OWASP Mutillidae II: Keep Calm and Pwn On

Version: 2.11.22 Security Level: 1 (Client-Side Security) Hints: Enabled Not Logged In

OWASP 2017

OWASP 2013
- A8 - Cross Site Request Forgery (CSRF)
- A10 - Unvalidated Redirects and Forwards
  - Credits
  - Setup/reset the DB (Disabled: Not Admin)

OWASP 2010

OWASP 2007

Want to Help?

Video Tutorials

Announcements

Getting Started

Lab 35: Session Management - Real-world Attack

Back

Help Me!

In the lab Real-world Attack, which uses a cross-site script to capture the session token, how does method tampering make this attack easier?

The application allows the form to be submitted via a GET or POST which allows the attacker to use either phishing or watering hole attacks
If the system was not vulnerable to method tampering, the system would not be vulnerable to cross-site scripting either
The method tampering vulnerability is not related to the cross-site scripting attack
The system is not vulnerable to method tampering
Method tampering is not a vulnerability

Choose the best answer or view Hints and Videos

Previous Lab | Next Lab

Browser: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
PHP Version: 7.4.33