OWASP Juice Shop v6.4.1 part of the answer

OWASP Juice Shop v6.4.1 part of the answer

OWASP Juice Shop is a range environment designed for safety skills training.

After the installation is complete the interface:

1. Score Board
   The problem is to find a hidden scoring interface, which can be detected by viewing the source code of the Web page.
   
   After you open the page
   
2. Admin section&error Handling
   Visit the Store Management section. This site A tool blasting will crash, so here to use the manual, after trying the admin and administrator are unsuccessful, Baidu found a bit of administration, try, success
   
3. Password Strength
   Login Admin user, click Login, construct the statement
   
   Successful landing
   
4. Five-star Feedback
   Remove all 5-Star Feedback
   
   Complete
   
5. XSS Tier 1
   Insert malicious code into the page, feel free to find a box, construct the statement
   <script>alert("XSS")</script>
   
   Enter, complete
   
6. Zero Stars
   The simplest one, feel free to login to a user, at "Contact Us", feel free to send a feedback, and then change the contents of the packet
   
   Change "2" to 0
   
7. Basket Access
   Go into someone else's shopping basket, very simple, only need to change the package can
   
   Change "1" to another number and send it
   
8. Password Strength
   Specify the use of passwords to login, without statements. Open the tool password explosion, the password is admin123, back to the login interface, login can be completed
   
   

9. Reset Jim's passwordbr/> through the previous question can be concluded that the mailbox is "@juice-sh.op", open the Login interface, click on the forgotten password, enter the mailbox
   < p="">

   The Samuel from the Star Wars stem.

10. Login Jim
    Change the user Jim's password and then login directly

Summarize
This infiltration environment contains a number of representative loopholes, in many loopholes also need to crawl the data packets to analyze, because of their own technology is not enough, so only solve the above problems, we have to say that the environment for the first person in this area is good

OWASP Juice Shop v6.4.1 part of the answer