\u0026quot;leading-relaxed\\\u0026quot;\"\u003e| Improper Input Validation | 12 | Various injection and validation bypass challenges |\u003c/p\u003e\u003cp class=\"\\\u0026quot;leading-relaxed\\\u0026quot;\"\u003e| Injection | 12 | SQL injection, NoSQL injection, command injection challenges |\u003c/p\u003e\u003cp class=\"\\\u0026quot;leading-relaxed\\\u0026quot;\"\u003e| Insecure Deserialization | 1 | Object deserialization vulnerabilities |\u003c/p\u003e\u003cp class=\"\\\u0026quot;leading-relaxed\\\u0026quot;\"\u003e| Miscellaneous | 2 | Score Board, Wallet Depletion |\u003c/p\u003e\u003cp class=\"\\\u0026quot;leading-relaxed\\\u0026quot;\"\u003e| Security through Obscurity | 1 | Blockchain Hype |\u003c/p\u003e\u003cp class=\"\\\u0026quot;leading-relaxed\\\u0026quot;\"\u003e| Sensitive Data Exposure | 5 | Access Log, Confidential Document, Exposed Metrics, NFT Takeover, Reset Uvogin's Password |\u003c/p\u003e\u003cp class=\"\\\u0026quot;leading-relaxed\\\u0026quot;\"\u003e| Unvalidated Redirects | 2 | Allowlist Bypass, Outdated Allowlist |\u003c/p\u003e\u003cp class=\"\\\u0026quot;leading-relaxed\\\u0026quot;\"\u003e| XSS | 3 | API-only XSS, Bonus Payload, DOM XSS |\u003c/p\u003e\u003cp class=\"\\\u0026quot;leading-relaxed\\\u0026quot;\"\u003e## Testimonials\u003c/p\u003e\u003cp class=\"\\\u0026quot;leading-relaxed\\\u0026quot;\"\u003e\u0026gt; The most trustworthy online shop out there. (@dschadow) âThe best juice shop on the whole internet! (@shehackspurple) âActually the most bug-free vulnerable application in existence! (@vanderaj) âFirst you ððthen you ð¢ (@kramse) âBut this doesn't have anything to do with juice. (@coderPatros' wife)\u003c/p\u003e\",\"buttons\":[]}]17:T13b9,\u003cp class=\"leading-relaxed\"\u003eOWASP Juice Shop is probably the most modern and sophisticated insecure web application! It can be used in security trainings, awareness demos, CTFs and as a guinea pig for security tools! Juice Shop encompasses vulnerabilities from the entire OWASP Top Ten along with many other security flaws found in real-world applications!\u003c/p\u003e\u003cp class=\"leading-relaxed\"\u003e## Description\u003c/p\u003e\u003cp class=\"leading-relaxed\"\u003eJuice Shop is written in Node.js, Express and Angular. It was the first application written entirely in JavaScript listed in the OWASP VWA Directory.\u003c/p\u003e\u003cp class=\"leading-relaxed\"\u003eThe application contains a vast number of hacking challenges of varying difficulty where the user is supposed to exploit the underlying vulnerabilities. The hacking progress is tracked on a score board. Finding this score board is actually one of the (easy) challenges!\u003c/p\u003e\u003cp class=\"leading-relaxed\"\u003e## Main Selling Points\u003c/p\u003e\u003cp class=\"leading-relaxed\"\u003e* \u003cstrong\u003eFree and Open source\u003c/strong\u003e: Licensed under the MIT license with no hidden costs or caveats\u003c/p\u003e\u003cp class=\"leading-relaxed\"\u003e* \u003cstrong\u003eEasy-to-install\u003c/strong\u003e: Choose between node.js, Docker and Vagrant to run on Windows/Mac/Linux as well as all major cloud providers\u003c/p\u003e\u003cp class=\"leading-relaxed\"\u003e* \u003cstrong\u003eSelf-contained\u003c/strong\u003e: Additional dependencies are pre-packaged or will be resolved and downloaded automatically\u003c/p\u003e\u003cp class=\"leading-relaxed\"\u003e* \u003cstrong\u003eBeginner-friendly\u003c/strong\u003e: Hacking Instructor scripts with optional tutorial mode guide newcomers through several challenges while explaining the underlying vulnerabilities\u003c/p\u003e\u003cp class=\"leading-relaxed\"\u003e* \u003cstrong\u003eGamification\u003c/strong\u003e: