{
"2": "2",
"3": "3",
"Apple Juice (1000ml)": "Apfelsaft (1000ml)",
"The all-time classic.": "Der Allzeitklassiker.",
"Apple Pomace": "Apfeltrester",
"Finest pressings of apples. Allergy disclaimer: Might contain traces of worms. Can be sent back to us for recycling.": "Feinste ausgepresste Äpfel. Allergiehinweis: Kann Spuren von Würmern enthalten. Kann zum Recycling an uns zurück geschickt werden.",
"Banana Juice (1000ml)": "Bananensaft (1000ml)",
"Monkeys love it the most.": "Affen lieben ihn am meisten.",
"Basil Smoothie": "Basil Smoothie",
"A unique blend of fresh basil and ginger for a healthy kick.": "A unique blend of fresh basil and ginger for a healthy kick.",
"Berry Juice (1000ml)": "Berry Juice (1000ml)",
"A delicious blend of fresh forest berries.": "A delicious blend of fresh forest berries.",
"Best Juice Shop Salesman Artwork": "Bester Juice Shop-Verkäufer Kunstwerk",
"Unique digital painting depicting Stan, our most qualified and almost profitable salesman. He made a succesful carreer in selling used ships, coffins, krypts, crosses, real estate, life insurance, restaurant supplies, voodoo enhanced asbestos and courtroom souvenirs before finally adding his expertise to the Juice Shop marketing team.": "Einzigartige digitale Zeichnung, die Stan, unseren qualifiziertesten und beinahe profitablen Verkäufer zeigt. Er machte erfolgreich Karriere als Verkäufer von gebrauchten Schiffen, Särgen, Krypten, Kreuzen, Immobilien, Lebensversicherungen, Restaurant-Zubehör, Voodoo-verbessertem Asbest und Gerichtssaal-Souvenirs, bevor er endlich seine Expertise dem Marketing-Team des Juice Shop hinzufügte.",
"Bragă (500ml)": "Bragă (500ml)",
"Traditional Balkan drink made from fermented millet. Lightly sweet-sour, refreshing, and naturally energizing.": "Traditional Balkan drink made from fermented millet. Lightly sweet-sour, refreshing, and naturally energizing.",
"Carrot Juice (1000ml)": "Karottensaft (1000ml)",
"As the old German saying goes: \"Carrots are good for the eyes. Or has anyone ever seen a rabbit with glasses?\"": "Wie das alte deutsche Sprichwort sagt: \"Karotten sind gut für die Augen. Oder hat irgendwer jemals einen Hasen mit Brille gesehen?\"",
"Dragonfruit Juice (500ml)": "Dragonfruit Juice (500ml)",
"Exotic and vibrant juice made from dragonfruit.": "Exotic and vibrant juice made from dragonfruit.",
"Eggfruit Juice (500ml)": "Canistelsaft (500ml)",
"Now with even more exotic flavour.": "Jetzt mit noch exotischerem Geschmack.",
"Elderflower Cordial (500ml)": "Elderflower Cordial (500ml)",
"Floral and fragrant soft drink made from elderflowers. Traditionally enjoyed chilled.": "Floral and fragrant soft drink made from elderflowers. Traditionally enjoyed chilled.",
"Fruit Press": "Saftpresse",
"Fruits go in. Juice comes out. Pomace you can send back to us for recycling purposes.": "Obst kommt rein. Saft kommt raus. Trester kann zwecks Recycling an uns zurückgeschickt werden.",
"Grape Juice (1000ml)": "Grape Juice (1000ml)",
"Deep purple and full of antioxidants from selected grapes.": "Deep purple and full of antioxidants from selected grapes.",
"Green Smoothie": "Grüner Smoothie",
"Looks poisonous but is actually very good for your health! Made from green cabbage, spinach, kiwi and grass.": "Sieht giftig aus, aber ist wirklich sehr gut für deine Gesundheit! Aus Grünkohl, Spinat, Kiwi und Gras.",
"Juice Shop \"Permafrost\" 2020 Edition": "Juice Shop \"Permafrost\" 2020-Ausgabe",
"Exact version of OWASP Juice Shop that was archived on 02/02/2020 by the GitHub Archive Program and ultimately went into the Arctic Code Vault on July 8. 2020 where it will be safely stored for at least 1000 years.": "Exakte Version von OWASP Juice Shop, die am 02.02.2020 vom GitHub Archive Program archiviert wurde und am 8. Juli 2020 in den Arctic Code Vault ging, wo sie sicher für mindestens 1000 Jahre gelagert wird.",
"Lemon Juice (500ml)": "Zitronensaft (500ml)",
"Sour but full of vitamins.": "Sauer, aber voller Vitamine.",
"Melon Bike (Comeback-Product 2018 Edition)": "Melonenfahrrad (Comeback-Artikel 2018 Auflage)",
"The wheels of this bicycle are made from real water melons. You might not want to ride it up/down the curb too hard.": "Die Räder dieses Fahrrads werden aus echten Wassermelonen hergestellt. Du solltest es vielleicht nicht zu doll den Kantstein rauf/runter fahren.",
"Melon Juice (1000ml)": "Melon Juice (1000ml)",
"Refreshing and sweet juice made from ripe melons.": "Refreshing and sweet juice made from ripe melons.",
"OWASP Juice Shop \"King of the Hill\" Facemask": "OWASP Juice Shop \"König des Hügels\"-Gesichtsmaske",
"Facemask with compartment for filter from 50% cotton and 50% polyester.": "Gesichtsmaske mit Fach für Filter aus 50% Baumwolle und 50% Polyester.",
"OWASP Juice Shop CTF Girlie-Shirt": "OWASP Juice Shop CTF Girlie-Shirt",
"For serious Capture-the-Flag heroines only!": "Nur für waschechte Capture-the-Flag-Heldinnen!",
"OWASP Juice Shop Card (non-foil)": "OWASP Juice Shop Karte (nicht foliert)",
"Mythic rare (obviously...) card \"OWASP Juice Shop\" with three distinctly useful abilities. Alpha printing, mint condition. A true collectors piece to own!": "Mythische seltene (natürlich...) Karte \"OWASP Juice Shop\" mit drei eigenständig nützlichen Fähigkeiten. Alpha-Druck, ungebrauchter Zustand. Ein wahrlich besitzenswertes Sammlerstück!",
"OWASP Juice Shop Coaster (10pcs)": "OWASP Juice Shop Bierdeckel (10 Stk.)",
"Our 95mm circle coasters are printed in full color and made from thick, premium coaster board.": "Unsere runden 95mm Bierdeckel werden in Vollfarbe gedruckt und bestehen aus dicker Premium-Untersetzer-Pappe.",
"OWASP Juice Shop Holographic Sticker": "OWASP Juice Shop Holografischer Aufkleber",
"Die-cut holographic sticker. Stand out from those 08/15-sticker-covered laptops with this shiny beacon of 80's coolness!": "Gestanzte holgrafische Aufkleber. Hebe dich mit diesem glänzenden Leuchtfeuer aus 80er-Jahre-Coolness von den mit 08/15-Aufklebern zugekleisterten Laptops ab!",
"OWASP Juice Shop Hoodie": "OWASP Juice Shop Kaputzenpulli",
"Mr. Robot-style apparel. But in black. And with logo.": "Kleidung im Mr. Robot-Stil. Bloß in schwarz. Und mit Logo.",
"OWASP Juice Shop Iron-Ons (16pcs)": "OWASP Juice Shop Bügelbilder (16 Stk.)",
"Upgrade your clothes with washer safe iron-ons of the OWASP Juice Shop or CTF Extension logo!": "Verbessere deine Kleidung mit den waschmaschinenfesten Bügelbildern mit OWASP Juice Shop- oder CTF-Erweiterungs-Logo!",
"OWASP Juice Shop LEGO™ Tower": "OWASP Juice Shop LEGO™-Turm",
"Want to host a Juice Shop CTF in style? Build your own LEGO™ tower which holds four Raspberry Pi 4 models with PoE HAT modules running a MultiJuicer Kubernetes cluster! Wire to a switch and connect to your network to have an out-of-the-box ready CTF up in no time!": "Möchtest du ein stilvolles Juice Shop CTF veranstalten? Bau dir deinen eigenen LEGO™ -Turm, der vier Raspberry Pi 4 mit PoE HAT Modulen aufnimmt, um ein MultiJuicer Kubernetes Cluster laufen zu lassen! Verkabele es mit dem Switch und verbinde dein Netzwerk, um in wenigen Sekunden ein fertiges CTF zu haben!",
"OWASP Juice Shop Logo (3D-printed)": "OWASP Juice Shop Logo (3D-gedruckt)",
"This rare item was designed and handcrafted in Sweden. This is why it is so incredibly expensive despite its complete lack of purpose.": "Dieses seltene Stück wurde in Schweden entworfen und handgefertigt. Deshalb ist es trotz seines vollständigen Mangels an Nutzen so unglaublich teuer.",
"OWASP Juice Shop Magnets (16pcs)": "OWASP Juice Shop Magnete (16 Stk.)",
"Your fridge will be even cooler with these OWASP Juice Shop or CTF Extension logo magnets!": "Dein Kühlschrank wird mit diesen OWASP Juice Shop oder CTF Extension Logo Magneten sogar noch cooler sein!",
"OWASP Juice Shop Mug": "OWASP Juice Shop Becher",
"Black mug with regular logo on one side and CTF logo on the other! Your colleagues will envy you!": "Schwarzer Becher mit regulärem Logo auf der einen und CTF-Logo auf der anderen Seite. Deine Kollegen werden dich beneiden!",
"OWASP Juice Shop Sticker Page": "OWASP Juice Shop Aufkleberbogen",
"Massive decoration opportunities with these OWASP Juice Shop or CTF Extension sticker pages! Each page has 16 stickers on it.": "Massive Dekorationsmöglichkeiten mit diesen OWASP Juice Shop- oder CTF-Erweiterungs-Stickerbögen! Jeder Bogen hat 16 Aufkleber.",
"OWASP Juice Shop Sticker Single": "OWASP Juice Shop Einzel-Aufkleber",
"Super high-quality vinyl sticker single with the OWASP Juice Shop or CTF Extension logo! The ultimate laptop decal!": "Super-hochwertige Vinyl-Einzelaufkleber mit dem OWASP Juice Shop- oder CTF-Erweiterungs-Logo! Die ultimative Laptop-Deko!",
"OWASP Juice Shop T-Shirt": "OWASP Juice Shop T-Shirt",
"Real fans wear it 24/7!": "Echte Fans tragen es 24/7!",
"OWASP Juice Shop Temporary Tattoos (16pcs)": "OWASP Juice Shop Klebetattoos (16 Stk.)",
"Get one of these temporary tattoos to proudly wear the OWASP Juice Shop or CTF Extension logo on your skin! If you tweet a photo of yourself with the tattoo, you get a couple of our stickers for free! Please mention @owasp_juiceshop in your tweet!": "Hol dir eines dieser Abzieh-Tattoos, um das OWASP Juice Shop- oder CTF-Erweiterungs-Logo stolz auf deiner Haut zu tragen! Wenn du ein Foto von dir mit dem Tattoo twitterst, bekommst du einige Aufkleber gratis! Bitte erwähne @owasp_juiceshop in deinem Tweet!",
"OWASP Juice Shop-CTF Velcro Patch": "OWASP Juice Shop-CTF Klett-Aufnäher",
"4x3.5\" embroidered patch with velcro backside. The ultimate decal for every tactical bag or backpack!": "10x9cm gestickter Aufnäher mit Klett-Rückseite. Das ultimative Dekor für jede(n) taktische Tasche oder Rucksack!",
"OWASP SSL Advanced Forensic Tool (O-Saft)": "OWASP SSL Advanced Forensic Tool (O-Saft)",
