Kickstart Your Cyber Career - Sec+ Study Group

Let's have some fun today!

OWASP has a deliciously insecure site known as JuiceShop

https://juice-shop.herokuapp.com/#

It's a wonderland for the aspiring cyber analyst, a shining example of Worst Practices when building a website.

You can challenge yourself to go in blind, or get some hints here

https://pwning.owasp-juice.shop/companion-guide/latest/index.html

Some tools to get you started:

Dirbuster - enumerate directories

www.kali.org

Screenshots dirbuster

Argus - all-in-one site recon

github.com

The Ultimate Information Gathering Toolkit. Contribute to jasonxtn/Argus development by creating an account on GitHub.

Ffuf - URL fuzzing

github.com

Fast web fuzzer written in Go. Contribute to ffuf/ffuf development by creating an account on GitHub.

SecLists - all the wordlists you coud ever want

github.com

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, ...

@Everyone