Challenge:
Name: Login Amy
Description: Log in with Amy’s original user credentials. (This could take 93.83 billion trillion trillion centuries to brute force, but luckily she did not read the “One Important Final Note”)
Difficulty: 3 star
Category: Sensitive Data Exposure
Expanded Description: https://pwning.owasp-juice.shop/part2/sensitive-data-exposure.html
Read MoreChallenge:
Name: Deluxe Fraud
Description: Obtain a Deluxe Membership without paying for it.
Difficulty: 3 star
Category: Improper Input Validation
Expanded Description: https://pwning.owasp-juice.shop/part2/improper-input-validation.html
Read MoreChallenge:
Name: Payback Time
Description: Place an order that makes you rich.
Difficulty: 3 star
Category: Improper Input Validation
Expanded Description: https://pwning.owasp-juice.shop/part2/improper-input-validation.html
Read MoreChallenge:
Name: Admin Registration
Description: Register as a user with administrator privileges.
Difficulty: 3 star
Category: Improper Input Validation
Expanded Description: https://pwning.owasp-juice.shop/part2/improper-input-validation.html
Read MoreChallenge:
Name: Database Schema
Description: Exfiltrate the entire DB schema definition via SQL injection.
Difficulty: 3 star
Category: Injection
Expanded Description: https://pwning.owasp-juice.shop/part2/injection.html
Read MoreChallenge:
Name: CAPTCHA Bypass
Description: Submit 10 or more customer feedbacks within 10 seconds.
Difficulty: 3 star
Category: Broken Anti-Automation
Expanded Description: https://pwning.owasp-juice.shop/part2/broken-anti-automation.html
Read MoreChallenge:
Name: Password Strength
Description: Log in with the administrator’s user credentials without previously changing them or applying SQL Injection.
Difficulty: 2 star
Category: Broken Authentication
Expanded Description: https://pwning.owasp-juice.shop/part2/broken-authentication.html
Read MoreChallenge:
Name: Deprecated Interface
Description: Use a deprecated B2B interface that was not properly shut down.
Difficulty: 2 star
Category: Security Misconfiguration
Expanded Description: https://pwning.owasp-juice.shop/part2/security-misconfiguration.html
Read MoreChallenge:
Name: View Basket
Description: View another user’s shopping basket.
Difficulty: 2 star
Category: Broken Access Control
Expanded Description: https://pwning.owasp-juice.shop/part2/broken-access-control.html
Read MoreChallenge:
Name: Visual Geo Stalking
Description: Determine the answer to Emma’s security question by looking at an upload of her to the Photo Wall and use it to reset her password via the Forgot Password mechanism.
Difficulty: 2 star
Category: Sensitive Data Exposure
Expanded Description: https://pwning.owasp-juice.shop/part2/sensitive-data-exposure.html
Read More
Curiosity Kills Colby 