OWASP Mutillidae II: Web Pwn in Mass Production
Version: 2.6.48 Security Level: 0 (Hosed) Hints: Enabled (1 - 5cr1pt K1dd1e) Not Logged In
Home | Login/Register | Toggle Hints| Show Popup Hints | Toggle Security | Enforce SSL | Reset DB | View Log | View Captured Data
 
Want to Help?
 
 
 
 
Error Message
 
Failure is always an option
Line102
Code0
File/var/www/html/mutillidae/capture-data.php
MessageDateTime::__construct(): It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected the timezone 'UTC' for now, but please set date.timezone to select your timezone.
Trace#0 /var/www/html/mutillidae/capture-data.php(102): DateTime->__construct() #1 /var/www/html/mutillidae/index.php(615): require_once('/var/www/html/m...') #2 {main}
Diagnotic InformationError trying to save captured data from capture.php into file
Click here to reset the DB
 
Capture Data
Expand Hints Hints and Videos
Data Capture Page
 
This page is designed to capture any parameters sent and store them in a file and a database table. It loops through the POST and GET parameters and records them to a file named captured-data.txt. On this system, the file should be found at /tmp/captured-data.txt. The page also tries to store the captured data in a database table named captured_data and logs the captured data. There is another page named captured-data.php that attempts to list the contents of this table.
 
The data captured on this request is: page = capture-data.php
 
Would it be possible to hack the hacker? Assume the hacker will view the captured requests with a web browser.