SUMMARY.md

Summary

Preface

• Why OWASP Juice Shop exists
• Architecture overview

Part I - Hacking preparations

• Hacking preparations
• Running OWASP Juice Shop
• Vulnerability categories
• Challenge tracking
• Hacking exercise rules
• Walking the "happy path"
• Customization
• Hosting a CTF event

Part II - Challenge hunting

• Challenge hunting
• Finding the Score Board
• Injection
• Broken Authentication
• Forgotten Content
• Roll your own Security
• Sensitive Data Exposure
• XML External Entities (XXE)
• Improper Input Validation
• Broken Access Control
• Security Misconfiguration
• Cross Site Scripting (XSS)
• Insecure Deserialization
• Vulnerable Components
• Security through Obscurity
• Race Condition

Part III - Getting involved

• Getting involved
• Provide feedback
• Contribute to development
• Codebase 101
• Help with translation
• Donations

Appendix

• Appendix A - Challenge solutions
• Appendix B - Trainer's guide

Postface

• About this book