ZTEdge WAI OWASP Directory Traversal Issue Demo
Dr. Chase Cunningham (aka Dr. Zero Trust) recently set up a fictional Juice Shop to demonstrate an innovative isolation-based solution for protecting web applications from the most dangerous threats, as ranked in the OWASP Top 10. The app, which he created on the HyperQube test platform, is designed to be super vulnerable – with “as many holes as Swiss cheese.”
In this short demo, the first of a series in which he attacks his own Juice Shop in various ways, Chase presents a scenario for “Broken Access Control” -- #1 in OWASP’s 2021 list).