>> Now we talked a bit about OWASP,
making intentionally vulnerable web applications
to illustrate some of the OWASP Top 10.
Now because OWASP Top 10,
2021 is so new,
the web applications haven't caught up yet.
Things like web goat and juice shop don't really
take into account the OSWASP 2021 version.
There's also this application here,
intentionally vulnerable
application here called Mutillidae.
Now Mutillidae, as you can see very nicely
on the left-hand side here,
lays out the OSWASP Top 10 and it's not just 2017,
there's also some vulnerabilities from 2013
and 2010 and 2007.
From a historical concept,
it's very nice to use Mutillidae because it
incorporates a lot of the new,
or I should say,
incorporates the older things from
2017 into the newer version of 2021.
For example, if I go to OWASP 2017,
injection might be here at number 1,
but in 2021 it's number 3.
That doesn't make it any less relevant.
Also the fact that XML is in here doesn't mean that XML
wasn't also integrated into security misconfigurations,
which is now A5,
or a cross-site scripting,
which again is part of injection.
Things like this, that's why
this Mutillidae is still important,
and why we'll be using it during
the course is because
it's important to get hands-on practice.
We're not going to do away with some
of these older applications,
intentionally vulnerable applications,
>> just because they
>> have older versions of OWASP top 10.
For example, CSRF or C Surf
is A8 back in the 2013 version of OWASP top 13,
but now it's part of broken access control.
Because it's part of broken access control,
now we can actually use it.
Right here, we can use this,
and it's still relevant.
We can use the thing that's to say
we can use the things from the past
to now illustrate points in the OWASP 2021 version.
With that being said,
we're going to be using things like
Mutillidae and
other intentionally vulnerable web applications
so that you can get hands-on practice
with the OWASP Top 10 2021.
Don't be scared by the fact that it
hasn't been updated yet or there's older versions.
All these web application vulnerabilities
are still important to know.
You having access to Mutillidae,
is still very important and it's still very
relevant for our journey into 2021.