OWASP Mutillidae II: Keep Calm and Pwn On

Version: 2.6.62 Security Level: 0 (Hosed) Hints: Enabled (1 - Try easier) Not Logged In

OWASP 2017

OWASP 2013
- A8 - Cross Site Request Forgery (CSRF)
- A10 - Unvalidated Redirects and Forwards
  - Credits
  - Setup/reset the DB (Disabled: Not Admin)

OWASP 2010

OWASP 2007

Want to Help?

Video Tutorials

Announcements

Getting Started

Log

Back Help Me!

Hints and Videos

HTML Injection (HTMLi)
Using Burp-Suite
Using OWASP Zed Attack Proxy (ZAP)
Cross-site Scripting (XSS)
Cross-site Scripting with BeEF Framework

23 log records found Refresh Logs Delete Logs

Hostname IP Browser Agent Page Viewed Date/Time

172.20.0.1 172.20.0.1 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) User visited: html5-storage.php 2026-09-18 18:51:58

172.20.0.1 172.20.0.1 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) User visited: user-poll.php 2026-09-18 18:51:58

172.20.0.1 172.20.0.1 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) User visited: documentation/usage-instructions.php 2026-09-18 18:51:57

172.20.0.1 172.20.0.1 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) User visited: framing.php 2026-09-18 18:51:57

172.20.0.1 172.20.0.1 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) User visited: installation.php 2026-09-18 18:51:50

172.20.0.1 172.20.0.1 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) User visited: source-viewer.php 2026-09-18 18:51:50

172.20.0.1 172.20.0.1 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) User visited: register.php 2026-09-18 18:51:50

172.20.0.1 172.20.0.1 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) User visited: source-viewer.php 2026-09-18 18:51:49

172.20.0.1 172.20.0.1 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) Captured user data 2026-09-18 18:51:32

172.20.0.1 172.20.0.1 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) Captured Client IP: 172.20.0.1 2026-09-18 18:51:32

172.20.0.1 172.20.0.1 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) Captured Client Hostname: 172.20.0.1 2026-09-18 18:51:32

172.20.0.1 172.20.0.1 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) Captured Client User Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) 2026-09-18 18:51:32

172.20.0.1 172.20.0.1 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) Captured Client Referrer: 2026-09-18 18:51:32

172.20.0.1 172.20.0.1 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) Captured Client Port: 47954 2026-09-18 18:51:32

172.20.0.1 172.20.0.1 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) Captured Data: page = capture-data.php 2026-09-18 18:51:32

172.20.0.1 172.20.0.1 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) User visited: capture-data.php 2026-09-18 18:51:32

172.20.0.1 172.20.0.1 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) User visited: client-side-comments.php 2026-09-18 18:51:06

172.20.0.1 172.20.0.1 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) User visited: xml-validator.php 2026-09-18 18:51:05

172.20.0.1 172.20.0.1 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) User visited: captured-data.php 2026-09-18 18:51:05

172.20.0.1 172.20.0.1 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) User visited: phpinfo.php 2026-09-18 18:50:45

172.20.0.1 172.20.0.1 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) User visited: sqlmap-targets.php 2026-09-18 18:50:44

172.20.0.1 172.20.0.1 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) User visited: cache-control.php 2026-09-18 18:50:44

172.20.0.1 172.20.0.1 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) User visited: phpmyadmin.php 2026-09-18 18:50:43