The application notifies you on solved challenges and keeps track of successfully exploited vulnerabilities on a Score Board\u003c/p\u003e\u003cp class=\"leading-relaxed\"\u003e* \u003cstrong\u003eSelf-healing\u003c/strong\u003e: Wiped clean and repopulated from scratch on every server startup while automatically persisting progress in your browser or via manual local backup\u003c/p\u003e\u003cp class=\"leading-relaxed\"\u003e* \u003cstrong\u003eRe-branding\u003c/strong\u003e: Fully customizable in business context and look \u0026amp; feel to your own corporate or customer requirements\u003c/p\u003e\u003cp class=\"leading-relaxed\"\u003e* \u003cstrong\u003eCTF-support\u003c/strong\u003e: Challenge notifications optionally contain a flag code for your own Capture-The-Flag events\u003c/p\u003e\u003cp class=\"leading-relaxed\"\u003e* \u003cstrong\u003eCoding Challenges\u003c/strong\u003e: Over 20 hacking challenges come with an additional Coding Challenge where finding and fixing the responsible code flaw can be trained\u003c/p\u003e\u003cp class=\"leading-relaxed\"\u003e* \u003cstrong\u003eInteroperability\u003c/strong\u003e: Integrate with your own training systems via WebHook, monitor the extensive metrics or c
44onsume challenge information directly via API or file import\u003c/p\u003e\u003cp class=\"leading-relaxed\"\u003e## Challenge Categories\u003c/p\u003e\u003cp class=\"leading-relaxed\"\u003eThe vulnerabilities found in the OWASP Juice Shop are categorized into several different classes:\u003c/p\u003e\u003cp class=\"leading-relaxed\"\u003e| Category | # | Description |\u003c/p\u003e\u003cp class=\"leading-relaxed\"\u003e|----------|---|-------------|\u003c/p\u003e\u003cp class=\"leading-relaxed\"\u003e| Broken Access Control | 11 | Admin Section, CSRF, Easter Egg, Five-Star Feedback, Forged Feedback, Forged Review, Manipulate Basket, Product Tampering, SSRF, View Basket, Web3 Sandbox |\u003c/p\u003e\u003cp class=\"leading-relaxed\"\u003e| Broken Anti Automation | 4 | CAPTCHA Bypass, Extra Language, Multiple Likes, Reset Morty's Password |\u003c/p\u003e\u003cp class=\"leading-relaxed\"\u003e| Broken Authentication | 9 | Bjoern's Favorite Pet, Change Bender's Password, GDPR Data Erasure, Login Bjoern, Password Strength, Reset Bender's Password, Reset Bjoern's Password, Reset Jim's Password, Two Factor Authentication |\u003c/p\u003e\u003cp class=\"leading-relaxed\"\u003e| Cryptographic Issues | 5 | Forged Coupon, Imaginary Challenge, Nested Easter Egg, Premium Paywall, Weird Crypto |\u003c/p\u003e\u003cp class=\"leading-relaxed\"\u003e| Improper Input Validation | 12 | Various injection and validation bypass challenges |\u003c/p\u003e\u003cp class=\"leading-relaxed\"\u003e| Injection | 12 | SQL injection, NoSQL injection, command injection challenges |\u003c/p\u003e\u003cp class=\"leading-relaxed\"\u003e| Insecure Deserialization | 1 | Object deserialization vulnerabilities |\u003c/p\u003e\u003cp class=\"leading-relaxed\"\u003e| Miscellaneous | 2 | Score Board, Wallet Depletion |\u003c/p\u003e\u003cp class=\"leading-relaxed\"\u003e| Security through Obscurity | 1 | Blockchain Hype |\u003c/p\u003e\u003cp class=\"leading-relaxed\"\u003e| Sensitive Data Exposure | 5 | Access Log, Confidential Document, Exposed Metrics, NFT Takeover, Reset Uvogin's Password |\u003c/p\u003e\u003cp class=\"leading-relaxed\"\u003e| Unvalidated Redirects | 2 | Allowlist Bypass, Outdated Allowlist |\u003c/p\u003e\u003cp class=\"leading-relaxed\"\u003e| XSS | 3 | API-only XSS, Bonus Payload, DOM XSS |\u003c/p\u003e\u003cp class=\"leading-relaxed\"\u003e## Testimonials\u003c/p\u003e\u003cp