Packages and Binaries:

juice-shop

Insecure web application
This package contains a modern and sophisticated insecure web application! It can be used in security trainings, awareness demos, CTFs and as a guinea pig for security tools! Juice Shop encompasses vulnerabilities from the entire OWASP Top Ten along with many other security flaws found in real-world applications!

WARNING: Do not upload it to your hosting provider’s public html folder or any Internet facing servers, as they will be compromised.

Installed size: 1.04 GB
How to install: sudo apt install juice-shop

juice-shop

root@kali:~# juice-shop -h
┏━(Message from Kali developers)
┃
┃ The command juice-shop is deprecated. Please use juice-shop-start instead.
┃
┗━

juice-shop-start

root@kali:~# juice-shop-start -h

┏━(Message from Kali developers)
┃ 
┃ Service status:
┃   * juice-shop.service - juice-shop web application
┃        Loaded: loaded (/usr/lib/systemd/system/juice-shop.service; 5:185mdisabled; preset: 5:185mdisabled)
┃        Active: active (running) since Wed 2026-06-17 12:19:34 EDT; 5s ago
┃    Invocation: 5847325aacee4b78b3e2fb9b3c22c444
┃      Main PID: 818827 (npm start)
┃         Tasks: 235:245m (limit: 9444)
┃        Memory: 262.6M (peak: 262.7M)
┃           CPU: 1.270s
┃        CGroup: /system.slice/juice-shop.service
┃                |-5:245m818827 "npm start"
┃                |-5:245m818840 sh -c "node build/app"
┃                `-5:245m818841 node build/app
┃   
┃   Jun 17 12:19:35 kali npm[818841]: info: Required file server.js is present (OK)
┃   Jun 17 12:19:35 kali npm[818841]: info: Required file index.html is present (OK)
┃   Jun 17 12:19:35 kali npm[818841]: info: Required file styles.css is present (OK)
┃   Jun 17 12:19:35 kali npm[818841]: info: Required file main.js is present (OK)
┃   Jun 17 12:19:35 kali npm[818841]: info: Required file tutorial.js is present (OK)
┃   Jun 17 12:19:35 kali npm[818841]: info: Required file runtime.js is present (OK)
┃   Jun 17 12:19:35 kali npm[818841]: info: Required file vendor.js is present (OK)
┃   Jun 17 12:19:35 kali npm[818841]: info: Port 42000 is available (OK)
┃   Jun 17 12:19:35 kali npm[818841]: info: Chatbot training data botDefaultTrainingData.json validated (OK)
┃   Jun 17 12:19:35 kali npm[818841]: info: Domain https://www.alchemy.com/ is reachable (OK)
┃ 
┗━

juice-shop-stop

root@kali:~# juice-shop-stop -h

┏━(Message from Kali developers)
┃ 
┃ Service status:
┃   * juice-shop.service - juice-shop web application
┃        Loaded: loaded (/usr/lib/systemd/system/juice-shop.service; 5:185mdisabled; preset: 5:185mdisabled)
┃        Active: inactive (dead)
┃   
┃   Jun 17 12:19:35 kali npm[818841]: info: Required file tutorial.js is present (OK)
┃   Jun 17 12:19:35 kali npm[818841]: info: Required file runtime.js is present (OK)
┃   Jun 17 12:19:35 kali npm[818841]: info: Required file vendor.js is present (OK)
┃   Jun 17 12:19:35 kali npm[818841]: info: Port 42000 is available (OK)
┃   Jun 17 12:19:35 kali npm[818841]: info: Chatbot training data botDefaultTrainingData.json validated (OK)
┃   Jun 17 12:19:35 kali npm[818841]: info: Domain https://www.alchemy.com/ is reachable (OK)
┃   Jun 17 12:19:40 kali systemd[1]: Stopping juice-shop.service - juice-shop web application...
┃   Jun 17 12:19:40 kali systemd[1]: juice-shop.service: Deactivated successfully.
┃   Jun 17 12:19:40 kali systemd[1]: Stopped juice-shop.service - juice-shop web application.
┃   Jun 17 12:19:40 kali systemd[1]: juice-shop.service: Consumed 1.288s CPU time over 5.193s wall clock time, 262.9M memory peak.
┃ 
┗━