Host and manage multiple Juice Shop instances for security trainings and Capture The Flags

🚀 DevSecOps intro elective — 10 hands-on labs + 2 bonus hardening OWASP Juice Shop: threat modeling (STRIDE/Threagile), signed commits & secret scanning, SBOM/SCA, SAST + DAST, IaC security (Checkov/KICS), container & supply-chain hardening (Trivy, Cosign), runtime detection with Falco, and DefectDojo vuln management.

This repository is a curated resource for aspiring bug hunters, offering hands-on labs, tools, and structured guidance to support your learning and practical development in the field of ethical hacking and vulnerability research.

Deploy your own lab of web application penetration testing with docker and docker-compose, webgoat, dvwap, bwapp and Juice Shop

Web Application Pentesting Lab with over 40 plus vulnerability, which covers all the owasp top 10 issues.

Quickly get a GitLab network up and running. The network consists of a GitLab server, docker-in-docker compatible GitLab runners, and SonarQube

A collection of scripts to automate the deployment of MultiJuicer and CTFd in Kubernetes

Report from Juice Shop Security Testing and notes from OTWA training

This script uses demo-magic.sh to demonstrate how to build and deploy an NGINX Plus Ingress Controller/App Protect in the AWS EKS cluster to protect an OWASP Juice-Shop App .

Docker-based web penetration testing lab with 7 intentionally vulnerable targets — for beginners learning ethical hacking

Flutter desktop app for juice shop management, invoicing, and local storage, using Hive, PDF generation, MVVM Architecture, and Cubit/Bloc state management.

CyberCrawler - Projet d’ingénierie en cybersécurité en Python, conçu pour automatiser la collecte, l’analyse et certaines vérifications de sécurité applicative web.

OWASP Juice shop dockerized with CTF option

My Bachelor Project - DAST Integration in CICD with OWASP ZAP

Simple juice shop and ctfd setup

OWASP Juice Shop hosted by Traefik SSL Reverse Proxy and Authelia Single-Sign-On (SSO) provider. Comes with Cowrie SSH honeypot.

Pentest Lab: Recon (Nmap) + DAST (OWASP ZAP baseline/full) against OWASP Juice Shop with reproducible HTML/TXT/PNG evidence and optional SOC correlation.

Little python script to generate random passwords that meets certain requirements, to help solve the "Login Support Team" challenge from OWASP Juice Shop

a tool to easily start a vulnerable docker container

Pentest SQLi - Projet d’ingénierie en cybersécurité : audit d’application web vulnérable (OWASP Juice Shop), exploitation d’injections SQL et automatisation de tâches d’analyse via Python et Burp Suite.