Challenge:
Name: GDPR Data Theft
Description: Steal someone else’s personal data without using Injection.
Difficulty: 4 star
Category: Sensitive Data Exposure
Expanded Description: https://pwning.owasp-juice.shop/part2/sensitive-data-exposure.html
Read MoreChallenge:
Name: Login Bjoern
Description: Log in with Bjoern’s Gmail account without previously changing his password, applying SQL Injection, or hacking his Google account.
Difficulty: 4 star
Category: Broken Authentication
Expanded Description: https://pwning.owasp-juice.shop/part2/broken-authentication.html
Read MoreChallenge:
Name: Reset Uvogin’s Password
Description: Reset Uvogin’s password via the Forgot Password mechanism with the original answer to his security question.
Difficulty: 4 star
Category: Sensitive Data Exposure
Expanded Description: https://pwning.owasp-juice.shop/part2/sensitive-data-exposure.html
Read MoreChallenge:
Name: Legacy Typosquatting
Description: Inform the shop about a typosquatting trick it has been a victim of at least in v6.2.0-SNAPSHOT. (Mention the exact name of the culprit)
Difficulty: 4 star
Category: Vulnerable Components
Expanded Description: https://pwning.owasp-juice.shop/part2/vulnerable-components.html
Read MoreChallenge:
Name: Ephemeral Accountant
Description: Log in with the (non-existing) accountant acc0unt4nt@juice-sh.op without ever registering that user.
Difficulty: 4 star
Category: Injection
Expanded Description: https://pwning.owasp-juice.shop/part2/injection.html
Read MoreChallenge:
Name: Leaked Unsafe Product
Description: Identify an unsafe product that was removed from the shop and inform the shop which ingredients are dangerous.
Difficulty: 4 star
Category: Sensitive Data Exposure
Expanded Description: https://pwning.owasp-juice.shop/part2/sensitive-data-exposure.html
Read MoreChallenge:
Name: NoSQL Manipulation
Description: Update multiple product reviews at the same time.
Difficulty: 4 star
Category: Injection
Expanded Description: https://pwning.owasp-juice.shop/part2/injection.html
Read MoreChallenge:
Name: Access Log
Description: Gain access to any access log file of the server
Difficulty: 4 star
Category: Sensitive Data Exposure
Expanded Description: https://pwning.owasp-juice.shop/part2/sensitive-data-exposure.html
Read MoreChallenge:
Name: Forged Coupon
Description: Forge a coupon code that gives you a discount of at least 80%.
Difficulty: 6 star
Category: Cryptographic Issues
Expanded Description: https://pwning.owasp-juice.shop/part2/cryptographic-issues.html
Read MoreChallenge:
Name: User Credentials
Description: Retrieve a list of all user credentials via SQL Injection.
Difficulty: 4 star
Category: Injection
Expanded Description: https://pwning.owasp-juice.shop/part2/injection.html
Read More
Curiosity Kills Colby 