Skip to content

Latest commit

 

History

History
47 lines (35 loc) · 1.95 KB

README.md

File metadata and controls

47 lines (35 loc) · 1.95 KB
Raw

Juice Shop Solver

  • Summary
  • [Target Audience] To test your Juice Shop server
  • Requirements
  • [How To Run](#How To Run)

Summary

This is some small enhancements from the orginal code that Joe Butler posted on GitHub https://github.com/incognitjoe/juice-shop-solver A collection of Python functions for solving the various challenges in the OWASP Juice Shop, using Requests and for two challenges, Selenium 3.0. 100% complete for release 2.18, future versions may change the method and difficulty of any or all of the challenges.

Target Audience

Testers interested in security testing and automation primarily. Assumes some familiarity with security concepts and the Python programming language.

Requirements

How To Run

  • Clone this repo
  • cd into the directory you created locally
  • pip install -r requirements.txt(Create a virtualenv first if you'd like)
  • Start the Juice Shop application
  • ./solutions.py, then wait a minute

Why?

I'm a software tester looking to improve my security and automation knowledge, seemed like a fun way to kill two birds with one stone. I prefer working with APIs directly when I can, so for simplicity the only challenges that require Selenium are ones that must execute some Javascript(Python, naturally, does not have a Javascript engine included.)

The actual exploratory effort and techniques used to prepare this repository have been written up in my blog here.