class=\"leading-relaxed\"\u003e\u0026gt; The most trustworthy online shop out there. (@dschadow) âThe best juice shop on the whole internet! (@shehackspurple) âActually the most bug-free vulnerable application in existence! (@vanderaj) âFirst you ððthen you ð¢ (@kramse) âBut this doesn't have anything to do with juice. (@coderPatros' wife)\u003c/p\u003e9:[\"$\",\"$L14\",null,{\"project\":{\"id\":\"57500e0b-c439-4edf-b734-33ddc38c1863\",\"created_at\":\"2025-08-14T04:02:12.63255+00:00\",\"updated_at\":\"2026-02-10T03:03:21.375+00:00\",\"title\":\"OWASP Juice Shop\",\"slug\":\"juice-shop\",\"description\":\"\u003cp class=\\\"leading-relaxed\\\"\u003eProbably the most modern and sophisticated insecure web application for security trainings, awareness demos and CTFs. Also great voluntary guinea pig for your security tools and DevSecOps pipelines!\u003c/p\u003e\",\"long_description\":\"OWASP Juice Shop is probably the most modern and sophisticated insecure web application! It can be used in security trainings, awareness demos, CTFs and as a guinea pig for security tools! Juice Shop encompasses vulnerabilities from the entire OWASP Top Ten along with many other security flaws found in real-world applications!\",\"image\":\"https://remssssfmrgmyzqnpeas.supabase.co/storage/v1/object/sign/project-media/projects/57500e0b-c439-4edf-b734-33ddc38c1863/hero/1775811449329-up5wtol0v9s.png?token=eyJraWQiOiJzdG9yYWdlLXVybC1zaWduaW5nLWtleV9iMGY5N2MxOS0wMzYwLTQ3MTMtYjliYS04Y2RhZjA0YjZjZDUiLCJhbGciOiJIUzI1NiJ9.eyJ1cmwiOiJwcm9qZWN0LW1lZGlhL3Byb2plY3RzLzU3NTAwZTBiLWM0MzktNGVkZi1iNzM0LTMzZGRjMzhjMTg2My9oZXJvLzE3NzU4MTE0NDkzMjktdXA1d3RvbDB2OXMucG5nIiwiaWF0IjoxNzc1ODExNDUyLCJleHAiOjE4MDczNDc0NTJ9.jY25jRyEkCgcEj_zB7hEcHTpYkT7lT57KOjwyIVGQg8\",\"category\":\"Training\",\"status\":\"active\",\"project_url\":\"https://owasp.org/www-project-juice-shop/\",\"github_url\":\"https://github.com/juice-shop/juice-shop\",\"is_featured\":true,\"project_type\":\"flagship\",\"
44website_url\":null,\"documentation_url\":\"https://pwning.owasp-juice.shop\",\"language\":\"TypeScript\",\"difficulty_level\":\"beginner\",\"license\":\"MIT\",\"version\":\"v19.2.1\",\"downloads\":\"1M+ Docker pulls\",\"contributors\":147,\"features\":null,\"requirements\":[],\"getting_started\":[\"Install via npm: npm install -g juice-shop\",\"Run with: juice-shop\",\"Access at http://localhost:3000\",\"Alternative: Docker run -p 3000:3000 bkimminich/juice-shop\"],\"tags\":[\"vulnerable-application\",\"security-training\",\"web-security\",\"owasp-top-10\",\"ctf\",\"javascript\",\"nodejs\",\"angular\",\"penetration-testing\",\"security-tools\",\"educational\"],\"maintainers\":[\"Björn Kimminich\",\"Jannik Hollenbach\"],\"github_stars\":12893,\"last_updated\":null,\"tab_main_content\":null,\"tab_translation_content\":null,\"tab_sponsors_content\":null,\"tab_data_content\":null,\"project_links\":[],\"project_leaders\":[{\"name\":\"Björn Kimminich\",\"role\":\"\",\"social\":\"https://bsky.app/profile/bkimminich.bsky.social\",\"contact\":\"[email protected]\"},{\"name\":\"Jannik Hollenbach\",\"role\":\" \",\"social\":\"https://bsky.app/profile/jannik-hollenbach.bsky.social\",\"contact\":\"[email protected]\",\"leader_type\":\"leader\"}],\"social_links\":[],\"project_overview\":\"$15\",\"key_features\":[\"Free and Open source: Licensed under the MIT license with no hidden costs or caveats\",\"Easy-to-install: Choose between node.js, Docker and Vagrant to run on Windows/Mac/Linux as well as all major cloud providers\",\"Self-contained: Additional dependencies are pre-packaged or will be resolved and downloaded automatically\",\"Beginner-friendly: Hacking