Credits

  Back

Created by Irongeek.com. Developed by Adrian "Irongeek" Crenshaw and Jeremy Druin

 

 

Adrian Crenshaw would like to thank the following people for helping him with the Mutillidae project:

 

OWASP for making the vulnerability list I based this on.

ISSA Kentuckiana

OWASP Louisville

Brian Blankenship for his support of the idea.

Mubix for confirming the name

InfoSec Daily Podcast

PaulDotCom Podcast

All sorts of folks at PHP.net for code snippets: kaigillmann

Professional Web Application Developer Quality Assurance Pack by Jeremy Druin

Hints

For Unvalidated Redirects and Forwards: Unvalidated redirects can make the job of Phishers easier since the URL can be made to look like part of a trusted site. Notice how this page used “redirectandlog.php?forwardurl=” to send a user to another site, and log where it went. A Phisher could use this forward mechanism to make a Phishing URL look more legitimate.