OWASP Mutillidae II: Keep Calm and Pwn On

Version: 2.6.62 Security Level: 0 (Hosed) Hints: Enabled (1 - Try easier) Not Logged In

OWASP 2017

OWASP 2013
- A8 - Cross Site Request Forgery (CSRF)
- A10 - Unvalidated Redirects and Forwards
  - Credits
  - Setup/reset the DB (Disabled: Not Admin)

OWASP 2010

OWASP 2007

Want to Help?

Video Tutorials

Announcements

Getting Started

Log

Back Help Me!

Hints and Videos

HTML Injection (HTMLi)
Using Burp-Suite
Using OWASP Zed Attack Proxy (ZAP)
Cross-site Scripting (XSS)
Cross-site Scripting with BeEF Framework

23 log records found Refresh Logs Delete Logs

Hostname IP Browser Agent Page Viewed Date/Time

10.218.132.97 10.218.132.97 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) User visited: user-poll.php 2026-01-22 08:30:49

10.218.132.97 10.218.132.97 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) User visited: installation.php 2026-01-22 08:29:35

10.218.132.97 10.218.132.97 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) User visited: source-viewer.php 2026-01-22 08:29:34

10.218.132.97 10.218.132.97 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) User visited: framing.php 2026-01-22 08:29:33

10.218.132.97 10.218.132.97 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) User visited: xml-validator.php 2026-01-22 08:29:28

10.218.132.97 10.218.132.97 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) User visited: client-side-comments.php 2026-01-22 08:29:27

10.218.132.97 10.218.132.97 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) User visited: captured-data.php 2026-01-22 08:29:27

10.218.132.97 10.218.132.97 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) User visited: register.php 2026-01-22 08:29:26

10.218.132.97 10.218.132.97 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) Captured user data 2026-01-22 08:29:26

10.218.132.97 10.218.132.97 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) Captured Client IP: 10.218.132.97 2026-01-22 08:29:26

10.218.132.97 10.218.132.97 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) Captured Client Hostname: 10.218.132.97 2026-01-22 08:29:26

10.218.132.97 10.218.132.97 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) Captured Client User Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) 2026-01-22 08:29:26

10.218.132.97 10.218.132.97 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) Captured Client Referrer: 2026-01-22 08:29:26

10.218.132.97 10.218.132.97 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) Captured Client Port: 61700 2026-01-22 08:29:26

10.218.132.97 10.218.132.97 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) Captured Data: page = capture-data.php 2026-01-22 08:29:26

10.218.132.97 10.218.132.97 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) User visited: capture-data.php 2026-01-22 08:29:26

10.218.132.97 10.218.132.97 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) User visited: source-viewer.php 2026-01-22 08:29:26

10.218.132.97 10.218.132.97 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) User visited: phpmyadmin.php 2026-01-22 08:29:17

10.218.132.97 10.218.132.97 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) User visited: cache-control.php 2026-01-22 08:29:16

10.218.132.97 10.218.132.97 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) User visited: sqlmap-targets.php 2026-01-22 08:29:16

10.218.132.97 10.218.132.97 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) User visited: phpinfo.php 2026-01-22 08:29:16

10.218.132.97 10.218.132.97 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) User visited: /app/home.php 2026-01-22 08:29:14

10.218.132.97 10.218.132.97 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) User visited: php-errors.php 2026-01-22 08:29:13