yoshi-org/juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

TypeScript

MIT License

OWASP Juice Shop is an intentionally insecure web application designed for security training, awareness demos, and CTFs. It includes vulnerabilities from the OWASP Top Ten and other real-world flaws, allowing users to practice penetration testing and exploit discovery.

Total donated

Undistributed

Share with your subscribers:

Recipients

How the donated funds are distributed

Support the dependencies of yoshi-org/juice-shop

mgol/check-dependencies

Checks if currently installed npm dependencies are installed in the exact same versions that are specified in package.json

dscape/clarinet

SAX based evented streaming JSON parser in JavaScript (browser and node)

Marak/colors.js

get colors in your node.js console

node-config/node-config

Configuration control for production node deployments

mickhansen/dottie.js

Fast and safe nested object access and manipulation in JavaScript

ethers-io/ethers.js

A complete and compact Ethereum library, for dapps, wallets and any other tools.

jetersen/express-ipfilter

A light-weight IP address based filtering system

auth0/express-jwt

JWT authentication middleware.

express-rate-limit/express-rate-limit

Basic IP rate-limiting middleware for Express. Use to limit repeated requests to public APIs and/or endpoints such as password reset.

modosc/express-robots-txt

Express middleware to serve and generate robots.txt

gergelyke/express-security.txt

helmetjs/feature-policy

Middleware to set the Feature-Policy HTTP header

rogerc/file-stream-rotator

Automated stream rotation useful for log files

nspragg/filesniffer

Search files the easy way.

tommybananas/finale

Create REST resources and controllers with Sequelize and Express or Restify

jprichardson/node-fs-extra

fs-extra contains methods that aren't included in the vanilla Node.js fs package. Such as recursive mkdir, copy, and remove.

nol13/fuzzball.js

Fuzzy string matching algorithms and utilities, port of the TheFuzz Python library.

isaacs/node-glob

the most correct and second fastest glob implementation in JavaScript

isaacs/node-graceful-fs

A drop-in replacement for fs, making various improvements.

gruntjs/grunt

The JavaScript Task Runner

exo-dev/grunt-replace-json

Updates attributes of json files.

niieani/hashids.js

Generate YouTube-like ids from numbers. Use Hashids when you do not want to expose your database ids to the user.

helmetjs/helmet

help secure Express/Connect apps with various HTTP headers

mdevils/html-entities

Fastest HTML entities encode/decode library.

mashpie/i18n-node

lightweight translation module with dynamic json storage

auth0/node-jsonwebtoken

JSON Web Token implementation (symmetric and asymmetric)

Caligatio/jsSHA

jsSHA implements the complete Secure Hash Standard (SHA) family (SHA-1, SHA-224/256/384/512, SHA3-224/256/384/512, SHAKE128/256, cSHAKE128/256, and KMAC128/256) with HMAC

juice-shop/juicy-chat-bot

A light-weight and totally "secure" library to easily deploy simple chat bots

marudor/libxmljs2

libxml bindings for v8 javascript engine

c58/marsdb

MarsDB is a lightweight client-side MongoDB-like database, Promise based, written in ES6

lafikl/median

a small module for node and browser to calculate median

mapbox/node-pre-gyp

Node.js native addon binary install tool

mmckegg/notevil

Evalulate javascript like the built-in eval() method but safely

yeojz/otplib

TypeScript-first library for TOTP and HOTP with multi-runtime and plugin support

foliojs/pdfkit

A PDF generation library for Node.js

Support the dependencies

Support the repos that depend on this repository

Top contributors

bkimminich

18665 contributions

J12934

784 contributions

Aashish683

229 contributions

greenkeeper[bot]

151 contributions

MarcRler

150 contributions

agrawalarpit14

136 contributions

Scar26

124 contributions

JuiceShopBot

114 contributions

ShubhamPalriwala

94 contributions

shoebpate1

85 contributions

Recent events

Kivach works on the Obyte network, and therefore you can track all donations.

No events yet