Challenge:
Name: Reset Uvogin’s Password
Description: Reset Uvogin’s password via the Forgot Password mechanism with the original answer to his security question.
Difficulty: 4 star
Category: Sensitive Data Exposure
Expanded Description: https://pwning.owasp-juice.shop/part2/sensitive-data-exposure.html
Read MoreChallenge:
Name: Legacy Typosquatting
Description: Inform the shop about a typosquatting trick it has been a victim of at least in v6.2.0-SNAPSHOT. (Mention the exact name of the culprit)
Difficulty: 4 star
Category: Vulnerable Components
Expanded Description: https://pwning.owasp-juice.shop/part2/vulnerable-components.html
Read MoreChallenge:
Name: Ephemeral Accountant
Description: Log in with the (non-existing) accountant acc0unt4nt@juice-sh.op without ever registering that user.
Difficulty: 4 star
Category: Injection
Expanded Description: https://pwning.owasp-juice.shop/part2/injection.html
Read MoreChallenge:
Name: Leaked Unsafe Product
Description: Identify an unsafe product that was removed from the shop and inform the shop which ingredients are dangerous.
Difficulty: 4 star
Category: Sensitive Data Exposure
Expanded Description: https://pwning.owasp-juice.shop/part2/sensitive-data-exposure.html
Read MoreChallenge:
Name: NoSQL Manipulation
Description: Update multiple product reviews at the same time.
Difficulty: 4 star
Category: Injection
Expanded Description: https://pwning.owasp-juice.shop/part2/injection.html
Read MoreChallenge:
Name: Access Log
Description: Gain access to any access log file of the server
Difficulty: 4 star
Category: Sensitive Data Exposure
Expanded Description: https://pwning.owasp-juice.shop/part2/sensitive-data-exposure.html
Read MoreChallenge:
Name: Forged Coupon
Description: Forge a coupon code that gives you a discount of at least 80%.
Difficulty: 6 star
Category: Cryptographic Issues
Expanded Description: https://pwning.owasp-juice.shop/part2/cryptographic-issues.html
Read MoreChallenge:
Name: User Credentials
Description: Retrieve a list of all user credentials via SQL Injection.
Difficulty: 4 star
Category: Injection
Expanded Description: https://pwning.owasp-juice.shop/part2/injection.html
Read MoreChallenge:
Name: Expired Coupon
Description: Successfully redeem an expired campaign coupon code.
Difficulty: 4 star
Category: Improper Input Validation
Expanded Description: https://pwning.owasp-juice.shop/part2/improper-input-validation.html
Read MoreChallenge:
Name: Reset Bender’s Password
Description: Reset Bender’s password via the Forgot Password mechanism with the original answer to his security question.
Difficulty: 4 star
Category: Broken Authentication
Expanded Description: https://pwning.owasp-juice.shop/part2/broken-authentication.html
Read More
Curiosity Kills Colby 