owasp/mimosaOpen-source web application security challenge platform with auto-approved registration, SQL dump generation, and Docker deployment for hands-on cybersecurity education and CTF practice.
Systems rebooting, database dumping, used to be called SecureCoding, now given to juniors, and finally completely rewritten.
This is an opensource core; it excludes administrative controls.
Method 1:Jar Version
Download the latest the Mimosa release here.
Place mimosa in a directory of your preference before running the following commands in a terminal.
user@mimosa:~$ java -jar mimosa-core-<version>.jar -g sql
Package(s) created!
user@mimosa:~$ java -jar mimosa-core-<version>.jar -g properties
Package(s) created!
This will generate two packages, a mimosa-dump.sql database dump to run in a MySQL server of your choice,
and an application.properties file that you can use to configure your Mimosa settings and database configuration settings(spring.datasource.username
and spring.datasource.password setting attribute in application.properties file).
Once configuration is complete, you can start Mimosa by running the following command: java -jar mimosa-core.jar
Access the web application by typing the url http://localhost in your preferred browser.
Afterwards, you can simply register an account, selecting the first class and your account will be auto approved.
Login with your newly created account and try out Mimosa.
Enjoy!
user@mimosa:~$ java -jar mimosa-core.jar
_
(_)
_ __ ___ _ _ __ ___ ___ ___ __ _
| '_ ` _ \| | '_ ` _ \ / _ \/ __|/ _` |
| | | | | | | | | | | | (_) \__ \ (_| |
|_| |_| |_|_|_| |_| |_|\___/|___/\__,_|
:: Spring Boot (v2.6.1) ::
:: App Version (v3.3.1) ::
2022-05-20 17:26:37.947 INFO 18316 --- [ main] securecoding.Applicat...
Download the latest Mimosa Docker release here.
Ensure you have docker and docker compose installed in your machine.
Run "docker compose up" in folder you unzip the files containing the yaml file.
The mimosa docker image will be downloaded to your hard disk and the docker images will be setup accordingly.
Access the web application by typing the url http://localhostL8080 in your preferred browser.
Afterwards, you can simply register an account, selecting the first class and your account will be auto approved.
Login with your newly created account and try out Mimosa.
Enjoy!
If you like to contribute to the challenge creation, please view the video tutorial at https://youtu.be/jvc9Ps0xtV0
We welcome contributors who have new ideas and wish to contribute to Mimosa.