mutillidae - OWASP Mutillidae II is a free, open-source, delibe

项目说明

OWASP Mutillidae II

OWASP Mutillidae II is a free, open-source, deliberately web application designed for web-security enthusiasts. It serves as a target for learning and practicing web security skills. Mutillidae can be easily installed on Linux and Windows systems using LAMP, WAMP, and XAMMP stacks. Additionally, it comes pre-installed on SamuraiWTF and OWASP BWA, and the existing can be updated on these platforms. With dozens of and hints to guide the user, Mutillidae provides an accessible web hacking en suitable for labs, security enthusiasts, classrooms, CTFs, and assessment tool targets. It has been widely used in graduate security courses, corporate web security training, and as an assessment target for assessment software. OWASP Mutillidae II provides a comprehensi for learning and practicing web security techniques in a controlled en.

Project Announcements

Stay updated with project announcements on X: webpwnized

Tutorials

Explore our tutorials on YouTube: webpwnized YouTube channel

Installation Guides

Location of source code

Note carefully that the source code has moved to the *src* project directory. Be careful to adjust accordingly.

Standard Installation - DockerHub

How to Run Mutillidae from DockerHub Images

Alternati - Docker

How to Install Docker on Ubuntu

How to Run Mutillidae on Docker

Alternati - Google Cloud

How to Run Mutillidae on Google Kubernetes Engine (GKE)

Legacy Installation - LAMP Stack

If you have a LAMP stack set up already, you can skip directly to installing Mutillidae. Check out our comprehensi guide for detailed instructions. Watch the video tutorial: How to Install Mutillidae on LAMP Stack

Usage

Explore a large number of video tutorials a on the webpwnized YouTube channel for guidance on using Mutillidae.

Key Features

Contains over 40 and challenges, co each of the OWASP Top Ten from 2007 to 2017

Mutillidae is actually , eliminating the need for users to enter a "magic" statement

Easy installation on Linux or Windows *AMP stacks, including XAMPP, WAMP, and LAMP

Preinstalled on Rapid7 Metasploitable 2, Samurai Web Testing Framework (WTF), and OWASP Broken Web Apps (BWA)

One-click system restoration to default settings with the "Setup" button

Users can switch between secure and insecure modes

Widely used in graduate security courses, corporate web security training, and as an assessment target for assessment software

Regularly updated to maintain relevance and effecti

Directory Structure

Below is the updated directory structure of the project along with brief descriptions:

Root Directory

CHANGELOG.md - Project change log.

CONTRIBUTING.md - Contribution guidelines.

LICENSE - Project license.

README-INSTALLATION.md - Installation instructions.

README.md - Main README file.

SECURITY.md - Security guidelines.

Source Directory: src

ajax - Contains files related to AJAX functionality.

classes - PHP class files for handling tasks (e.g., logging, token management, database operations).

data - Data files, such as XML data sources.

documentation - Documentation files including installation guides and usage instructions.

images - All image assets used in the application (e.g., icons, gritter assets).

includes - Reusable PHP files (e.g., templates, configuration files).

ja - Ja libraries, custom scripts, and initializers for front-end functionality.

labs - Files for security testing, offering challenges such as SQL injection, XSS, and file inclusions.

passwords - Password-related files (e.g., account data).

styles - CSS stylesheets defining the look and feel of the application.

webservices - Web services for REST and SOAP APIs.

- includes - Reusable components for web services.
- rest - REST API files and related documentation.
- soap - SOAP service files, including libraries and documentation.
- soap/lib - Library files specifically for SOAP service integration.

Additional Files and Directories

- Contains information for the project.

项目信息

开发语言：PHP

Star 数：1529

技术要点

该项目属于安全软件方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application providing a target for web-security training. This is an easy-to-use web hacking environment designed for labs, security enthusiasts, classrooms, CTF, and vulnerability assessment tool targets.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。