"O-Saft is an easy to use tool to show information about SSL certificate and tests the SSL connection according given list of ciphers and various SSL configurations. More...": "O-Saft ist ein Programm, um einfach das Zertifakt und sonstige Informationen einer SSL-Verbindung zu überprüfen. Mehr...",
"OWASP Snakes and Ladders - Mobile Apps": "OWASP Schlangen und Leitern - Mobile Anwendungen",
"This amazing mobile app security awareness board game is available for Tabletop Simulator on Steam Workshop now!": "Dieses fantastische Brettspiel für Sicherheitsbewusstsein bei mobilen Anwendungen ist jetzt für Tabletop Simulator im Steam Workshop erhältlich!",
"OWASP Snakes and Ladders - Web Applications": "OWASP Schlangen und Leitern - Web-Anwendungen",
"This amazing web application security awareness board game is available for Tabletop Simulator on Steam Workshop now!": "Dieses fantastische Brettspiel für Sicherheitsbewusstsein bei Webanwendungen ist jetzt für Tabletop Simulator im Steam Workshop erhältlich!",
"Orange Juice (1000ml)": "Orangensaft (1000ml)",
"Made from oranges hand-picked by Uncle Dittmeyer.": "Aus Orangen, die von Onkel Dittmeyer handverlesen wurden.",
"Pineapple Juice (1000ml)": "Pineapple Juice (1000ml)",
"Tropical refreshment from the finest sun-ripened pineapples.": "Tropical refreshment from the finest sun-ripened pineapples.",
"Pomegranate Drink (500ml)": "Pomegranate Drink (500ml)",
"A sweet and tart refreshment inspired by classic grenadine flavors.": "A sweet and tart refreshment inspired by classic grenadine flavors.",
"Pwning OWASP Juice Shop": "Pwning OWASP Juice Shop",
"The official Companion Guide by Björn Kimminich available for free on LeanPub and also readable online!": "Der offizielle Begleitführer von Björn Kimminich ist kostenlos auf LeanPub erhältlich und auch zum online Lesen verfügbar!",
"Quince Juice (1000ml)": "Quittensaft (1000ml)",
"Juice of the Cydonia oblonga fruit. Not exactly sweet but rich in Vitamin C.": "Saft aus der Cydonia oblonga-Frucht. Nicht wirklich süß, aber reich an Vitamin C.",
"Raspberry Juice (1000ml)": "Himbeersaft (1000ml)",
"Made from blended Raspberry Pi, water and sugar.": "Aus püriertem Raspberry Pi, Wasser und Zucker.",
"Sea Buckthorn Juice (500ml)": "Sea Buckthorn Juice (500ml)",
"Tangy and slightly sour juice, extremely rich in Vitamin C and antioxidants.": "Tangy and slightly sour juice, extremely rich in Vitamin C and antioxidants.",
"Strawberry Juice (500ml)": "Erdbeersaft (500ml)",
"Sweet & tasty!": "Süß & lecker!",
"Woodruff Syrup \"Forest Master X-Treme\"": "Waldmeister-Sirup \"Forest Master X-Treme\"",
"Harvested and manufactured in the Black Forest, Germany. Can cause hyperactive behavior in children. Can cause permanent green tongue when consumed undiluted.": "Geerntet und verarbeitet im Schwarzwald, Deutschland. Kann hyperaktives Verhalten bei Kindern verursachen. Kann bei unverdünntem Konsum dauerhaft grüne Zunge verursachen.",
"Find the carefully hidden 'Score Board' page.": "Fing di sorgfäutig versteckti \"Punkteübersicht\"-Site.",
"Order Confirmation": "Order Confirmation",
"Customer": "Customer",
"Order": "Order",
"ea.": "ea.",
"Delivery Price": "Delivery Price",
"Total Price": "Total Price",
"Date": "Date",
"Bonus Points Earned": "Bonus Points Earned",
"The bonus points from this order will be added 1:1 to your wallet ¤-fund for future purchases!": "The bonus points from this order will be added 1:1 to your wallet ¤-fund for future purchases!",
"Thank you for your order!": "Thank you for your order!",
"Obtain the password (hash) of the currently logged-in user directly from a REST API endpoint.": "Obtain the password (hash) of the currently logged-in user directly from a REST API endpoint.",
"Perform a persisted XSS attack with <iframe src=\"javascript:alert(`xss`)\"> without using the frontend application at all.": "Füer ä persistänte XSS-Angriff mit <iframe src=\"javascript:alert(`xss`)\"> us, ohne derzu z Awändigsformular z bruche.",
"Gain access to any access log file of the server.": "Verschaff der Zuegriff uf irgend ä Zuegriffslog-Datei vom Server.",
"Register as a user with administrator privileges.": "Regischtrier di aus Benutzer mit Adminrächt.",
"Access the administration section of the store.": "Verschaff der Zuegriff ufe Administrationsberich vo däm Saftlade.",
"Overwrite the Legal Information file.": "Überschrib d'Datei wo di rächtleche Informatione drinne stöh.",
"Reset the password of Bjoern's OWASP account via the Forgot Password mechanism with the original answer to his security question.": "Setzt z'Passwort vo Björn's OWASP-Benutzerkonto via der Passwort vergässe-Funktion zrüg. Bruch derfür d'Originauantwort für sini Sicherheitsfrag.",
"Learn about the Token Sale before its official announcement.": "Erfahr vor der offizieue Akündigun vom Token-Verchouf.",
"Take over the wallet containing our official Soul Bound Token (NFT).": "Nimm die Brieftasche mit unserem offiziellen Soul Bound Token (NFT) in Besitz.",
"Mint the Honey Pot NFT by gathering BEEs from the bee haven.": "Präge das Honey-Pot-NFT indem du BEEs aus der Bienenzuflucht sammelst.",
"Withdraw more ETH from the new wallet than you deposited.": "Hebe mehr ETH von der neuen Brieftasche ab, als du hinterlegt hast.",
"Find an accidentally deployed code sandbox for writing smart contracts on the fly.": "Finde eine versehentlich ausgelieferte Programmier-Sandbox zum spontanen Schreiben von Smart Contracts.",
"Perform a Remote Code Execution that would keep a less hardened application busy forever.": "Füer ä Remote Code Execution düre, wo ä weniger gherteti Awändig für immer würd beschäftige.",
"Submit 10 or more customer feedbacks within 20 seconds.": "Schicke 10 oder mehr Kundenfeedbacks innerhalb von 20 Sekunden ab.",
"Change Bender's password into slurmCl4ssic without using SQL Injection or Forgot Password.": "Ändere em Bender sis Passwort i slurmCl4ssic ohne derzue SQL Injection oder d \"Passwort vergässe\" Funktion z'missbruche.",
"Order the Christmas special offer of 2014.": "Bsteu der z'Wiehnachtssonderagebot vo 2014.",
"Bypass the Content Security Policy and perform an XSS attack with <script>alert(`xss`)</script> on a legacy page within the application.": "Umgehe die Content Security Policy und führe einen XSS-Angriff mit <script>alert(`xss`)</script> auf einer Legacy-Seite innerhalb der Anwendung aus.",
"Perform a persisted XSS attack with <iframe src=\"javascript:alert(`xss`)\"> bypassing a client-side security mechanism.": "Füer ä persistänte XSS-Angriff mit <iframe src=\"javascript:alert(`xss`)\"> us u heblä dermit ä Client-seitigä Sicherheitsmechanismus us.",
"Access a confidential document.": "Grif ufenes vertroulechs Dokumänt zue.",
"Perform a DOM XSS attack with <iframe src=\"javascript:alert(`xss`)\">.": "Füer ä DOM XSS-Angriff mit <iframe src=\"javascript:alert(`xss`)\"> düre.",
"Exfiltrate the entire DB schema definition via SQL Injection.": "Stibitz z ganze Datebankschema via SQL Injection.",
"Use a deprecated B2B interface that was not properly shut down.": "Mach der ä B2B-Schnittsteu z'Nutze, wo nid richtig abgschautet worde isch.",
"Find the hidden easter egg.": "Finde das versteckte Ostereier.",
"Perform an unwanted information disclosure by accessing data cross-domain.": "Zügle Informazione ab, i däm de domäneübergrifend (cross-domain) uf Date zuegrifsch.",
"Register a user with an empty email and password.": "Registriere einen Benutzer mit leerer E-Mail und leerem Passwort.",
"Log in with the (non-existing) accountant acc0unt4nt@juice-sh.op without ever registering that user.": "Mäud di mit em (inexistänte) Benutzer acc0unt4nt@juice-sh.op a, ohni dass de dä je eis registriersch.",
"Provoke an error that is neither very gracefully nor consistently handled.": "Provozier ä Fähler, wo weder elegant no konseqänt abgfange wird.",
"Successfully redeem an expired campaign coupon code.": "Lös ä abgloffene Kampagne-Guetschiincod i. We me ne het, cha me ne ja o bruche.",
"Retrieve the language file that never made it into production.": "Retrieve the language file that never made it into production.",
"Get rid of all 5-star customer feedback.": "Wird aui 5-Stärndli Chundefeedbacks los.",
"Forge a coupon code that gives you a discount of at least 80%.": "Kreier der ä Guetschiincode wo der mindestens 80% Rabatt verschafft.",
"Post some feedback in another user's name.": "Schreibe ein Feedback im Namen eines anderen Benutzers.",
"Post a product review as another user or edit any user's existing review.": "Hingerla ä Produkbeurteilig im Name vomene angere Benutzer oder verändere ä bereits bestehendi vomene angere Benutzer.",
"Forge an almost properly RSA-signed JWT token that impersonates the (non-existing) user rsa_lord@juice-sh.op.": "Kreier es fasch suber signierts (RSA) JWT-Token füre (nid existierend) Benutzer rsa_lord@juice-sh.op.",
" (This challenge is potentially harmful on Windows!)": " (This challenge is potentially harmful on Windows!)",
"Access a developer's forgotten backup file.": "Verschaff der Zuegriff ufene Sicherigskopie vore Datei vomene Entwickler.",
"Access a salesman's forgotten backup file.": "Verschaff der Zuegriff ufene Sicherigskopie vore Datei vomene Verchöifer.",
"Inform the shop about a typosquatting imposter that dug itself deep into the frontend. (Mention the exact name of the culprit)": "Informier der Lade über ne Typosquatting-Hochstapler, wo sech töif i z Frontend inegrabe het. (Nenn der genau Name vo nim.)",
"Log in with Chris' erased user account.": "Mäud di mit em glöschte Benutzerkonto vom Chris a.",
"Steal someone else's personal data without using Injection.": "Stibitz die persönleche Date vo öber angerem, ohni dass de derzu ä Injection Agriff bruchsch.",
