Juice Shop
Conduct a security test for the classic Juice Shop application.
Objective
Perform a security test for the Juice Shop application and start with the following issues:
- Exploit SQL injection and log in as the administrator
- Find a GET-based SQL injection
- Discover DOM-based XSS
- Read another user's shopping cart
- Do you find any deficiencies in the shopping cart logic?
- Is there a lack of access control on any page?
Here are some vulnerabilities defined by Hakatemia that you can find on the Juice Shop application. If you want to continue beyond these, you can visit the /#/score-board page and continue the challenge!"