OWASP Juice Shop

OWASP Juice Shop v20 is here! 🍹 Featuring: AI/LLM-based chatbot (w/ 3 hacking + 2 coding challenges), redesigned storefront, ~30% faster startup time, Angular 21, neon-fire & lime-green theme, and much more! owasp.org/blog/2026/05/1…

OWASP @owasp_juiceshop : University Engagement Professors, lecturers, students: this is your invitation to get involved with one of the most widely used web app security training platforms in the world. Contribute code, build challenges, run CTFs, earn academic credit. Read it here: pwning.owasp-juice.shop/companion-guid… #OWASP #AppSec #OpenSource #CyberEducation #juiceshop

Want to build your own Juice Shop Tower running MultiJuicer to get some 😮😲🤩 reactions during your next on-site CTF? We now have a complete guide for assembly, RasPi setup, and network configuration at pwning.owasp-juice.shop/companion-guid…

Dear Open Source contributors: If your AI spent X mins on "enhancement" or "refactorings" but the project maintainer needs >X mins to fix guideline violations and broken code, you didn’t contribute—you drained time and motivation from the maintainers. @bkimminich/115760195654764932" target="_blank" rel="nofollow noopener">infosec.exchange/@bkimminich/11…

💬 PSA: Recent versions of the "Pwning OWASP Juice Shop" eBooks on @leanpub missed all challenge hints in Part 2 of the book. This has now been fixed. Please re-download a copy of the book via leanpub.com/juice-shop and you will find the hints again. Thank you!

The online & ePUB/PDF guide generates its hint section #_reset_the_password_of_bjoerns_owasp_account_via_the_forgot_password_mechanism" target="_blank" rel="nofollow noopener">pwning.owasp-juice.shop/companion-guid… from the same datasource that the web app itself uses, ensuring consistency across the board. Don't discard the eBook though, as it might offer extra context or definitions alongside the hints! (🧵2/2)

On our `develop` branch and the public preview instance preview.owasp-juice.shop you can try out our overhauled hint system! Users can now unlock multiple hints in the app itself instead of just getting one hint and a link to our Companion Guide! (🧵1/2)

We released v18.0.0! It removes @nodejs 18.x support; mitigates local build issues w/ libxmljs; adds a new ⭐⭐⭐⭐⭐-challenge; adds a @defcon 33 theme for the @owasp collab w/ @BlueTeamVillage; fixes some bugs w/ telemetry, cats, and coupons! github.com/juice-shop/jui…

Don't miss the 2nd Juice Shop demo Fri, 14:15 in room 131/132 @owasp Global AppSec Barcelona w/ @bkimminich! We'll be able to take a look at the historic v1.0 release of Juice Shop this time! Bring your laptops if you want to participate in the still ongoing for-fun-CTF as well!

@owasp_juiceshop @owasp Start of day 2 @owasp Global AppSec Barcelona and this is the current scores at the @owasp_juiceshop for-fun-CTF available in & around room 131/132! Is this an application security or a fruit vendor conference? 🍇🍈😜🍏🍍The CTF cluster is at just 15% load! 🧊😴🧊 C'mon! 🔥👨🏼‍💻🔥

📡 WiFi "multi_juicer" broadcasts from room 131/132 and has limited range. In the vicinity of the rooms and in the hallway you'll find it! 📊 You can view the scores at http://192.168.0.103/balancer/score-overview at all time! No need to create a team if you just want to watch!

You're at @owasp Global AppSec Barcelona & want to play with and/or get a demo of OWASP Juice Shop? Join @bkimminich's 📺 demos on Thu 11:00 or Fri 14:15 in room 131! Jump on WiFi "multi_juicer" w/ password "MultiJuicer", add/join a team at http://192.168.0.103 and ⛳ hack away!

On my way to #Barcelona for the @owasp AppSec EU conference! Really looking forward to my @owasp_juiceshop demos on Thu/Fri! I have an official #MultiJuicer LEGO tower with me, so we can have some for-fun-CTF! Details w/ session links: linkedin.com/posts/bkimmini…

We just released v17.3.0! It brings Juice Shop to #Angular 19, fixes the non-default theme colors, and adds a convenient search filter to the language selection! Full release notes: github.com/juice-shop/jui…

@MTGSecretLair Zaya, the Three-Legged - ⚪⚫ - 1/3 Creature Cat - Toyfall: Gains protection from green and battle cry until end of turn.

@owasp_juiceshop @j12934 @owasp @bkimminich Congrats @j12934, I had sort of assumed that @bkimminich was going to be "benevolent dictator for life" :)

We are proudly announcing that @j12934 is as of today officially co-leading the @owasp Juice Shop project together with @bkimminich! 🧃🥳 👉 Read more about this in our blog post owasp.org/blog/2025/01/2…

Wow, in less than a week we reached over 200 followers on #BlueSky, which is double of where we are on #Mastodon and already >4% of our Twitter/X follower count! 🥳 Thanks & keep 'em coming! ♥️

We are now also on BlueSky (bsky.app/profile/owasp-…) and will test cross-posting via OpenVibe with our Mastodon (@owasp_juiceshop" target="_blank" rel="nofollow noopener">fosstodon.org/@owasp_juicesh…) account. For the time being, Twitter/X will be fed separately still by manual copy-paste-posting as we're nowhere near 5k followers elsewhere

We just released v11.0.0 of our CTF Extension tool! github.com/juice-shop/jui… It fixes a few smaller bugs, adds support for multiple flag keys (on @ctfdio only) and shifts the supported @nodejs versions from 16-20 to 18-22