"Perform a persisted XSS attack with <iframe src=\"javascript:alert(`xss`)\"> through an HTTP header.": "Füer ä persischtänte XSS-Angriff mit <iframe src=\"javascript:alert(`xss`)\"> dür ne HTTP-Header düre.",
"Solve challenge #999. Unfortunately, this challenge does not exist.": "Lös d Useforderig #999. Leider existiert die aber nid.",
"Dumpster dive the Internet for a leaked password and log in to the original user account it belongs to. (Creating a new account with the same password does not qualify as a solution.)": "Suech im Internet nachemene düregsickerete Passwort u log di när mit däm ungerem Benutzername, wos derzueghört het, i. (Es längt nid, e nöie Account mit em gliche Passwort z ersteue.)",
"Identify an unsafe product that was removed from the shop and inform the shop which ingredients are dangerous.": "Fing es unsichers Produkt, wo nüme verfüegbar isch, u informier der Lade drüber, weli gfährleche Inhautsschoffe drin si.",
"Inform the shop about a typosquatting trick it has been a victim of at least in v6.2.0-SNAPSHOT. (Mention the exact name of the culprit)": "Informier der Lade über ne Typosquatting-Trick, wo ner zmingscht im v6.2.0-SNAPSHOT zum Opfer gfaue isch. (Nenn der exakt Name vo däm Schlitzohr.)",
"Log in with the administrator's user account.": "Log di mit em Benutzerkonto vom Administrator i.",
"Log in with Amy's original user credentials. (This could take 93.83 billion trillion trillion centuries to brute force, but luckily she did not read the \"One Important Final Note\")": "Melde dich mit Amys ursprünglichen Benutzerdaten an. (Ein Brute-Force-Angriff hierauf könnte 93,83 Milliarden Billionen Billionen Jahrhunderte dauern, aber glücklicherweise hat sie die \"One Important Final Note\" nicht gelesen)",
"Log in with Bender's user account.": "Melde dich mit dem Benutzerkonto von Bender an.",
"Log in with Bjoern's Gmail account without previously changing his password, applying SQL Injection, or hacking his Google account.": "Melde dich mit Björns Gmail-Benutzerkonto an, ohne zuvor sein Passwort zu ändern, SQL Injection anzuwenden oder sein Google-Konto zu hacken.",
"Log in with Jim's user account.": "Melde dich mit dem Benutzerkonto von Jim an.",
"Log in with MC SafeSearch's original user credentials without applying SQL Injection or any other bypass.": "Melde dich mit MC SafeSearchs ursprünglichen Benutzerdaten an, ohne SQL Injection oder irgendeine andere Umgehung anzuwenden.",
"Log in with the support team's original user credentials without applying SQL Injection or any other bypass.": "Melde dich mit den ursprünglichen Benutzerdaten des Support Teams an, ohne SQL Injection oder irgendeine andere Umgehung anzuwenden.",
"Put an additional product into another user's shopping basket.": "Lege ein weiteres Produkt in den Warenkorb eines anderen Benutzers.",
"Access a misplaced SIEM signature file.": "Greife auf eine falsch abgelegte SIEM-Signatur-Datei zu.",
"Like any review at least three times as the same user.": "Like eine Rezension mindestens dreimal mit demselben Benutzer.",
"Apply some advanced cryptanalysis to find the real easter egg.": "Benutze einige fortgeschrittene Kryptoanalyse, um das echte Easter Egg zu finden.",
"Let the server sleep for some time. (It has done more than enough hard work for you)": "Lass den Server für einige Zeit schlafen. (Er hat mehr als genug für dich geschuftet)",
"All your orders are belong to us! Even the ones which don't.": "All deine Bestellungen sind gehören uns! Selbst diejenigen, die nicht.",
"Update multiple product reviews at the same time.": "Aktualisiere mehrere Produktrezensionen gleichzeitig.",
"Let us redirect you to one of our crypto currency addresses which are not promoted any longer.": "Lass dich von uns zu einer unserer nicht länger beworbenen Kryptowährungsadressen weiterleiten.",
"Log in with the administrator's user credentials without previously changing them or applying SQL Injection.": "Melde dich mit den Benutzerdaten des Administrators an, ohne diese vorher zu verändern oder SQL Injection anzuwenden.",
"Place an order that makes you rich.": "Gib eine Bestellung auf, die dich reich macht.",
"💎💎💎💎💎 ₿ Unlock Premium Challenge to access exclusive content.": "💎💎💎💎💎 ₿ Unlock Premium Challenge to access exclusive content.",
"Read our privacy policy.": "Lies unsere Datenschutzrichtlinie.",
"Prove that you actually read our privacy policy.": "Beweise, dass du unsere Datenschutzrichtlinie tatsächlich gelesen hast.",
"Change the href of the link within the OWASP SSL Advanced Forensic Tool (O-Saft) product description into https://owasp.slack.com.": "Ändere das href des Links in der OWASP SSL Advanced Forensic Tool (O-Saft)-Produktbeschreibung zu https://owasp.slack.com.",
"Perform a reflected XSS attack with <iframe src=\"javascript:alert(`xss`)\">.": "Führe einen reflektierten XSS-Angriff mit <iframe src=\"javascript:alert(`xss`)\"> aus.",
"Follow the DRY principle while registering a user.": "Befolge das DRY-Prinzip bei der Registrierung eines Benutzers.",
"Reset Bender's password via the Forgot Password mechanism with the original answer to his security question.": "Setze Benders Passwort in der Passwort vergessen-Funktion mittels der Original-Antwort auf seine Sicherheitsfrage zurück.",
"Reset the password of Bjoern's internal account via the Forgot Password mechanism with the original answer to his security question.": "Setze das Passwort von Björns internem Benutzerkonto in der Passwort vergessen-Funktion mittels der Original-Antwort auf seine Sicherheitsfrage zurück.",
"Reset Jim's password via the Forgot Password mechanism with the original answer to his security question.": "Setze Jims Passwort in der Passwort vergessen-Funktion mittels der Original-Antwort auf seine Sicherheitsfrage zurück.",
"Reset Morty's password via the Forgot Password mechanism with his obfuscated answer to his security question.": "Setze Mortys Passwort in der Passwort vergessen-Funktion mittels seiner obfuskierten Antwort auf seine Sicherheitsfrage zurück.",
"Deprive the shop of earnings by downloading the blueprint for one of its products.": "Beraube den Laden seiner Einnahmen, indem du die Blaupause für eines seiner Produkte herunterlädst.",
"Request a hidden resource on server through server.": "Fordere eine versteckte Ressource über Server-zu-Server an.",
"Infect the server with juicy malware by abusing arbitrary command execution.": "Infiziere den Server mit saftiger Malware, indem du dir Arbitrary Command Execution zunutze machst.",
"Behave like any \"white-hat\" should before getting into the action.": "Verhalte dich wie ein \"White-Hat\" es sollte, bevor du loslegst.",
"Perform a persisted XSS attack with <iframe src=\"javascript:alert(`xss`)\"> bypassing a server-side security mechanism.": "Führe einen persistenten XSS-Angriff mit <iframe src=\"javascript:alert(`xss`)\"> aus und umgehe dabei einen Server-seitigen Sicherheitsmechanismus.",
"Rat out a notorious character hiding in plain sight in the shop. (Mention the exact name of the character)": "Verpetze einen berüchtigten Charakter, der sich im Laden unsichtbar gemacht hat. (Erwähne den exakten Namen des Charakters)",
"Perform a Remote Code Execution that occupies the server for a while without using infinite loops.": "Führe eine Remote Code Execution durch, die den Server, ohne Einsatz von Endlosschleifen, eine Weile beschäftigt.",
"Inform the development team about a danger to some of their credentials. (Send them the URL of the original report or an assigned CVE or another identifier of this vulnerability)": "Informiere das Entwicklungsteam über eine Gefährdung einiger ihrer Anmeldedaten. (Sende ihnen die URL der ursprünglichen Meldung oder eine zugewiesene CVE oder andere Kennung dieser Verwundbarkeit)",
"Solve the 2FA challenge for user \"wurstbrot\". (Disabling, bypassing or overwriting his 2FA settings does not count as a solution)": "Löse die 2FA-Aufgabe für den Benutzer \"wurstbrot\". (Deaktivieren, Umgehen oder Überschreiben seiner 2FA-Einstellungen zählt nicht als Lösung)",
"Forge an essentially unsigned JWT token that impersonates the (non-existing) user jwtn3d@juice-sh.op.": "Fälsche ein eigentlich unsigniertes JWT-Token, das sich als der (nicht existierende) Benutzer jwtn3d@juice-sh.op ausgibt.",
"Upload a file larger than 100 kB.": "Lade eine Datei größer als 100 kB hoch.",
"Upload a file that has no .pdf or .zip extension.": "Lade eine Datei hoch, die keine .pdf- oder .zip-Erweiterung hat.",
"Retrieve a list of all user credentials via SQL Injection.": "Greife eine Liste aller Benutzerzugangsdaten mittels SQL Injection ab.",
"Embed an XSS payload </script><script>alert(`xss`)</script> into our promo video.": "Bette einen XSS-Payload </script><script>alert(`xss`)</script> in unser Promo-Video ein.",
"View another user's shopping basket.": "Schau dir den Warenkorb eines anderen Benutzers an.",
"Inform the shop about a vulnerable library it is using. (Mention the exact library name and version in your comment)": "Informiere den Laden über eine verwendete verwundbare Bibliothek. (Erwähne den genauen Bibliotheksnamen und deren Version in deinem Kommentar)",
"Inform the shop about an algorithm or library it should definitely not use the way it does.": "Informiere den Shop über einen Algorithmus oder eine Bibliothek, die er in der vorliegenden Weise definitiv nicht nutzen sollte.",
"Enforce a redirect to a page you are not supposed to redirect to.": "Erzwinge eine Weiterleitung zu einer Seite, auf die du nicht weitergeleitet werden solltest.",
"Retrieve the content of C:\\Windows\\system.ini or /etc/passwd from the server.": "Rufe den Inhalt von C:\\Windows\\system.ini oder /etc/passwd vom Server ab.",
