Professor Messer offers free video training, study notes, and study group replays for CompTIA A+, Network+, and Security+.
Juice Shop
OWASP Juice Shop is an intentionally insecure web application for security training, awareness demonstrations, CTFs, and tool testing.
About Juice Shop
OWASP Juice Shop is an intentionally insecure web application for security training. It provides hacking challenges of varying difficulty based on OWASP Top Ten and other real-world flaws, with progress tracked on a score board.
It can be used for awareness demonstrations, CTFs, and testing security tools against JavaScript-heavy frontends and REST APIs.
Key features
- Hacking challenges of varying difficulty using underlying vulnerabilities
- Coverage of OWASP Top Ten and other real-world flaws
- Score board that tracks hacking progress
- Use in awareness demonstrations and security training
- Use in CTF events
- Test bed for security tools with JavaScript frontend and REST APIs
Best for: Security learners, trainers, CTF organizers, and tool testers who need an intentionally vulnerable practice application.
Good for
- Includes OWASP Top Ten and additional real-world flaws
- Offers challenges at different difficulty levels
- Tracks challenge progress on a score board
Juice Shop at a glance
- Category
- Education & Learning › Learn to Code
- Type
- Website
- Pricing
- Not confirmed. Check the site
- Platforms
- Web
- Open source
- Not stated
- Language
- English
- Last checked
- Oct 5, 2026 · Online when checked
- Listed
- Oct 5, 2026
Juice Shop alternatives
Tools and sites you could use instead, ranked by how closely they match.
PortSwigger Web Security Academy offers free online training and interactive labs for web application security.
How DNSSEC Works explains DNS Security Extensions through an illustrated guide to its purpose and operation.
Hacker101 offers a free web security class with lessons and Capture the Flag challenges.
Reverse Engineering Academy covers fundamentals of reverse engineering, binary analysis, and software security.
echoCTF.RED provides offensive and defensive cybersecurity training labs and community access.
Popular in Learn to Code
Well-known listings from the same topic.
Codelabscodelabs.developers.google.comScratchscratch.mit.eduTelegram Bot APIcore.telegram.org/botsStudent Developer Packeducation.github.com/packHacksplaininghacksplaining.comQB64SourceCodeqb64tutorial.com
Juice Shop FAQ
What is Juice Shop used for?
Security training, awareness demonstrations, CTFs, and testing security tools.
What kinds of vulnerabilities does it contain?
Vulnerabilities from the OWASP Top Ten and other flaws found in real-world applications.
How is hacking progress tracked?
Progress is tracked on a score board, and finding this score board is one of the easy challenges.
Is something wrong or out of date?
Tell us and an editor will check it.
Own this website?
Claim this listing
Claim the listing and suggest updates yourself. An editor checks every claim first.