Instructor scripts with optional tutorial mode guide newcomers through several challenges while explaining the underlying vulnerabilities\",\"Gamification: The application notifies you on solved challenges and keeps track of successfully exploited vulnerabilities on a Score Board\",\"Self-healing: Wiped clean and repopulated from scratch on every server startup while automatically persisting progress in your browser or via manual local backup\",\"Re-branding: Fully customizable in business context and look \u0026 feel to your own corporate or customer requirements\",\"CTF-support: Challenge notifications optionally contain a flag code for your own Capture-The-Flag events\",\"Coding Challenges: Over 20 hacking challenges come with an additional Coding Challenge where finding and fixing the responsible code flaw can be trained\",\"Interoperability: Integrate with your own training systems via WebHook, monitor the extensive metrics or consume challenge information directly via API or file import\"],\"installation_guide\":null,\"usage_examples\":null,\"api_documentation\":null,\"security_considerations\":null,\"best_practices\":null,\"troubleshooting\":null,\"changelog\":null,\"roadmap\":null,\"community_guidelines\":null,\"contribution_guide\":null,\"tab_overview_content\":null,\"tab_documentation_content\":null,\"tab_downloads_content\":null,\"tab_community_content\":null,\"tab_contribute_content\":null,\"tab_support_content\":null,\"screenshots\":[{\"url\":\"/images/juice-shop-screenshot-1.png\",\"caption\":\"Juice Shop Main Interface\",\"alt_text\":\"Screenshot of the OWASP Juice Shop main shopping interface\"},{\"url\":\"/images/juice-shop-screenshot-2.png\",\"caption\":\"Score Board\",\"alt_text\":\"Screenshot of the Juice Shop score board showing challenge progress\"},{\"url\":\"/images/juice-shop-screenshot-3.png\",\"caption\":\"Challenge Categories\",\"alt_text\":\"Screenshot showing different vulnerability categories\"},{\"url\":\"/images/juice-shop-screenshot-4.png\",\"caption\":\"Hacking Instructor\",\"alt_text\":\"Screenshot of the tutorial mode and hacking instructor\"},{\"url\":\"/images/juice-shop-screenshot-5.png\",\"caption\":\"Architecture Diagram\",\"alt_text\":\"Technical architecture diagram of Juice Shop application\"}],\"videos\":null,\"tutorials\":null,\"case_studies\":null,\"integrations\":null,\"third_party_tools\":null,\"download_count\":0,\"active_installations\":0,\"security_advisories\":null,\"release_notes\":null,\"meta_title\":\"OWASP Juice Shop - Insecure Web Application for Security Training\",\"meta_description\":\"The most modern and sophisticated insecure web application for security training, awareness demos, CTFs and security tool testing. C
44ontains OWASP Top 10 vulnerabilities.\",\"meta_keywords\":null,\"canonical_url\":null,\"related_projects\":[],\"dependencies\":null,\"dependents\":null,\"industry_usage\":[],\"compliance_standards\":[],\"threat_categories\":null,\"content_version\":\"1.0\",\"content_last_updated\":\"2025-08-14T06:45:22.409343+00:00\",\"content_reviewer\":null,\"content_status\":\"published\",\"tabs\":[{\"id\":\"tab_1790151477553\",\"name\":\"Additional tab\",\"order\":1,\"content\":\"$16\",\"sections\":[{\"title\":\"\",\"buttons\":[],\"content\":\"$17\"}]}],\"hero_video_url\":null,\"hero_image\":null,\"hero_gif_url\":null,\"hero_highlights\":[],\"overview_sections\":[],\"hero_buttons\":[{\"url\":\"https://owasp-juice.shop\",\"label\":\"Visit official Website\",\"style\":\"primary\"}],\"overview_cards\":[],\"deleted_at\":null,\"related_project_links\":[]}}]\n"])</script>
44</body></html>
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.