"Give the server something to chew on for quite a while.": "Gib dem Server etwas, an dem er eine Weile lang zu kauen hat.",
"Drop some explosive data into a vulnerable file-handling endpoint.": "Drop some explosive data into a vulnerable file-handling endpoint.",
"Give a devastating zero-star feedback to the store.": "Gib dem Laden ein verheerendes Null-Sterne-Feedback.",
"Retrieve the photo of Bjoern's cat in \"melee combat-mode\".": "Rufe das Foto von Björns Katze im \"Nahkampfkampfmodus\" ab.",
"Stick cute cross-domain kittens all over our delivery boxes.": "Beklebe unsere Lieferboxen von oben bis unten mit süßen Cross-Domain-Kätzchen.",
"Find the endpoint that serves usage data to be scraped by a popular monitoring system.": "Finde den Endpunkt, der einem beliebten Monitoring-System Nutzungsdaten zum Schürfen bereit stellt.",
"Obtain a Deluxe Membership without paying for it.": "Erhalte eine Deluxe Mitgliedschaft, ohne dafür zu bezahlen.",
"Change the name of a user by performing Cross-Site Request Forgery from another origin.": "Ändere den Namen eines Benutzers, indem du Cross-Site Request Forgery von einem anderen Ursprung ausführst.",
"Use the bonus payload <iframe width="100%" height="166" scrolling="no" frameborder="no" allow="autoplay" src="https://w.soundcloud.com/player/?url=https%3A//api.soundcloud.com/tracks/771984076&color=%23ff5500&auto_play=true&hide_related=false&show_comments=true&show_user=true&show_reposts=false&show_teaser=true"></iframe> in the DOM XSS challenge.": "Verwendende den Bonus-Payload <iframe width="100%" height="166" scrolling="no" frameborder="no" allow="autoplay" src="https://w.soundcloud.com/player/?url=https%3A//api.soundcloud.com/tracks/771984076&color=%23ff5500&auto_play=true&hide_related=false&show_comments=true&show_user=true&show_reposts=false&show_teaser=true"></iframe> in der DOM XSS-Herausforderung.",
"Reset Uvogin's password via the Forgot Password mechanism with the original answer to his security question.": "Setze Uvogins Passwort in der Passwort vergessen-Funktion mittels der Original-Antwort auf seine Sicherheitsfrage zurück.",
"Determine the answer to John's security question by looking at an upload of him to the Photo Wall and use it to reset his password via the Forgot Password mechanism.": "Bestimme die Antwort auf Johns Sicherheitsfrage, indem du einen seiner Uploads auf die Foto-Wand ansiehst und diese verwendest, um sein Passwort über den Passwort vergessen-Mechanismus zurückzusetzen.",
"Determine the answer to Emma's security question by looking at an upload of her to the Photo Wall and use it to reset her password via the Forgot Password mechanism.": "Bestimme die Antwort auf Emmas Sicherheitsfrage, indem du einen ihrer Uploads auf die Foto-Wand ansiehst und diese verwendest, um ihr Passwort über den Passwort vergessen-Mechanismus zurückzusetzen.",
"Bypass a security control with a Poison Null Byte to access a file not meant for your eyes.": "Umgehe eine Sicherheitskontrolle mit einem Poison Null Byte, um auf eine Datei zuzugreifen, die nicht für deine Augen bestimmt ist.",
"Gain read access to an arbitrary local file on the web server.": "Verschaffe dir Lesezugriff auf eine beliebige lokale Datei auf dem Webserver.",
"Close multiple \"Challenge solved\"-notifications in one go.": "Schließe mehrere \"Challenge gelöst\"-Benachrichtigungen auf einmal.",
"The Juice Shop is susceptible to a known vulnerability in a library, for which an advisory has already been issued, marking the Juice Shop as known affected. A fix is still pending. Inform the shop about a suitable checksum as proof that you did your due diligence.": "The Juice Shop is susceptible to a known vulnerability in a library, for which an advisory has already been issued, marking the Juice Shop as known affected. A fix is still pending. Inform the shop about a suitable checksum as proof that you did your due diligence.",
"A developer was careless with hardcoding unused, but still valid credentials for a testing account on the client-side.": "A developer was careless with hardcoding unused, but still valid credentials for a testing account on the client-side.",
"Inform the shop about a leaked API key. (Mention the exact key in your comment)": "Inform the shop about a leaked API key. (Mention the exact key in your comment)",
"Trick the chatbot into generating a coupon code for you despite its coupon policy saying otherwise.": "Trick the chatbot into generating a coupon code for you despite its coupon policy saying otherwise.",
"Convince the chatbot to give you a coupon of 50% or more. Because apparently a 10% max policy is just a suggestion when you ask nicely enough.": "Convince the chatbot to give you a coupon of 50% or more. Because apparently a 10% max policy is just a suggestion when you ask nicely enough.",
"Reveal some behind-the-scenes information on the chatbot as a non-admin user.": "Reveal some behind-the-scenes information on the chatbot as a non-admin user.",
"We are out of stock! Sorry for the inconvenience.": "We are out of stock! Sorry for the inconvenience.",
"You can order only up to {{quantity}} items of this product.": "You can order only up to {{quantity}} items of this product.",
"Wrong answer to CAPTCHA. Please try again.": "Wrong answer to CAPTCHA. Please try again.",
"Invalid email or password.": "Invalid email or password.",
"Current password is not correct.": "Current password is not correct.",
"Password cannot be empty.": "Password cannot be empty.",
"New and repeated password do not match.": "New and repeated password do not match.",
"Wrong answer to security question.": "Wrong answer to security question.",
"Christmas Super-Surprise-Box (2014 Edition)": "Christmas Super-Surprise-Box (2014 Edition)",
"Contains a random selection of 10 bottles (each 500ml) of our tastiest juices and an extra fan shirt for an unbeatable price! (Seasonal special offer! Limited availability!)": "Contains a random selection of 10 bottles (each 500ml) of our tastiest juices and an extra fan shirt for an unbeatable price! (Seasonal special offer! Limited availability!)",
"Rippertuer Special Juice": "Rippertuer Special Juice",
"Contains a magical collection of the rarest fruits gathered from all around the world, like Cherymoya Annona cherimola, Jabuticaba Myrciaria cauliflora, Bael Aegle marmelos... and others, at an unbelievable price!
This item has been made unavailable because of lack of safety standards. (This product is unsafe! We plan to remove it from the stock!)": "Contains a magical collection of the rarest fruits gathered from all around the world, like Cherymoya Annona cherimola, Jabuticaba Myrciaria cauliflora, Bael Aegle marmelos... and others, at an unbelievable price!
This item has been made unavailable because of lack of safety standards. (This product is unsafe! We plan to remove it from the stock!)",
"OWASP Juice Shop Sticker (2015/2016 design)": "OWASP Juice Shop Sticker (2015/2016 design)",
"Die-cut sticker with the official 2015/2016 logo. By now this is a rare collectors item. Out of stock!": "Die-cut sticker with the official 2015/2016 logo. By now this is a rare collectors item. Out of stock!",
"Juice Shop Artwork": "Juice Shop Artwork",
"Unique masterpiece painted with different kinds of juice on 90g/m² lined paper.": "Unique masterpiece painted with different kinds of juice on 90g/m² lined paper.",
"Global OWASP WASPY Award 2017 Nomination": "Global OWASP WASPY Award 2017 Nomination",
"Your chance to nominate up to three quiet pillars of the OWASP community ends 2017-06-30! Nominate now!": "Your chance to nominate up to three quiet pillars of the OWASP community ends 2017-06-30! Nominate now!",
"OWASP Juice Shop Sweden Tour 2017 Sticker Sheet (Special Edition)": "OWASP Juice Shop Sweden Tour 2017 Sticker Sheet (Special Edition)",
"10 sheets of Sweden-themed stickers with 15 stickers on each.": "10 sheets of Sweden-themed stickers with 15 stickers on each.",
"Juice Shop Adversary Trading Card (Common)": "Juice Shop Adversary Trading Card (Common)",
"Common rarity \"Juice Shop\" card for the Adversary Trading Cards CCG.": "Common rarity \"Juice Shop\" card for the Adversary Trading Cards CCG.",
"Juice Shop Adversary Trading Card (Super Rare)": "Juice Shop Adversary Trading Card (Super Rare)",
"Super rare \"Juice Shop\" card with holographic foil-coating for the Adversary Trading Cards CCG.": "Super rare \"Juice Shop\" card with holographic foil-coating for the Adversary Trading Cards CCG.",
"20th Anniversary Celebration Ticket": "20th Anniversary Celebration Ticket",
"Get your free 🎫 for OWASP 20th Anniversary Celebration online conference! Hear from world renowned keynotes and special speakers, network with your peers and interact with our event sponsors. With an anticipated 10k+ attendees from around the world, you will not want to miss this live on-line event!": "Get your free 🎫 for OWASP 20th Anniversary Celebration online conference! Hear from world renowned keynotes and special speakers, network with your peers and interact with our event sponsors. With an anticipated 10k+ attendees from around the world, you will not want to miss this live on-line event!",
"DSOMM & Juice Shop User Day Ticket": "DSOMM & Juice Shop User Day Ticket",
"You are going to the OWASP Global AppSec San Francisco 2024? Get a ticket* for this amazing side event as well! Check the juice-packed agenda here for all the details!
*=scroll down to Elevate: DSOMM and Juice Shop User Day (Sept. 25) after clicking Get Tickets on Eventbrite. Ticket price set to only covers fees for room, AV, and catering throughout the day.": "You are going to the OWASP Global AppSec San Francisco 2024? Get a ticket* for this amazing side event as well! Check the juice-packed agenda here for all the details!
