This repo contains some fake "malware" to use against OWASP Juice Shop in its SSTI and SSRF Challenges.
This "malware" is actually completely harmless. It does not do anything malicious! But don't just take our word 😉 for it:
🔬 Put on your lab coat and reverse engineer the "malware" to find out what it actually does!
ℹ️ To clarify, you will need to perform this task to be able to solve the SSTI and SSRF challenges.
😷 Only use the files downloaded from this repository when a trustworthy (sic!) Juice Shop instance pointed you here!
🔎 For your own safety please take the time to verify the SHA-256 hashsum (and linked VirusTotal report) of the file you are planning to use:
- juicy_malware_linux_amd_64:
6eb43523dde0415730dd10f11b4988cf7e27d147d7ad6489c984aed69553a5db - juicy_malware_linux_arm_32:
385ba90e2d7424f6acb84f38441e2b6e90c266dc9f7dcdd6ea63c76d4cf011ac - juicy_malware_linux_arm_64:
038bdcdeab4265c47cdb3ca0eb7f81f1e02f8b4c99f92fa6a4849fc02c43482c - juicy_malware_macos_64:
c7745423866d53d398d8eac16821e90cf7a60bf9bf060eff298b996df44e25e4 - juicy_malware_windows_64.exe:
9505c1484346504b533f4d74313dcd81d6d8641fb81b8876db63ff854d3b8b3c