Packages and Binaries:

juice-shop

Insecure web application
This package contains a modern and sophisticated insecure web application! It can be used in security trainings, awareness demos, CTFs and as a guinea pig for security tools! Juice Shop encompasses vulnerabilities from the entire OWASP Top Ten along with many other security flaws found in real-world applications!

WARNING: Do not upload it to your hosting provider’s public html folder or any Internet facing servers, as they will be compromised.

Installed size: 1.04 GB
How to install: sudo apt install juice-shop

juice-shop

root@kali:~# juice-shop -h
┏━(Message from Kali developers)
┃
┃ The command juice-shop is deprecated. Please use juice-shop-start instead.
┃
┗━

juice-shop-start

root@kali:~# juice-shop-start -h

┏━(Message from Kali developers)
┃ 
┃ Service status:
┃   * juice-shop.service - juice-shop web application
┃        Loaded: loaded (/usr/lib/systemd/system/juice-shop.service; 5:185mdisabled; preset: 5:185mdisabled)
┃        Active: active (running) since Wed 2026-09-02 08:59:03 EDT; 5s ago
┃    Invocation: a0be806a56ff4009bd16095642bf3a96
┃      Main PID: 865149 (npm start)
┃         Tasks: 235:245m (limit: 9443)
┃        Memory: 305.6M (peak: 305.8M)
┃           CPU: 2.530s
┃        CGroup: /system.slice/juice-shop.service
┃                |-5:245m865149 "npm start"
┃                |-5:245m865162 sh -c "node build/app"
┃                `-5:245m865163 node build/app
┃   
┃   Sep 02 08:59:04 kali npm[865163]: info: Required file server.js is present (OK)
┃   Sep 02 08:59:04 kali npm[865163]: info: Required file main.js is present (OK)
┃   Sep 02 08:59:04 kali npm[865163]: info: Required file index.html is present (OK)
┃   Sep 02 08:59:04 kali npm[865163]: info: Required file tutorial.js is present (OK)
┃   Sep 02 08:59:04 kali npm[865163]: info: Required file styles.css is present (OK)
┃   Sep 02 08:59:04 kali npm[865163]: info: Required file runtime.js is present (OK)
┃   Sep 02 08:59:04 kali npm[865163]: info: Required file vendor.js is present (OK)
┃   Sep 02 08:59:04 kali npm[865163]: info: Port 42000 is available (OK)
┃   Sep 02 08:59:04 kali npm[865163]: info: Chatbot training data botDefaultTrainingData.json validated (OK)
┃   Sep 02 08:59:04 kali npm[865163]: info: Domain https://www.alchemy.com/ is reachable (OK)
┃ 
┗━

juice-shop-stop

root@kali:~# juice-shop-stop -h

┏━(Message from Kali developers)
┃ 
┃ Service status:
┃   * juice-shop.service - juice-shop web application
┃        Loaded: loaded (/usr/lib/systemd/system/juice-shop.service; 5:185mdisabled; preset: 5:185mdisabled)
┃        Active: inactive (dead)
┃   
┃   Sep 02 08:59:04 kali npm[865163]: info: Required file styles.css is present (OK)
┃   Sep 02 08:59:04 kali npm[865163]: info: Required file runtime.js is present (OK)
┃   Sep 02 08:59:04 kali npm[865163]: info: Required file vendor.js is present (OK)
┃   Sep 02 08:59:04 kali npm[865163]: info: Port 42000 is available (OK)
┃   Sep 02 08:59:04 kali npm[865163]: info: Chatbot training data botDefaultTrainingData.json validated (OK)
┃   Sep 02 08:59:04 kali npm[865163]: info: Domain https://www.alchemy.com/ is reachable (OK)
┃   Sep 02 08:59:08 kali systemd[1]: Stopping juice-shop.service - juice-shop web application...
┃   Sep 02 08:59:08 kali systemd[1]: juice-shop.service: Deactivated successfully.
┃   Sep 02 08:59:08 kali systemd[1]: Stopped juice-shop.service - juice-shop web application.
┃   Sep 02 08:59:08 kali systemd[1]: juice-shop.service: Consumed 2.625s CPU time over 5.820s wall clock time, 305.9M memory peak.
┃ 
┗━