*=scroll down to Elevate: DSOMM and Juice Shop User Day (Sept. 25) after clicking Get Tickets on Eventbrite. Ticket price set to only covers fees for room, AV, and catering throughout the day.",
"Your eldest siblings middle name?": "Zweitname deines ältesten Geschwisters?",
"Mother's maiden name?": "Mädchenname der Mutter?",
"Mother's birth date? (MM/DD/YY)": "Geburtsdatum der Mutter? (MM/DD/YY)",
"Father's birth date? (MM/DD/YY)": "Geburtsdatum des Vaters? (MM/DD/YY)",
"Maternal grandmother's first name?": "Vorname der Großmutter mütterlicherseits?",
"Paternal grandmother's first name?": "Vorname der Großmutter väterlicherseits?",
"Name of your favorite pet?": "Name deines Lieblingshaustiers?",
"Last name of dentist when you were a teenager? (Do not include 'Dr.')": "Nachname des Zahnarztes, bei dem du als Teenager warst? (Lasse 'Dr.' weg)",
"Your ZIP/postal code when you were a teenager?": "Deine Postleitzahl, als du ein Teenager warst?",
"Company you first work for as an adult?": "Erste Firma, für die du als Erwachsener gearbeitet hast?",
"Your favorite book?": "Dein Lieblingsbuch?",
"Your favorite movie?": "Dein Lieblingsfilm?",
"Number of one of your customer or ID cards?": "Nummer einer deiner Kundenkarten oder Ausweise?",
"What's your favorite place to go hiking?": "Was ist dein Lieblingsort zum Wandern?",
"Do you remember the security question that Jim used for his account?": "Do you remember the security question that Jim used for his account?",
"While not necessarily as trivial to research via a user's LinkedIn profile, the question is still easy to research or brute force when answered truthfully.": "While not necessarily as trivial to research via a user's LinkedIn profile, the question is still easy to research or brute force when answered truthfully.",
"When answered truthfully, all security questions are susceptible to online research (on Facebook, LinkedIn etc.) and often even brute force. If at all, they should not be used as the only factor for a security-relevant function.": "When answered truthfully, all security questions are susceptible to online research (on Facebook, LinkedIn etc.) and often even brute force. If at all, they should not be used as the only factor for a security-relevant function.",
"You need to understand what happens \"behind the scenes\", so make sure to use your DevTools or a proxy to inspect network traffic.": "You need to understand what happens \"behind the scenes\", so make sure to use your DevTools or a proxy to inspect network traffic.",
"Look for an API endpoint that already returns some user information.": "Look for an API endpoint that already returns some user information.",
"An overly generic solution for data retrieval can backfire if not properly safeguarded.": "An overly generic solution for data retrieval can backfire if not properly safeguarded.",
"You need to work with the server-side API directly. Try different HTTP verbs on different entities exposed through the API.": "Du muescht dräkt mit der serversitige API schaffe. Probier ungerschidlechi HTTP-Verbä bi de verschidenen dür d'API exponierte Entitäte us.",
"A matrix of known data entities and their supported HTTP verbs through the API can help you here.": "A matrix of known data entities and their supported HTTP verbs through the API can help you here.",
"Careless developers might have exposed API methods that the client does not even need.": "Careless developers might have exposed API methods that the client does not even need.",
"Who would want a server access log to be accessible through a web application?": "Wär möcht scho, dass äs Serverzuegriffslog via äre Webawändig cha azeigt wärde?",
"Normally, server log files are written to disk on server side and are not accessible from the outside.": "Normally, server log files are written to disk on server side and are not accessible from the outside.",
"One particular file found in the folder you might already have found during the \"Access a confidential document\" challenge might give you an idea who is interested in such a public exposure.": "One particular file found in the folder you might already have found during the \"Access a confidential document\" challenge might give you an idea who is interested in such a public exposure.",
"Drilling down one level into the file system might not be sufficient.": "Drilling down one level into the file system might not be sufficient.",
"You have to assign the unassignable.": "Probier öbis \"unzuewiisbars\" zuezwiise.",
"Register as an ordinary user to learn what API endpoints are involved in this use case.": "Register as an ordinary user to learn what API endpoints are involved in this use case.",
"Think of the simplest possible implementations of a distinction between regular users and administrators.": "Think of the simplest possible implementations of a distinction between regular users and administrators.",
"It is just slightly harder to find than the score board link.": "Es isch nume ä chlii schwärer z'finge aus der Link uf d'Punkteübersicht.",
"Knowing it exists, you can simply guess what URL the admin section might have.": "Knowing it exists, you can simply guess what URL the admin section might have.",
"Alternatively, you can try to find a reference or clue within the parts of the application that are not usually visible in the browser.": "Alternatively, you can try to find a reference or clue within the parts of the application that are not usually visible in the browser.",
"It is probably just slightly harder to find and gain access to than the score board link.": "It is probably just slightly harder to find and gain access to than the score board link.",
"There is some access control in place, but there are at least three ways to bypass it.": "There is some access control in place, but there are at least three ways to bypass it.",
"Look out for a tweet praising new functionality of the web shop. Then find a third party vulnerability associated with it.": "Suech nachemene Tweet wo nöii Funktionalitäte vom Webshop bewirbt. När suech ä dermit verbundeni Dritabierter-Verwundbarkeit.",
"Find all places in the application where file uploads are possible.": "Finde alle Stellen in der Anwendung, an denen Datei-Uploads möglich sind.",
"For at least one of these, the Juice Shop is depending on a library that suffers from an arbitrary file overwrite vulnerability.": "For at least one of these, the Juice Shop is depending on a library that suffers from an arbitrary file overwrite vulnerability.",
"You can find a hint toward the underlying vulnerability in the @owasp_juiceshop Twitter timeline.": "Einen Hinweis auf die zugrunde liegende Schwachstelle findest du in der @owasp_juiceshop Twitter-Timeline.",
"Hints to the answer to Bjoern’s question can be found by looking him up on the Internet.": "Hinweise auf die Antwort auf Björns Frage, findest du, indem du nach ihm im Internet suchst.",
"More precisely, Bjoern might have accidentally (?) doxxed himself by mentioning his security answer on at least one occasion where a camera was running.": "More precisely, Bjoern might have accidentally (?) doxxed himself by mentioning his security answer on at least one occasion where a camera was running.",
"Brute forcing the answer might be very well possible with a sufficiently extensive list of common pet names.": "Brute forcing the answer might be very well possible with a sufficiently extensive list of common pet names.",
"The developers truly believe in \"Security through Obscurity\" over actual access restrictions.": "D'Entwickler gloube tatsächlech, dass \"Security through Obscurity\" besser isch, aus tatsächlechi Zuegriffsbeschränkige.",
"Guessing or brute forcing the URL of the token sale page is very unlikely to succeed.": "Guessing or brute forcing the URL of the token sale page is very unlikely to succeed.",
"You should closely investigate the place where all paths within the application are defined.": "You should closely investigate the place where all paths within the application are defined.",
"Beating the employed obfuscation mechanism manually will take some time. Maybe there is an easier way to undo it?": "Beating the employed obfuscation mechanism manually will take some time. Maybe there is an easier way to undo it?",
"Find the seed phrase posted accidentally.": "Finde die versehentlich gepostete Seed-Phrase.",
"Discover NFT wonders among the captivating visual memories.": "Entdecke NFT-Wunder zwischen den faszinierenden visuellen Erinnerungen.",
"Try to exploit the contract of the wallet.": "Versuche, den Contract der Brieftasche auszunutzen.",
"It is just as easy as finding the Score Board.": "Es ist genauso einfach wie die Punkteübersicht zu finden.",
"The feature you need to exploit for this challenge is not directly advertised anywhere.": "D'Funkzionalität, wo de bruchsch für die Ufgabe z'meischtere, wird niene diräkt beworbe.",
"As the Juice Shop is written in pure Javascript, there is one data format that is most probably used for serialization.": "As the Juice Shop is written in pure Javascript, there is one data format that is most probably used for serialization.",
"You should try to make the server busy for all eternity.": "Du solltest versuchen, den Server für alle Ewigkeit zu beschäftigen.",
"The challenge will be solved if you manage to trigger the protection of the application against a very specific DoS attack vector.": "The challenge will be solved if you manage to trigger the protection of the application against a very specific DoS attack vector.",
"Similar to the \"Let the server sleep for some time\" challenge (which accepted nothing but NoSQL Injection as a solution) this challenge will only accept proper RCE as a solution. It cannot be solved by simply hammering the server with requests. That would probably just kill your server instance.": "Similar to the \"Let the server sleep for some time\" challenge (which accepted nothing but NoSQL Injection as a solution) this challenge will only accept proper RCE as a solution. It cannot be solved by simply hammering the server with requests. That would probably just kill your server instance.",
"After finding a CAPTCHA bypass, write a script that automates feedback submission. Or open many browser tabs and be really quick.": "Nach däm de ä Wäg hesch gfunge z CAPTCHA z'umga, schrib der es Skript wo z'Ireiche vo de Chundefeedbacks outomatisiert - oder mach der mehreri Browser-Tabs uf u bis eifach dalli schnäu.",
"You could prepare 10 browser tabs, solving every CAPTCHA and filling out the each feedback form. Then you’d need to very quickly switch through the tabs and submit the forms in under 20 seconds total.": "You could prepare 10 browser tabs, solving every CAPTCHA and filling out the each feedback form. Then you’d need to very quickly switch through the tabs and submit the forms in under 20 seconds total.",
"Should the Juice Shop ever decide to change the challenge into \"Submit 100 or more customer feedbacks within 60 seconds\" or worse, you’d probably have a hard time keeping up with any tab-switching approach.": "Should the Juice Shop ever decide to change the challenge into \"Submit 100 or more customer feedbacks within 60 seconds\" or worse, you’d probably have a hard time keeping up with any tab-switching approach.",
"Investigate closely how the CAPTCHA mechanism works and try to find either a bypass or some automated way of solving it dynamically.": "Investigate closely how the CAPTCHA mechanism works and try to find either a bypass or some automated way of solving it dynamically.",
"Wrap this into a script (in whatever programming language you prefer) that repeats this 10 times.": "Wrap this into a script (in whatever programming language you prefer) that repeats this 10 times.",
"In previous releases this challenge was wrongly accused of being based on CSRF.": "I früechere Releases het me die Useforderig fäuschlecherwiis beschudigt uf CSRF z'basiere.",
"It might also have been put into the Improper Input Validation category.": "It might also have been put into the Improper Input Validation category.",
"Bender’s current password is so strong that brute force, rainbow table or guessing attacks will probably not work.": "Bender’s current password is so strong that brute force, rainbow table or guessing attacks will probably not work.",
"Find out how the application handles unavailable products and try to find a loophole.": "Fing use, wie d Awändig mit nid verfüegbare Produkt umgeit - u versuech när basierend uf däm, äs Schlupfloch z'finge.",
"Find out how the application hides deleted products from its customers.": "Find out how the application hides deleted products from its customers.",
"Try to craft an attack string that makes deleted products visible again.": "Try to craft an attack string that makes deleted products visible again.",
"You need to get the deleted product into your shopping cart and trigger the Checkout.": "You need to get the deleted product into your shopping cart and trigger the Checkout.",
"Neither of the above can be achieved through the application frontend and it might even require (half-)Blind SQL Injection.": "Neither of the above can be achieved through the application frontend and it might even require (half-)Blind SQL Injection.",
"What is even \"better\" than a legacy page with a homegrown RegEx sanitizer? Having CSP injection issues on the exact same page as well!": "Was ist noch \"besser\" als eine veraltete Seite mit einem eigenen RegEx-Sanitizer? Auch ein Problem mit CSP-Injection auf genau derselben Seite zu haben!",
"Find a screen in the application that looks subtly odd and dated compared with all other screens.": "Find a screen in the application that looks subtly odd and dated compared with all other screens.",
"Before trying any XSS attacks, you should understand how the page is setting its Content Security Policy.": "Before trying any XSS attacks, you should understand how the page is setting its Content Security Policy.",
"For the subsequent XSS, make good use of the flaws in the homegrown sanitization based on a RegEx!": "For the subsequent XSS, make good use of the flaws in the homegrown sanitization based on a RegEx!",
"There are only some input fields in the Juice Shop forms that validate their input.": "There are only some input fields in the Juice Shop forms that validate their input.",
"Even less of these fields are persisted in a way where their content is shown on another screen.": "Even less of these fields are persisted in a way where their content is shown on another screen.",
