Installation

Help
2011-03-24
2013-04-23
  • Jeremy Druin
    Jeremy Druin
    2011-03-24

    Download and install XAMPP with PHP 5.3 or higher. Current version as of 3/24/2011 has PHP 5.3. Drop this projects files (the entire mutillidae folder) into the htdocs directory of XAMMP (or XAMPP lite if you prefer). Assuming the mutillidae main folder is named "mutillidae" and the mutillidae main folder is located in the htdocs directory, the URL for the project will be http://localhost/mutillidae. Once installed, edit the php.ini file per the instructions on the home page. The home page is what loads when URL http://localhost/mutillidae is entered.

     
  • tiger1grl
    tiger1grl
    2013-03-29

    Is there a way to update Mutilledae to the latest version inside of Metasploitable2? I tried this:

    1. renamed the original /var/www/mutillidae folder to mutillidae-orig
    2. copied the new files into /var/www/mutillidae

    Now I am getting this error:

    **Warning: require_once(owasp-esapi-php/src/ESAPI.php) : failed to open stream: No such file or directory in /var/www/mutillidae/index.php on line 11

    Fatal error: require_once() : Failed opening required 'owasp-esapi-php/src/ESAPI.php' (include_path='.:/usr/share/php:/usr/share/pear') in /var/www/mutillidae/index.php on line 11**

    I am sort of new to linux, but this seems to me that the new version of Mutillidae I just downloaded might be assuming a different linux distrobution than Metasploitable2 is on (because of where it is looking for files). Am I on the right track here? Is there a relatively straightforward fix for this?

    Any help would be appreciated!

     
  • tiger1grl
    tiger1grl
    2013-03-29

    UPDATE:

    I changed line 11 'ESAPI' to 'esapi' in /var/www/mutillidae/owasp-esapi-php/src/esapi.php to get past the first error. Now it says

    Security configuration file does not exist.
    Fatal error: Call to a member function xpath() on a non-object in /var/www/mutillidae/owasp-esapi-php/src/reference/DefaultSecurityConfiguration.php on line 225