Challenge:
Name: GDPR Data Exposure
Description: Log in with Chris’ erased user account
Difficulty: 3 star
Category: Broken Authentication
Expanded Description: https://pwning.owasp-juice.shop/part2/broken-authentication.html
Read MoreChallenge:
Name: Privacy Policy Inspection
Description: Prove that you actually read our privacy policy.
Difficulty: 3 star
Category: Security Through Obscurity
Expanded Description: https://pwning.owasp-juice.shop/part2/security-through-obscurity.html
Read MoreChallenge 1:
Name: Upload Size
Description: Upload a file larger than 100 kB.
Difficulty: 3 star
Category: Improper Input Validation
Challenge 2:
Name: Upload Type
Description: Upload a file that has no .pdf or .zip extension.
Difficulty: 3 star
Category: Improper Input Validation
Expanded Description: https://pwning.owasp-juice.shop/part2/improper-input-validation.html
Read MoreChallenge:
Name: Bjoern’s Favorite Pet
Description: Reset the password of Bjoern’s OWASP account via the Forgot Password mechanism with the original answer to his security question.
Difficulty: 3 star
Category: Broken Authentication
Expanded Description: https://pwning.owasp-juice.shop/part2/broken-authentication.html
Read MoreChallenge:
Name: Forged Review
Description: Post a product review as another user or edit any user’s existing review.
Difficulty: 3 star
Category: Broken Access Control
Expanded Description: https://pwning.owasp-juice.shop/part2/broken-access-control.html
Read MoreChallenge:
Name: Login Bender
Description: Log in with Bender’s user account.
Difficulty: 3 star
Category: Injection
Expanded Description: https://pwning.owasp-juice.shop/part2/injection.html
Read MoreChallenge:
Name: Forged Feedback
Description: Post some feedback in another user’s name.
Difficulty: 3 star
Category: Broken Access Control
Expanded Description: https://pwning.owasp-juice.shop/part2/broken-access-control.html
Read MoreChallenge:
Name: Reset Jim’s Password
Description: Reset Jim’s password via the Forgot Password mechanism with the original answer to his security question.
Difficulty: 3 star
Category: Broken Authentication
Expanded Description: https://pwning.owasp-juice.shop/part2/broken-authentication.html
Read MoreChallenge:
Name: Login Jim
Description: Log in with Jim’s user account.
Difficulty: 3 star
Category: Injection
Expanded Description: https://pwning.owasp-juice.shop/part2/injection.html
Read MoreChallenge:
Name: Login Amy
Description: Log in with Amy’s original user credentials. (This could take 93.83 billion trillion trillion centuries to brute force, but luckily she did not read the “One Important Final Note”)
Difficulty: 3 star
Category: Sensitive Data Exposure
Expanded Description: https://pwning.owasp-juice.shop/part2/sensitive-data-exposure.html
Read More
Curiosity Kills Colby 