"Bypassing client-side security can typically be done by either disabling it on the client (i.e. in the browser by manipulating the DOM tree) or by ignoring it completely and interacting with the backend instead.": "Bypassing client-side security can typically be done by either disabling it on the client (i.e. in the browser by manipulating the DOM tree) or by ignoring it completely and interacting with the backend instead.",
"Analyze and tamper with links in the application that deliver a file directly.": "Ungersuech u manipuliert Links ir Awändig, wo der diräkt ä Datei zrüglifere.",
"The file you are looking for is not protected in any way. Once you found it you can also access it.": "The file you are looking for is not protected in any way. Once you found it you can also access it.",
"Look for an input field where its content appears in the HTML when its form is submitted.": "Suech nachemene Igabefäud, wo der Inhaut nach em Abschicke aus Teu vom HTML uftoucht.",
"This challenge is almost indistinguishable from \"Perform a reflected XSS attack\" if you do not look \"under the hood\" to find out what the application actually does with the user input.": "This challenge is almost indistinguishable from \"Perform a reflected XSS attack\" if you do not look \"under the hood\" to find out what the application actually does with the user input.",
"Find out where this information could come from. Then craft an attack string against an endpoint that offers an unnecessary way to filter data.": "Find out where this information could come from. Then craft an attack string against an endpoint that offers an unnecessary way to filter data.",
"Find out which database system is in use and where it would usually store its schema definitions.": "Find out which database system is in use and where it would usually store its schema definitions.",
"Craft a UNION SELECT attack string to join the relevant data from any such identified system table into the original result.": "Craft a UNION SELECT attack string to join the relevant data from any such identified system table into the original result.",
"You might have to tackle some query syntax issues step-by-step, basically hopping from one error to the next.": "You might have to tackle some query syntax issues step-by-step, basically hopping from one error to the next.",
"As with \"Order the Christmas special offer of 2014\" this cannot be achieved through the application frontend.": "As with \"Order the Christmas special offer of 2014\" this cannot be achieved through the application frontend.",
"The developers who disabled the interface think they could go invisible by just closing their eyes.": "D'Entwickler, wo die Schnittsteu \"deaktiviert\" hei, gloube äue, sie chönnte rein dür z'schliesse vo ihre Ouge säuber unsichtbar wärde.",
"The old B2B interface was replaced with a more modern version recently.": "Die alte B2B-Schnittstelle wurde kürzlich durch eine modernere Version ersetzt.",
"When deprecating the old interface, not all of its parts were cleanly removed from the code base.": "When deprecating the old interface, not all of its parts were cleanly removed from the code base.",
"Simply using the deprecated interface suffices to solve this challenge. No attack or exploit is necessary.": "Simply using the deprecated interface suffices to solve this challenge. No attack or exploit is necessary.",
"If you solved one of the four file access challenges, you already know where to find the easter egg.": "If you solved one of the four file access challenges, you already know where to find the easter egg.",
"Simply reuse the trick that already worked for the files above.": "Nutze einfach denselben Trick, der bereits für die obigen Dateien funktioniert hat.",
"Try to find and attack an endpoint that responds with user information. SQL Injection is not the solution here.": "Versuech ä Ändpunkt z'finge u azgrife, wo mit Benutzerinformazione antwortet. SQL Injection isch i däm Fau nid der richtig Asatz.",
"What ways are there to access data from a web application cross-domain?": "What ways are there to access data from a web application cross-domain?",
"This challenge uses an old way which is no longer recommended.": "This challenge uses an old way which is no longer recommended.",
"Consider intercepting and playing with the request payload.": "Erwäge das Abfangen von und Herumspielen mit dem Request-Payload.",
"Try to create the needed user \"out of thin air\".": "Probier der nötig Benutzer \"us em Nüt\" z'ersteue.",
"The user literally needs to be ephemeral as in \"lasting for only a short time\".": "The user literally needs to be ephemeral as in \"lasting for only a short time\".",
"Registering normally with the user’s email address will then obviously not solve this challenge. The Juice Shop will not even let you register as acc0unt4nt@juice-sh.op, as this would make the challenge unsolvable for you.": "Registering normally with the user’s email address will then obviously not solve this challenge. The Juice Shop will not even let you register as acc0unt4nt@juice-sh.op, as this would make the challenge unsolvable for you.",
"Getting the user into the database some other way will also fail to solve this challenge. In case you somehow managed to do so, you need to restart the Juice Shop application in order to wipe the database and make the challenge solvable again.": "Getting the user into the database some other way will also fail to solve this challenge. In case you somehow managed to do so, you need to restart the Juice Shop application in order to wipe the database and make the challenge solvable again.",
"The fact that this challenge is in the Injection category should already give away the intended approach.": "The fact that this challenge is in the Injection category should already give away the intended approach.",
"Try to submit bad input to forms. Alternatively tamper with URL paths or parameters.": "Probier unerwünschti Igabe a Formular z'sände. Auternativ, chasch o a URL-Pfäd oder -Parameter umedökterle.",
"This challenge actually triggers from various possible error conditions.": "This challenge actually triggers from various possible error conditions.",
"You can try to submit bad input to forms to provoke an improper error handling.": "You can try to submit bad input to forms to provoke an improper error handling.",
"Tampering with URL paths or parameters might also trigger an unforeseen error.": "Tampering with URL paths or parameters might also trigger an unforeseen error.",
"Try to identify past special event or holiday campaigns of the shop first.": "Versuech zersch mau vergangei Sonderverastautige oder Feschttäg-Kampagne vom Lade z'identifiziere.",
"Look for clues about the past campaign or holiday event somewhere in the application.": "Look for clues about the past campaign or holiday event somewhere in the application.",
"Solving this challenge does not require actual time traveling.": "Die Lösung dieser Herausforderung erfordert keine tatsächliche Zeitreise.",
"First you should find out how the languages are technically changed in the user interface.": "First you should find out how the languages are technically changed in the user interface.",
"Guessing will most definitely not work in this challenge.": "Raten wird bei dieser Herausforderung definitiv nicht funktionieren.",
"Brute force is not the only option for this challenge, but a perfectly viable one.": "Rohi Gwaut (Brute Force) isch nid di einzige Option für die Useforderig - auerdings isch si durchus bruchbar.",
"Investigate online what languages are actually available.": "Investigate online what languages are actually available.",
"Once you found admin section of the application, this challenge is almost trivial.": "Sobau de der Adminbereich vor Awändig gfunge hesch, isch die Useforderig bau scho triviau.",
"Nothing happens when you try to delete feedback entries? Check the JavaScript console for errors!": "Nothing happens when you try to delete feedback entries? Check the JavaScript console for errors!",
"Try either a) a knowledgeable brute force attack or b) reverse engineering or c) some research in the cloud.": "Versuche entweder a) einen klugen Brute-Force-Angriff oder b) Reverse Engineering oder c) einige Nachforschungen in der Cloud.",
"One viable solution would be to reverse-engineer how coupon codes are generated and craft your own 80% coupon by using the same (or at least similar) implementation.": "One viable solution would be to reverse-engineer how coupon codes are generated and craft your own 80% coupon by using the same (or at least similar) implementation.",
"Another possible solution might be harvesting as many previous coupon as possible and look for patterns that might give you a leverage for a brute force attack.": "Another possible solution might be harvesting as many previous coupon as possible and look for patterns that might give you a leverage for a brute force attack.",
"If all else fails, you could still try to blindly brute force the coupon code field before checkout.": "If all else fails, you could still try to blindly brute force the coupon code field before checkout.",
"You can solve this by tampering with the user interface or by intercepting the communication with the RESTful backend.": "Du chasch die Useforderig löse, i däm de mit em Benutzerinterface umeexperimentiersch oder d Kommunikation mit em RESTful Backend abfasch.",
"To find the client-side leverage point, closely analyze the HTML form used for feedback submission.": "To find the client-side leverage point, closely analyze the HTML form used for feedback submission.",
"The backend-side leverage point is similar to some of the XSS challenges found in OWASP Juice Shop.": "The backend-side leverage point is similar to some of the XSS challenges found in OWASP Juice Shop.",
"Observe the flow of product review posting and editing and see if you can exploit it.": "Probier usezfinge, ob im Ablouf vor Veröffentlechig u vom Bearbeite vo Produktbeurteilige öbis fingsch, wo für dini Zwäcke chasch misbruche.",
"This challenge can be solved by using developers tool of your browser or with tools like postman.": "Diese Herausforderung kann mithilfe der Dev-Tools deines Browsers oder mit Werkzeugen wie Postman gelöst werden.",
"Analyze the form used for review submission and try to find a leverage point.": "Analyze the form used for review submission and try to find a leverage point.",
"This challenge is pretty similar to \"Post some feedback in another user’s name\" challenge.": "This challenge is pretty similar to \"Post some feedback in another user’s name\" challenge.",
"This challenge is explicitly not about acquiring the RSA private key used for JWT signing.": "Bi dere Useforderig geits NID drum, der privat RSA-Schlüssu, wo zum JWT signiere würdi brucht wärde, z beschaffe.",
"The three generic hints from Forge an essentially unsigned JWT token also help with this challenge.": "The three generic hints from Forge an essentially unsigned JWT token also help with this challenge.",
"Instead of enforcing no encryption to be applied, try to apply a more sophisticated exploit against the JWT libraries used in the Juice Shop.": "Instead of enforcing no encryption to be applied, try to apply a more sophisticated exploit against the JWT libraries used in the Juice Shop.",
"Getting your hands on the public RSA key the application employs for its JWTs is mandatory for this challenge.": "Getting your hands on the public RSA key the application employs for its JWTs is mandatory for this challenge.",
"Finding the corresponding private key should actually be impossible, but that obviously doesn’t make this challenge unsolvable.": "Finding the corresponding private key should actually be impossible, but that obviously doesn’t make this challenge unsolvable.",
"Make sure your JWT is URL safe!": "Stelle sicher, dass dein JWT URL-sicher ist!",
"You need to trick a security mechanism into thinking that the file you want has a valid file type.": "Probier emene Sicherheitsmechanismus vorzgoukle, dass d Datei wo de wosch ä gütige Dateityp het.",
"The file is not directly accessible because a security mechanism prevents access to it.": "The file is not directly accessible because a security mechanism prevents access to it.",
"You need to trick the security mechanism into thinking that the file has a valid file type.": "You need to trick the security mechanism into thinking that the file has a valid file type.",
"For this challenge there is only one approach to pull this trick.": "For this challenge there is only one approach to pull this trick.",
"This challenge has nothing to do with mistyping web domains. There is no conveniently misplaced file helping you with this one either. Or is there?": "Bi dere Useforderig geits nid drum sech bi Web-Domains z vertippe. Äs git o ke praktischerwiis fausch abgleiti Datei, wo der hie chönnt witerhäufe - oder äch doch..?",
"This challenge has nothing to do with URLs or domains.": "Diese Herausforderung hat nichts mit URLs oder Domains zu tun.",
"Other than for its legacy companion, combing through the package.json.bak does not help for this challenge.": "Other than for its legacy companion, combing through the package.json.bak does not help for this challenge.",
"Turns out that something is technically and legally wrong with the implementation of the \"right to be forgotten\" for users.": "Es steut sech use, dass bir Umsetzung vom \"Rächt uf Vergässe\" für Benutzer, technsich u rächtlech öbisch schief gloffe isch.",
"Trying out the Request Data Erasure functionality might be interesting, but cannot help you solve this challenge in real time.": "Trying out the Request Data Erasure functionality might be interesting, but cannot help you solve this challenge in real time.",
"If you have solved the challenge Retrieve a list of all user credentials via SQL Injection you might have already retrieved some information about how the Juice Shop \"deletes\" users upon their request.": "If you have solved the challenge Retrieve a list of all user credentials via SQL Injection you might have already retrieved some information about how the Juice Shop \"deletes\" users upon their request.",
"What the Juice Shop does here is totally incompliant with GDPR. Luckily a 4% fine on a gross income of 0$ is still 0$.": "What the Juice Shop does here is totally incompliant with GDPR. Luckily a 4% fine on a gross income of 0$ is still 0$.",
