Web Application Security and OWASP Juice Shop
Once you've learned the foundational principles of software developement, learning cybersecurity can seem like starting a daunting task all over again.
However, now more than ever there are incredible reseources for the self taught. Over this last semester, I had a software security assignment that was
perhaps one of my favorite projects of all time. The OWASP Juice Shop project is an interactive learning tool designed to help students of software security
flex their hacker skills in a safe environment. In a practical sense, the Juice Shop is a fully functional store front and web application running locally on your machine.
The catch is that this web application does everything wrong security wise. Therefore it's your job to exploit and document as many vulnerabilities as you can.
I think the freedom, interactivity, and critical thinking involved in this exercise really set it above others of the same ilk, and with it being developed by the OWASP
organization, you can be sure that they know what they're talking about.
I won't post my entire report here (since that rather negates the assignments purpose), but
I wholeheartedly recommend it to fellow learners.