GitHub - juice-shop/juice-shop

OWASP Juice Shop Overview

• Purpose: A modern, sophisticated insecure web application designed for security training, awareness demos, CTFs, and testing security tools.
• Scope: Contains vulnerabilities from the entire OWASP Top Ten and various real-world security flaws.
• Official Resources:
  • Project Website: https://owasp-juice.shop
  • Live Demo: http://demo.owasp-juice.shop (for testing/preview only).
  • Companion Guide: Pwning OWASP Juice Shop (eBook available for free on LeanPub).
• Installation Methods:
  • Source: Clone via Git, install dependencies via npm, and run npm start.
  • Packaged: Download ZIP/TGZ releases for Windows, MacOS, or Linux.
  • Docker: Pull bkimminich/juice-shop and run via standard Docker commands.
  • Vagrant: Use the provided Vagrantfile and Virtualbox configuration.
• Technical Requirements:
  • Supports Node.js LTS versions (currently 22.x and 24.x).
  • Some challenges require integration with external AI/LLM providers.
• Support & Community:
  • Troubleshooting: Use the Gitter Chat for questions (avoid opening GitHub issues for support).
  • Contributions: Welcomed via Pull Requests; see CONTRIBUTING.md for guidelines.
  • References: Community members are encouraged to add blog posts, talks, or articles to REFERENCES.md.
• Project Governance:
  • Project Leaders: Björn Kimminich and Jannik Hollenbach.
  • License: MIT License.
  • Donations: Accepted via the OWASP Foundation (Stripe).
  • Merchandise: Official swag (shirts, stickers, etc.) available via Spreadshirt and StickerYou.