Lion Cipher Lab
Stand up OWASP Juice Shop as your own safe practice target
- AppSec / DevSecOps
- Beginner
- ~30 min
- Free · no account required
Why it matters
A huge share of hands-on web-security training — training rooms, bug-bounty practice, course exercises — is written around OWASP Juice Shop and simply assumes you can spin it up. Juice Shop is a modern web application that is intentionally full of vulnerabilities, published by OWASP specifically so people have something legal and realistic to practice on. Getting it running once, on your own machine, gives you a safe, disposable, unlimited practice target that you are unambiguously authorized to test — which is the honest way to learn offensive web skills without ever touching a system you…
What you'll learn
- running a container from a public image
- port-mapping a container to localhost
- hosting a deliberately vulnerable app safely
- starting, listing & stopping containers
- safe home web-app lab discipline
Steps in this lab
- The one rule, before anything downloads
- What OWASP Juice Shop is, in one breath
- Confirm your lab engine is ready
- Pull and run Juice Shop, bound to localhost
- Open it in your browser
- Take the tour (look, don't attack)
- Start it hands-off, list it, and stop it
- What you just built — and why it's the honest way to learn