Skip to content

OWASP Mutillidae II is a free, open source, deliberately vulnerable web-application providing a target for web-security enthusiast. Mutillidae can be installed on Linux and Windows using LAMP, WAMP, and XAMMP. It is pre-installed on SamuraiWTF and OWASP BWA. The existing version can be updated on these platforms. With dozens of vulnerabilities a…

master
Switch branches/tags
Code

Files

Permalink
Failed to load latest commit information.
Type
Name
Latest commit message
Commit time
Nov 10, 2020
Nov 12, 2020
Nov 29, 2020
Sep 28, 2018
Sep 28, 2018
Nov 9, 2020
Sep 28, 2018
Feb 12, 2021
Nov 9, 2020
Dec 29, 2020
Nov 26, 2020
Dec 30, 2020
Feb 25, 2021
Nov 26, 2020
Nov 9, 2020
Nov 26, 2020
Dec 21, 2020
Nov 26, 2020
Nov 26, 2020
Sep 28, 2018
Nov 26, 2020
Nov 26, 2020
Sep 28, 2018
Nov 26, 2020
Nov 9, 2020
Nov 9, 2020
Nov 26, 2020
Nov 26, 2020
Nov 26, 2020
Nov 26, 2020
Nov 26, 2020
Nov 26, 2020
Nov 26, 2020

OWASP Mutillidae II

Project Announcements

Tutorials

Installation on LAMP Stack

Video tutorials are available for each step. If you have a LAMP stack set up aleady, you might skip directly to installing Mutillidae. For detailed instructions, see the comprehensive guide

Installation on Docker

The following video tutorials explain how to bring up Mutillidae on a set of 5 containers running Apache/PHP, MySQL, OpenLDAP, PHPMyAdmin, and PHPLDAPAdmin

Usage

A large number of video tutorials are available on the webpwnized YouTube channel

Features

  • Has over 40 vulnerabilities and challenges. Contains at least one vulnerability for each of the OWASP Top Ten 2007, 2010, 2013 and 2017
  • Actually Vulnerable (User not asked to enter “magic” statement)
  • Mutillidae can be installed on Linux or Windows *AMP stacks making it easy for users who do not want to install or administrate their own webserver. Mutillidae is confirmed to work on XAMPP, WAMP, and LAMP.
  • Preinstalled on Rapid7 Metasploitable 2, Samurai Web Testing Framework (WTF), and OWASP Broken Web Apps (BWA)
  • System can be restored to default with single-click of "Setup" button
  • User can switch between secure and insecure modes
  • Used in graduate security courses, in corporate web sec training courses, and as an "assess the assessor" target for vulnerability software
  • Updated frequently

About

OWASP Mutillidae II is a free, open source, deliberately vulnerable web-application providing a target for web-security enthusiast. Mutillidae can be installed on Linux and Windows using LAMP, WAMP, and XAMMP. It is pre-installed on SamuraiWTF and OWASP BWA. The existing version can be updated on these platforms. With dozens of vulnerabilities a…

Resources

Packages

No packages published