← Back to projects
Security Testing — OWASP Mutillidae II
Burp SuiteOWASP Mutillidae IISQL Injection
The Challenge
Reading about web vulnerabilities in theory is very different from finding and exploiting them yourself — I wanted hands-on practice attacking a real (if intentionally vulnerable) web application.
My Approach
Using Burp Suite as an intercepting proxy, I captured and manipulated HTTP requests against OWASP Mutillidae II, then crafted and executed SQL injection payloads to extract data the application wasn't meant to expose.
Outcome
Practical, hands-on experience with web application exploitation techniques that directly reinforced the theory from cyber security coursework.