Get the latest tech news
OWASP Juice Shop: Hacking a Modern Web Application
In this article, we're going to look at web application security, and attack OWASP Juice Shop using XSS.
It offers both web developers and penetration testers an excellent environment to test their security skills. This article is going to demonstrate just one of the vulnerabilities within Juice Shop, as we don’t want to ruin the fun – there’s nothing more satisfying than discovering them yourself! Flaws that allow these attacks to succeed are quite widespread and occur anywhere a web application uses input from a user within the output it generates without validating or encoding it.
Or read this on Hacker News