"Trick the regular Data Export to give you more than actually belongs to you.": "Leg der normau Dateexport ä so ine, dass er der meh Informatione zrüg git, aus de eigentelch sötisch übercho.",
"You should not try to steal data from a \"vanilla\" user who never even ordered something at the shop.": "You should not try to steal data from a \"vanilla\" user who never even ordered something at the shop.",
"As everything about this data export functionality happens on the server-side, it won’t be possible to just tamper with some HTTP requests to solve this challenge.": "As everything about this data export functionality happens on the server-side, it won’t be possible to just tamper with some HTTP requests to solve this challenge.",
"Inspecting various server responses which contain user-specific data might give you a clue about the mistake the developers made.": "Inspecting various server responses which contain user-specific data might give you a clue about the mistake the developers made.",
"Finding a piece of displayed information that could originate from an HTTP header is part of this challenge.": "Irgendnöime söti ä chli vore Information azeigt wärde, wo ursprünglech mau Teu vomene HTTP Header isch gsi.",
"You might have to look into less common or even proprietary HTTP headers to find the leverage point.": "You might have to look into less common or even proprietary HTTP headers to find the leverage point.",
"Adding insult to injury, the HTTP header you need will never be sent by the application on its own.": "Adding insult to injury, the HTTP header you need will never be sent by the application on its own.",
"You need to trick the hacking progress persistence feature into thinking you solved challenge #999.": "Versuech der Hacking-Fortschrittsspicher la z gloube, dass du d Useforderig #999 scho glöst hesch.",
"Find out how saving and restoring progress is done behind the scenes.": "Find out how saving and restoring progress is done behind the scenes.",
"Deduce from all available information (e.g. the package.json.bak) how the application encrypts and decrypts your hacking progress.": "Deduce from all available information (e.g. the package.json.bak) how the application encrypts and decrypts your hacking progress.",
"Other than the user’s passwords, the hacking progress involves an additional secret during its encryption.": "Other than the user’s passwords, the hacking progress involves an additional secret during its encryption.",
"What would be a really stupid mistake a developer might make when choosing such a secret?": "What would be a really stupid mistake a developer might make when choosing such a secret?",
"As the challenge name implies, your task is to find some leaked access logs which happen to have a fairly common format.": "As the challenge name implies, your task is to find some leaked access logs which happen to have a fairly common format.",
"A very popular help platform for developers might contain breadcrumbs towards solving this challenge.": "A very popular help platform for developers might contain breadcrumbs towards solving this challenge.",
"The actual log file was copied & paste onto a platform often used to share data quickly with externals or even just internal peers.": "The actual log file was copied & paste onto a platform often used to share data quickly with externals or even just internal peers.",
"Once you found and harvested the important piece of information from the log, you could employ a technique called Password Spraying to solve this challenge.": "Once you found and harvested the important piece of information from the log, you could employ a technique called Password Spraying to solve this challenge.",
"Your own SQLi and someone else's Ctrl-V will be your accomplices in this challenge!": "Dini eigeti SQL Injection u z Ctrl+V vo öber angerem, wärde der bi dere Useforderig zum Erfoug verhäufe!",
"You must first identify the \"unsafe product\" which ist not available any more in the shop.": "You must first identify the \"unsafe product\" which ist not available any more in the shop.",
"Solving the \"Order the Christmas special offer of 2014\" challenge might give it to you as by-catch.": "Solving the \"Order the Christmas special offer of 2014\" challenge might give it to you as by-catch.",
"The actual data you need to solve this challenge was leaked on the same platform that was involved in the \"Dumpster dive the Internet for a leaked password and log in to the original user account it belongs to\" challenge.": "The actual data you need to solve this challenge was leaked on the same platform that was involved in the \"Dumpster dive the Internet for a leaked password and log in to the original user account it belongs to\" challenge.",
"Google is a particularly good accomplice in this challenge.": "Google is a particularly good accomplice in this challenge.",
"This challenge has nothing to do with mistyping web domains. Investigate the forgotten developer's backup file instead.": "Hie geits nid drum, dass me sech bim Itippe vo Web-Domains cha vertippe. Ungersuech stattdesse di vergässegangeni Backup-Datei vomene Entwickler.",
"Investigating the forgotten developer’s backup file might bring some insight.": "Investigating the forgotten developer’s backup file might bring some insight.",
"\"Malicious packages in npm\" is a worthwhile read on Ivan Akulov’s blog.": "\"Malicious packages in npm\" is a worthwhile read on Ivan Akulov’s blog.",
"The challenge description probably gave away what form you should attack.": "Die Beschreibung der Herausforderung hat wahrscheinlich verraten, welches Formular du angreifen solltest.",
"If you happen to know the email address of the admin already, you can launch a targeted attack.": "If you happen to know the email address of the admin already, you can launch a targeted attack.",
"You might be lucky with a dedicated attack pattern even if you have no clue about the admin email address.": "You might be lucky with a dedicated attack pattern even if you have no clue about the admin email address.",
"If you harvested the admin’s password hash, you can of course try to attack that instead of using SQL Injection.": "If you harvested the admin’s password hash, you can of course try to attack that instead of using SQL Injection.",
"Alternatively you can solve this challenge as a combo with the Log in with the administrator’s user credentials without previously changing them or applying SQL Injection challenge.": "Alternatively you can solve this challenge as a combo with the Log in with the administrator’s user credentials without previously changing them or applying SQL Injection challenge.",
"This challenge will make you go after a needle in a haystack.": "Diese Herausforderung lässt dich nach einer Nadel im Heuhaufen suchen.",
"As with so many other characters from Futurama this challenge is of course about logging in as Amy from that show.": "As with so many other characters from Futurama this challenge is of course about logging in as Amy from that show.",
"Did you know that Amy is married to an alien named Kif?": "Wusstest du, dass Amy mit einem Außerirdischen namens Kif verheiratet ist?",
"The challenge description contains a few sentences which give away some information how Amy decided to strengthen her password.": "The challenge description contains a few sentences which give away some information how Amy decided to strengthen her password.",
"Obviously, Amy - being a little dimwitted - did not put nearly enough effort and creativity into the password selection process.": "Obviously, Amy - being a little dimwitted - did not put nearly enough effort and creativity into the password selection process.",
"You need to know (or smart-guess) Bender’s email address so you can launch a targeted attack.": "You need to know (or smart-guess) Bender’s email address so you can launch a targeted attack.",
"Bender's password hash might not help you very much.": "Benders Passwort-Hash hilft dir wahrscheinlich nicht sonderlich.",
"In case you try some other approach than SQL Injection, you will notice that Bender’s password hash is not very useful.": "In case you try some other approach than SQL Injection, you will notice that Bender’s password hash is not very useful.",
"The security flaw behind this challenge is 100% OWASP Juice Shop's fault and 0% Google's.": "Die Sicherheitslücke hinter dieser Herausforderung ist zu 100% die Schuld des OWASP Juice Shop und zu 0% die von Google.",
"One way to light up this challenge in green on the score board, is to be Bjoern Kimminich. In that case, just log in with your Google account to automatically solve this challenge! Congratulations!": "One way to light up this challenge in green on the score board, is to be Bjoern Kimminich. In that case, just log in with your Google account to automatically solve this challenge! Congratulations!",
"Most likely you are not Bjoern Kimminich, so instead you might want to take detailed look into how the OAuth login with Google is implemented.": "Most likely you are not Bjoern Kimminich, so instead you might want to take detailed look into how the OAuth login with Google is implemented.",
"It could bring you some insight to register with your own Google account and analyze closely what happens behind the scenes.": "It could bring you some insight to register with your own Google account and analyze closely what happens behind the scenes.",
"You need to know (or smart-guess) Jim’s email address so you can launch a targeted attack.": "You need to know (or smart-guess) Jim’s email address so you can launch a targeted attack.",
"If you harvested Jim’s password hash, you can try to attack that instead of using SQL Injection.": "If you harvested Jim’s password hash, you can try to attack that instead of using SQL Injection.",
"MC SafeSearch is a rapper who produced the song \"Protect Ya' Passwordz\" which explains password & sensitive data protection very nicely.": "MC SafeSearch is a rapper who produced the song \"Protect Ya' Passwordz\" which explains password & sensitive data protection very nicely.",
"After watching the music video of this song, you should agree that even ⭐⭐ is a slightly exaggerated difficulty rating for this challenge.": "After watching the music video of this song, you should agree that even ⭐⭐ is a slightly exaggerated difficulty rating for this challenge.",
"The underlying flaw of this challenge is a lot more human error than technical weakness.": "Der zugrunde liegende Fehler bei dieser Herausforderung ist vielmehr menschliches Versagen als eine technische Schwäche.",
"The support team is located in a low-cost country and the team structure fluctuates a lot due to people leaving for jobs with even just slightly better wages.": "The support team is located in a low-cost country and the team structure fluctuates a lot due to people leaving for jobs with even just slightly better wages.",
"To prevent abuse the password for the support team account itself is actually very strong.": "To prevent abuse the password for the support team account itself is actually very strong.",
"To allow easy access during an incident, the support team utilizes a 3rd party tool which every support engineer can access to get the current account password from.": "To allow easy access during an incident, the support team utilizes a 3rd party tool which every support engineer can access to get the current account password from.",
"While it is also possible to use SQL Injection to log in as the support team, this will not solve the challenge.": "While it is also possible to use SQL Injection to log in as the support team, this will not solve the challenge.",
"Have an eye on the HTTP traffic while placing products in the shopping basket.": "Beobachte den HTTP-Verkehr, während du Produkte in den Warenkorb legst.",
"Adding more instances of the same product to someone else’s basket does not qualify as a solution. The same goes for stealing from someone else’s basket.": "Adding more instances of the same product to someone else’s basket does not qualify as a solution. The same goes for stealing from someone else’s basket.",
"This challenge requires a bit more sophisticated tampering than others of the same ilk.": "This challenge requires a bit more sophisticated tampering than others of the same ilk.",
"If you solved one of the other four file access challenges, you already know where the SIEM signature file is located.": "If you solved one of the other four file access challenges, you already know where the SIEM signature file is located.",
"Punctuality is the politeness of kings.": "Pünktlichkeit ist die Höflichkeit der Könige.",
"Every user is (almost) immediately associated with the review they \"liked\" to prevent abuse of that functionality.": "Every user is (almost) immediately associated with the review they \"liked\" to prevent abuse of that functionality.",
"Did you really think clicking the \"like\" button three times in a row really fast would be enough to solve a ⭐⭐⭐⭐⭐⭐ challenge?": "Did you really think clicking the \"like\" button three times in a row really fast would be enough to solve a ⭐⭐⭐⭐⭐⭐ challenge?",
"The underlying flaw of this challenge is a Race Condition.": "The underlying flaw of this challenge is a Race Condition.",
"You might have to peel through several layers of tough-as-nails encryption for this challenge.": "Du musst dich für diese Herausforderung möglicherweise durch mehrere Schichten knallharter Verschlüsselung schälen.",
"Make sure you solve Find the hidden easter egg first.": "Make sure you solve Find the hidden easter egg first.",
"This challenge is essentially a stripped-down Denial of Service (DoS) attack.": "Diese Herausforderung ist im Wesentlichen eine gekürzte Denial of Service (DoS)-Attacke.",
"As stated in the Architecture overview, OWASP Juice Shop uses a MongoDB derivate as its NoSQL database.": "As stated in the Architecture overview, OWASP Juice Shop uses a MongoDB derivate as its NoSQL database.",
"The categorization into the NoSQL Injection category totally gives away the expected attack vector for this challenge. Trying any others will not solve the challenge, even if they might yield the same result.": "The categorization into the NoSQL Injection category totally gives away the expected attack vector for this challenge. Trying any others will not solve the challenge, even if they might yield the same result.",
