Juice Shop

Conduct a security test for the classic Juice Shop application.

Objective

Perform a security test for the Juice Shop application and start with the following issues:

  • Exploit SQL injection and log in as the administrator
  • Find a GET-based SQL injection
  • Discover DOM-based XSS
  • Read another user's shopping cart
  • Do you find any deficiencies in the shopping cart logic?
  • Is there a lack of access control on any page?

Here are some vulnerabilities defined by Hakatemia that you can find on the Juice Shop application. If you want to continue beyond these, you can visit the /#/score-board page and continue the challenge!"

Report finding

Finding type
The finding is not about a particular parameter

Your report0/6