Hands-on Hacking Workshop

Distilled slides from full lecture (on master) to set the stage for four hands-on hacking lessons with OWASP Juice Shop:

• Cross-Site Scripting
• Injection
• Authentication Flaws
• Authorization Flaws

Preparation 👨‍🏫👩‍🏫

💡 It is recommended to read the Trainer's Guide before your first workshop with the OWASP Juice Shop.

Mandatory

1. Make sure each participant brings their own laptop
2. Make sure everyone has access to a Juice Shop instance either self-hosted on their own laptop...
3. ...or provided centrally on a cluster or cloud infrastructure e.g. using the easy-to-deploy MultiJuicer platform

Optional

1. Print one "OWASP Juice Shop Challenges" poster from the OWASP Security Pins project for each participant (in DIN A3 format)
2. Print one (25mm diameter) achievement sticker of each kind shown on the poster per participant (in total 12 stickers per poster)

ℹ️ Hand out the posters at at beginning of the workshop. After the exercises of each lesson, hand out the corresponding stickers to be put on the poster.

---

This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.