Module 0: OWASP Juice Shop Lab Environment Setup
Kali WSL2, Docker, Burp Suite, and the authorized Juice Shop lab used by later modules.
15 pages
Techclick OWASP classroom resources
OWASP Top 10 2025, one named folder.
Lab setup first, then A01 through A10. Sign in with your Techclick account to open any PDF. After login, this folder is saved under Profile → Resources.
- 11 downloadable PDFs
- 167 pages total
- Juice Shop labs
- Techclick login required
Folder: OWASP Top 10
Your 11 PDF guides
Account login is required before viewing.
A01 Broken Access Control
Missing access checks, IDOR, and privilege paths — theory plus Juice Shop labs.
15 pagesA02 Security Misconfiguration
Default credentials, open services, and unsafe headers in a Juice Shop lab.
15 pagesA03 Software Supply Chain Failures
CVE, SCA, SBOM, npm audit, Trivy, and cases such as SolarWinds and log4shell.
15 pagesA04 Cryptographic Failures
Weak crypto and plaintext secrets, with Juice Shop storage and transport labs.
15 pagesA05 Injection
SQL injection, NoSQL injection, XSS, and AI/LLM prompt injection labs.
16 pagesA06 Insecure Design
Threat modeling, abuse cases, and Juice Shop business-logic labs.
16 pagesA07 Authentication Failures
Broken login, session, and credential flows in authorized Juice Shop labs.
15 pagesA08 Software and Data Integrity Failures
Integrity checks, JWT attacks, mass assignment, and remediation labs.
15 pagesA09 Security Logging and Alerting Failures
Juice Shop logs through Microsoft Sentinel detection engineering.
15 pagesA10 Mishandling of Exceptional Conditions
Error handling and fuzzing when the app meets unexpected input.
15 pagesLogin protected: none of these PDFs can be viewed without a valid Techclick session.
Profile ready: signing in saves this folder to the learner profile.
Stable page: share this topic page; learners sign in before opening a PDF.