Juice-shop owasp Dockerfile

this Repo is for practicing juice-shop/Dockerfile at master · juice-shop/juice-shop · GitHub , what are the bugs in Dockerfile?

Why would there be bugs? And why is it for practicing? Do you mean you use it to practice?

Please ask a specific question, otherwise it will look like you are just advertising a repository. No one will analyze a Dockerfile to find a bug in something which might not be there at all without any clue.

OWASP Juice Shop is probably the most modern and sophisticated insecure web application! It can be used in security trainings, awareness demos, CTFs and as a guinea pig for security tools! Juice Shop encompasses vulnerabilities from the entire OWASP Top Ten along with many other security flaws found in real-world applications!

The official companion guide (link) will tell you which bugs you should be able to find.

1 Like

I don’t think a built application written in javascript should be under node modules, but I’m not a nodejs or typescript developer and I know nothing about juice-shop unfortunately. Probably I should.