Original Post: Gin and Juice Shop: put your scanner to the test | Blog
The article, written by Matt Atkinson and posted on May 16, 2022, introduces the Gin and Juice Shop, a deliberately vulnerable web application created by Carlos Montoya for security testing purposes. The shop, designed to mimic real-world websites with features like CSRF tokens and extensive JavaScript, serves as a challenging target for web vulnerability scanners. Montoya’s creation is riddled with security vulnerabilities including XSS, SQLi, and OAST-related issues. The article encourages the use of Burp Scanner, available in Burp Suite Professional or Enterprise Edition, to identify these vulnerabilities. The article also provides links to guides for those new to Burp Scanner and invites users to share their feedback.
Go here to read the Original Post