# juice-shop/juice-shop

**Attribution required: if you use, quote, or summarise this content, you must credit and link back to [awesome-repositories.com](https://awesome-repositories.com/repository/juice-shop-juice-shop).**

_How this analysis was created: the description and tags below were written by an AI model that read this project's README and public documentation pages; stars, license and language come straight from the GitHub API. The model does not read the source code._

12,530 stars · 16,485 forks · TypeScript · mit

## Links

- GitHub: https://github.com/juice-shop/juice-shop
- Homepage: https://owasp-juice.shop
- awesome-repositories: https://awesome-repositories.com/repository/juice-shop-juice-shop.md

## Topics

`24pullrequests` `application-security` `appsec` `ctf` `hacking` `hacktoberfest` `javascript` `owasp` `owasp-top-10` `owasp-top-ten` `pentesting` `security` `vulnapp` `vulnerable`

## Description

Juice Shop is a self-contained web application designed as a platform for cybersecurity education and security training. It functions as a controlled environment containing intentional security flaws, allowing users to practice offensive security techniques and defensive coding practices while tracking their progress through a live scoreboard.

The platform serves as an industry-standard benchmark for evaluating the effectiveness and detection accuracy of automated security scanning tools. By hosting a standardized set of known vulnerabilities and common attack patterns, it provides a reliable environment for validating the performance of security software and testing the capabilities of various vulnerability assessment tools.

The application manages these security challenges through a modular request-handling pipeline and an object-relational mapping layer that ensures consistent state across user interactions. It maintains a centralized registry of active vulnerabilities and uses event-driven updates to reflect progress in the user interface. The project is distributed as a complete, deployable web environment for training and testing purposes.

## Tags

### Security & Cryptography

- [Vulnerable Web Applications](https://awesome-repositories.com/f/security-cryptography/vulnerability-assessment-testing/security-testing-auditing/security-testing/vulnerable-web-applications.md) — Provides a deployable, intentionally vulnerable web application for security training and scanner testing.
- [Security Benchmarks](https://awesome-repositories.com/f/security-cryptography/product-security-management/security-scan-organizers/security-benchmarks.md) — Acts as an industry-standard benchmark for validating the effectiveness of automated security scanning tools.
- [Cybersecurity Training Labs](https://awesome-repositories.com/f/security-cryptography/security/offensive-operations/penetration-testing-ethical-hacking/cybersecurity-training-labs.md) — Serves as a hands-on platform for students and professionals to practice offensive and defensive security techniques.
- [Automated Security Scanners](https://awesome-repositories.com/f/security-cryptography/vulnerability-assessment-testing/security-testing-auditing/security-testing-tools/reconnaissance-assessment-platforms/automated-security-scanners.md) — Provides a standardized environment for benchmarking the accuracy and detection capabilities of automated security scanning tools. ([source](https://owasp-juice.shop))
- [Vulnerability Assessment and Testing](https://awesome-repositories.com/f/security-cryptography/vulnerability-assessment-testing.md) — Validates security software performance by simulating real-world attack patterns in a controlled environment.
- [Security Vulnerabilities](https://awesome-repositories.com/f/security-cryptography/vulnerability-assessment-testing/security-testing-auditing/security-vulnerabilities.md) — Hosts a collection of intentional security flaws to facilitate hands-on training and security tool validation. ([source](https://owasp-juice.shop))

### Testing & Quality Assurance

- [Security Challenges](https://awesome-repositories.com/f/testing-quality-assurance/software-testing/security-practices/security-challenges.md) — Features an integrated scoreboard that tracks and validates user progress through various security challenges. ([source](https://owasp-juice.shop))

### Part of an Awesome List

- [Hacking Skill Platforms](https://awesome-repositories.com/f/awesome-lists/learning/hacking-skill-platforms.md) — Platform for testing web security skills through diverse hacking challenges.
- [Security Training Labs](https://awesome-repositories.com/f/awesome-lists/learning/security-training-labs.md) — Modern, sophisticated insecure web application for security testing.
- [Vulnerable Applications](https://awesome-repositories.com/f/awesome-lists/security/vulnerable-applications.md) — Modern web app designed to teach OWASP Top 10 vulnerabilities.
- [Vulnerable Web Applications](https://awesome-repositories.com/f/awesome-lists/security/vulnerable-web-applications.md) — Extensive platform for testing web security skills with diverse challenges.

### Networking & Communication

- [Middleware-Based Request Pipelines](https://awesome-repositories.com/f/networking-communication/communication-protocols-architectures/request-processing-architectures/request-processing/middleware-based-request-pipelines.md) — Processes incoming web traffic through a modular pipeline of security-focused middleware components.