"In particular, flooding the application with requests will not solve this challenge. That would probably just kill your server instance.": "In particular, flooding the application with requests will not solve this challenge. That would probably just kill your server instance.",
"Take a close look on how the $where query operator works in MongoDB.": "Schau dir genau an, wie der $where-Operator in MongoDB Abfragen funktioniert.",
"This challenge requires a classic Injection attack.": "Diese Herausforderung erfordert einen klassischen Injection-Angriff.",
"Find an API endpoint with the intent of delivering a single order to the user and work with that.": "Find an API endpoint with the intent of delivering a single order to the user and work with that.",
"Reading up on how MongoDB queries work is really helpful here.": "Reading up on how MongoDB queries work is really helpful here.",
"Take a close look on how the equivalent of UPDATE-statements in MongoDB work.": "Schau dir genau an, wie das Äquivalent einer UPDATE-Anwendung bei MongoDB funktioniert.",
"This challenge requires another classic Injection attack.": "This challenge requires another classic Injection attack.",
"It is also worth looking into how Query Operators work in MongoDB.": "It is also worth looking into how Query Operators work in MongoDB.",
"When removing references to those addresses from the code the developers have been a bit sloppy.": "When removing references to those addresses from the code the developers have been a bit sloppy.",
"More particular, they have been sloppy in a way that even the Angular Compiler was not able to clean up after them automatically.": "More particular, they have been sloppy in a way that even the Angular Compiler was not able to clean up after them automatically.",
"It is of course not sufficient to just visit any of the crypto currency links directly to solve the challenge.": "It is of course not sufficient to just visit any of the crypto currency links directly to solve the challenge.",
"This challenge can be solved with three different approaches.": "Diese Herausforderung kann mit drei verschiedenen Ansätzen gelöst werden.",
"Guessing might work just fine.": "Bloßes Raten könnte schon klappen.",
"If you harvested the admin’s password hash, you can try to attack that.": "If you harvested the admin’s password hash, you can try to attack that.",
"In case you use some hacker tool, you can also go for a brute force attack using a generic password list.": "In case you use some hacker tool, you can also go for a brute force attack using a generic password list.",
"You literally need to make the shop owe you any amount of money.": "Du musst buchstäblich dafür sorgen, dass der Laden dir einen beliebigen Geldbetrag schuldet.",
"Investigate the shopping basket closely to understand how it prevents you from creating orders that would fulfil the challenge.": "Investigate the shopping basket closely to understand how it prevents you from creating orders that would fulfil the challenge.",
"You do not have to pay anything to unlock this challenge! Nonetheless, donations are very much appreciated.": "Du musst nichts bezahlen, um diese Herausforderung freizuschalten! Spenden sind nichtsdestotrotz sehr willkommen.",
"There is no inappropriate, self-written or misconfigured cryptographic library to be exploited here.": "There is no inappropriate, self-written or misconfigured cryptographic library to be exploited here.",
"How much protection does a sturdy top-quality door lock add to your house if you put the key under the door mat? Or hide the key in the nearby plant pot? Or tape the key to the underside of the mailbox?": "How much protection does a sturdy top-quality door lock add to your house if you put the key under the door mat? Or hide the key in the nearby plant pot? Or tape the key to the underside of the mailbox?",
"Once more: You do not have to pay anything to unlock this challenge!": "Once more: You do not have to pay anything to unlock this challenge!",
"We won't even ask you to confirm that you did. Just read it. Please. Pretty please.": "Wir werden dich nicht bitten, zu bestätigen, dass du es getan haben. Lies sie einfach. Bitte. Ach bitte, bitte.",
"When you work with the application you will most likely solve this challenge in the process.": "When you work with the application you will most likely solve this challenge in the process.",
"Any automated crawling or spidering tool you use might solve this challenge for you.": "Any automated crawling or spidering tool you use might solve this challenge for you.",
"There is no real hacking involved here.": "Hier geht es nicht um echtes Hacken.",
"Only by visiting a special URL you can confirm that you read it carefully.": "Nur indem du eine besondere URL besuchst, kannst du bestätigen, dass du sie sorgfältig gelesen hast.",
"First you should obviously solve the \"Read our privacy policy\" challenge.": "First you should obviously solve the \"Read our privacy policy\" challenge.",
"It is fine to use the mouse cursor to not lose sight of the paragraph you are currently reading.": "It is fine to use the mouse cursor to not lose sight of the paragraph you are currently reading.",
"If you find some particularly hot sections in the policy you might want to melt them together similar to what you might have already uncovered in Apply some advanced cryptanalysis to find the real easter egg.": "If you find some particularly hot sections in the policy you might want to melt them together similar to what you might have already uncovered in Apply some advanced cryptanalysis to find the real easter egg.",
"Theoretically there are three possible ways to beat this challenge: a) broken admin functionality, b) holes in RESTful API or c) possibility for SQL Injection.": "Theoretically there are three possible ways to beat this challenge: a) broken admin functionality, b) holes in RESTful API or c) possibility for SQL Injection.",
"In practice two of these three ways should turn out to be dead ends.": "In der Praxis sollten sich zwei dieser drei Wege als Sackgasse erweisen.",
"Look for a url parameter where its value appears in the page it is leading to.": "Halte Ausschau nach einem URL-Parameter, dessen Wert auf der Seite, zu der er führt, erscheint.",
"Try probing for XSS vulnerabilities by submitting text wrapped in an HTML tag which is easy to spot on screen, e.g. or .": "Try probing for XSS vulnerabilities by submitting text wrapped in an HTML tag which is easy to spot on screen, e.g. or .",
"You can solve this by cleverly interacting with the UI or bypassing it altogether.": "Du kannst diese durch kluge Interaktion mit oder völliges Umgehen der Benutzeroberfläche lösen.",
"The obvious repetition in the User Registration form is the Repeat Password field.": "The obvious repetition in the User Registration form is the Repeat Password field.",
"Try to register with either an empty or different value in Repeat Password.": "Try to register with either an empty or different value in Repeat Password.",
"You can solve this challenge by cleverly interacting with the UI or bypassing it altogether.": "You can solve this challenge by cleverly interacting with the UI or bypassing it altogether.",
"If you have no idea who Bender is, please put down this book right now and watch the first episodes of Futurama before you come back.": "If you have no idea who Bender is, please put down this book right now and watch the first episodes of Futurama before you come back.",
"Unexpectedly, Bender also chose to answer his chosen question truthfully.": "Unexpectedly, Bender also chose to answer his chosen question truthfully.",
"Hints to the answer to Bender’s question can be found in publicly available information on the Internet.": "Hints to the answer to Bender’s question can be found in publicly available information on the Internet.",
"If a seemingly correct answer is not accepted, you might just need to try some alternative spelling.": "If a seemingly correct answer is not accepted, you might just need to try some alternative spelling.",
"Brute forcing the answer should be next to impossible.": "Die Antwort über Brute Force zu finden, sollte so gut wie unmöglich sein.",
"Nothing a little bit of Facebook stalking couldn't reveal. Might involve a historical twist.": "Nichts, was ein bisschen Facebook-Stalking nicht offenbaren könnte. Könnte eine historische Wendung beinhalten.",
"Other than with his OWASP account, Bjoern was a bit less careless with his choice of security and answer to his internal account.": "Other than with his OWASP account, Bjoern was a bit less careless with his choice of security and answer to his internal account.",
"Bjoern chose to answer his chosen question truthfully but tried to make it harder for attackers by applying sort of a historical twist.": "Bjoern chose to answer his chosen question truthfully but tried to make it harder for attackers by applying sort of a historical twist.",
"Again, hints to the answer to Bjoern’s question can be found by looking him up on the Internet.": "Again, hints to the answer to Bjoern’s question can be found by looking him up on the Internet.",
"The hardest part of this challenge is actually to find out who Jim actually is.": "Der schwierigste Teil dieser Herausforderung besteht darin, herauszufinden, wer Jim tatsächlich ist.",
"Jim picked one of the worst security questions and chose to answer it truthfully.": "Jim picked one of the worst security questions and chose to answer it truthfully.",
"As Jim is a celebrity, the answer to his question is quite easy to find in publicly available information on the internet.": "As Jim is a celebrity, the answer to his question is quite easy to find in publicly available information on the internet.",
"Even brute forcing the answer should be possible with the right kind of word list.": "Even brute forcing the answer should be possible with the right kind of word list.",
"Finding out who Morty actually is, will help to reduce the solution space.": "Herauszufinden, wer Morty tatsächlich ist, hilft den Lösungsraum zu reduzieren.",
"You can assume that Morty answered his security question truthfully but employed some obfuscation to make it more secure.": "You can assume that Morty answered his security question truthfully but employed some obfuscation to make it more secure.",
"Morty’s answer is less than 10 characters long and does not include any special characters.": "Morty’s answer is less than 10 characters long and does not include any special characters.",
"Unfortunately, Forgot your password? is protected by a rate limiting mechanism that prevents brute forcing. You need to beat this somehow.": "Unfortunately, Forgot your password? is protected by a rate limiting mechanism that prevents brute forcing. You need to beat this somehow.",
"Check for products which seem like a natural fit for being based on a blueprint.": "Check for products which seem like a natural fit for being based on a blueprint.",
"You might want to pay attention to the images of the identified product candidates.": "You might want to pay attention to the images of the identified product candidates.",
"For your inconvenience the blueprint was not misplaced into the same place like so many others forgotten files covered in this chapter.": "For your inconvenience the blueprint was not misplaced into the same place like so many others forgotten files covered in this chapter.",
"Reverse engineering something bad can make good things happen.": "Reverse-Engineering von etwas Schlechtem, kann gute Dinge geschehen lassen.",
"Using whatever you find inside the malware directly will not do you any good.": "Using whatever you find inside the malware directly will not do you any good.",
"For this to count as an SSRF attack you need to make the Juice Shop server attack itself.": "For this to count as an SSRF attack you need to make the Juice Shop server attack itself.",
"Do not try to find the source code for the malware on GitHub. Take it apart with classic reverse-engineering techniques instead.": "Do not try to find the source code for the malware on GitHub. Take it apart with classic reverse-engineering techniques instead.",
"\"SSTi\" is a clear indicator that this has nothing to do with anything Angular. Also, make sure to use only our non-malicious malware.": "\"SSTi\" ist ein eindeutiger Indikator, dass dies nichts mit irgendwas in Angular zu tun hat. Achte darauf, nur unsere nicht-bösartige Malware zu verwenden.",
"You can find the juicy malware via a very obvious Google search or by stumbling into a very ill-placed quarantine folder with the necessary URLs in it.": "You can find the juicy malware via a very obvious Google search or by stumbling into a very ill-placed quarantine folder with the necessary URLs in it.",
"Making the server download and execute the malware is key to solving this challenge.": "Making the server download and execute the malware is key to solving this challenge.",
"For this challenge you do not have to reverse engineer the malware in any way. That will be required later to solve the \"Request a hidden resource on server through server\" challenge.": "For this challenge you do not have to reverse engineer the malware in any way. That will be required later to solve the \"Request a hidden resource on server through server\" challenge.",
"This challenge asks you to act like an ethical hacker.": "Diese Herausforderung fordert dich auf, wie ein ethischer Hacker zu handeln.",
"Undoubtedly you want to read our security policy before conducting any research on our application.": "Zweifellos möchtest du unsere Sicherheitsrichtlinie lesen, bevor Du irgendwelche Untersuchungen unserer Anwendung durchführst.",
"As one of the good guys, would you just start attacking an application without consent of the owner?": "As one of the good guys, would you just start attacking an application without consent of the owner?",
"You also might want to read the security policy or any bug bounty program that is in place.": "You also might want to read the security policy or any bug bounty program that is in place.",
"The \"Comment\" field in the \"Customer Feedback\" screen is where you want to put your focus on.": "Du solltest deinen Fokus auf das Feld \"Kommentar\" im \"Kundenfeedback\"-Dialog setzen.",
"The Comment field in the Contact Us screen is where you want to put your focus on.": "The Comment field in the Contact Us screen is where you want to put your focus on.",
"The attack payload