owasp-juice-shop

Tool to export Juice Shop challenges and hints in data format compatible with CTFd, RootTheBox or FBCTF

Antora/Asciidoc content for Bjoern Kimminich's free eBook "Pwning OWASP Juice Shop"

Demo - how to easily build security testing for Web App, using Zap and Glue

All Labs of the Security for Developers Training

Universal Prompt Security Standard (UPSS): A framework for externalizing, securing, and managing LLM prompts and genAI systems, inspired by and extending OWASP OPSS concepts for any organization or project.

bustme is a directory brute forcing tool that assesses if pages exist according to the returned response body.

owasp juice chop ctf tryhackme walkthrough

A web application security scanner a very big competitor of OWASP ZAP and Burp Suit — intercepting proxy, passive scanner, spider, active scanner, and a native desktop GUI.

Open-source autonomous AI pentester that proves every exploit — 87/113 on OWASP Juice Shop, black-box, on a budget model and a flawless 22 of 22 on Escape's Duck Store API — fully autonomous, black-box, outscoring Cascade and a bare Claude Opus 4.8 on the very same board, all while running on one of the cheapest models on the market.

Controlled web application security lab with OWASP Juice Shop, Burp Suite, OWASP ZAP, Docker, and five documented findings.

Bash script to install docker and OWASPs juice-shop vulnerable webapp. Run this and browse to http://localhost:3000

A collection of write-ups for capture the flag challenges and wargames.

A RESTful API brute-forcing tool in Go for ethical hacking practice. **Gobrute** is built for testing login passwords with multithreading, progress tracking, and customizable payloads, ideal for controlled environments like OWASP Juice Shop.

A CI/CD Security Pipeline with OWASP ZAP & GitHub Actions

Projeto de Pentest em aplicação web, OWASP Juice Shop, com identificação de vulnerabilidades e sugestão de correção. como entrega de atividade do programa Desenvolve do Grupo Boticário em parceria com a Alura.

Comprehensive Write-ups for OWASP Juice Shop challenges, organized by OWASP Top 10 vulnerabilities

IaC for IAST of OWASP Juice Shop app.

Cybersecurity portfolio project: OWASP Juice Shop pentest with Critical/High findings, risk ratings, and a consulting-style PDF report.

Hands-on cybersecurity home lab covering vulnerability assessment, OWASP web security, Docker, NGINX hardening, network reconnaissance, remediation, and security verification.

A CI/CD Security Pipeline with OWASP ZAP & GitHub Actions with Terraform