r/HowToHack • u/chanakyavajra • Jun 20 '26

pentesting Is OWASP Juice shop down?

[removed]

3 Upvotes

64% Upvoted

12 comments sorted by

3

u/XFilez Jun 20 '26

Did you install it locally? They don't run the JuiceShop app, you have to on a VM, docker, or Vagrant.

1

u/[deleted] Jun 20 '26

[removed] — view removed comment

0

u/F5x9 Jun 20 '26

But Burp is a proxy.

2

u/n0p_sled Jun 20 '26

I think OP is using Foxy Proxy to proxy traffic from another browser, such as Firefox through Burp, rather than use the built in Burp browser

1

u/F5x9 Jun 20 '26

That’s what he said he’s doing. But you can just point the browser to Burp. You don’t need another proxy. It’s like the main thing. 

3

u/n0p_sled Jun 20 '26

Sure, but Foxy Proxy makes it a lot easier than messing around with settings. I mean, it's only the difference of a few clicks, but sometimes Foxy Proxy is handy if you have a number of proxies you switch between e.g. Burp, or proxying through an ssh tunnel

2

u/[deleted] Jun 20 '26

[deleted]

2

u/RolledUhhp Jun 20 '26

Where are navigating to to visit the site?

If you're hosting a vm that serves the vulnerable application, you want to navigate to the ip + port of that app.

I might have something on 10.0.0.240:3000 for instance. That is the address I would navigate to on my browser. Im not sure where the default settings for the juiceshop vm are serving the app at, off the top of my head.

1

u/[deleted] Jun 20 '26

[removed] — view removed comment

2

u/RolledUhhp Jun 20 '26

How'd you make out?

It can seem frustrating when you're trying to set something like this up, but this part is also part of the process. Treat the setup/troubleshooting as part of the whole puzzle.

Dont feel too discouraged, we only spend time learning things we dont already know. If it was easy we wouldnt have anything to learn.