2021-03-10 08:33:40 +00:00
|
|
|
id: dvwa-headless-automatic-login
|
2022-04-22 10:38:41 +00:00
|
|
|
|
2021-03-10 08:33:40 +00:00
|
|
|
info:
|
|
|
|
|
name: DVWA Headless Automatic Login
|
|
|
|
|
author: pdteam
|
|
|
|
|
severity: high
|
2022-01-04 19:34:16 +00:00
|
|
|
tags: headless,dvwa
|
2024-01-04 06:27:45 +00:00
|
|
|
|
2021-03-10 08:33:40 +00:00
|
|
|
headless:
|
|
|
|
|
- steps:
|
|
|
|
|
- args:
|
|
|
|
|
url: "{{BaseURL}}/login.php"
|
|
|
|
|
action: navigate
|
2023-10-14 11:27:55 +00:00
|
|
|
|
2021-03-10 08:33:40 +00:00
|
|
|
- action: waitload
|
2023-10-14 11:27:55 +00:00
|
|
|
|
2021-03-10 08:33:40 +00:00
|
|
|
- args:
|
|
|
|
|
by: x
|
|
|
|
|
xpath: /html/body/div/div[2]/form/fieldset/input
|
|
|
|
|
action: click
|
2023-10-14 11:27:55 +00:00
|
|
|
|
2021-03-10 08:33:40 +00:00
|
|
|
- action: waitload
|
2023-10-14 11:27:55 +00:00
|
|
|
|
2021-03-10 08:33:40 +00:00
|
|
|
- args:
|
|
|
|
|
by: x
|
|
|
|
|
value: admin
|
|
|
|
|
xpath: /html/body/div/div[2]/form/fieldset/input
|
|
|
|
|
action: text
|
2023-10-14 11:27:55 +00:00
|
|
|
|
2021-03-10 08:33:40 +00:00
|
|
|
- args:
|
|
|
|
|
by: x
|
|
|
|
|
xpath: /html/body/div/div[2]/form/fieldset/input[2]
|
|
|
|
|
action: click
|
2023-10-14 11:27:55 +00:00
|
|
|
|
2021-03-10 08:33:40 +00:00
|
|
|
- action: waitload
|
2023-10-14 11:27:55 +00:00
|
|
|
|
2021-03-10 08:33:40 +00:00
|
|
|
- args:
|
|
|
|
|
by: x
|
|
|
|
|
value: password
|
|
|
|
|
xpath: /html/body/div/div[2]/form/fieldset/input[2]
|
|
|
|
|
action: text
|
2023-10-14 11:27:55 +00:00
|
|
|
|
2021-03-10 08:33:40 +00:00
|
|
|
- args:
|
|
|
|
|
by: x
|
|
|
|
|
xpath: /html/body/div/div[2]/form/fieldset/p/input
|
|
|
|
|
action: click
|
2023-10-14 11:27:55 +00:00
|
|
|
|
2021-03-10 08:33:40 +00:00
|
|
|
- action: waitload
|
2022-07-21 11:10:30 +00:00
|
|
|
|
2022-07-18 20:57:06 +00:00
|
|
|
matchers-condition: or
|
2021-03-10 08:33:40 +00:00
|
|
|
matchers:
|
|
|
|
|
- part: resp
|
|
|
|
|
type: word
|
|
|
|
|
words:
|
|
|
|
|
- "You have logged in as"
|
2022-07-21 11:10:30 +00:00
|
|
|
|
2022-07-18 20:57:06 +00:00
|
|
|
- part: resp
|
|
|
|
|
type: word
|
|
|
|
|
words:
|
|
|
|
|
- "First time using DVWA"
|
2024-01-04 06:57:22 +00:00
|
|
|
# digest: 4a0a0047304502202df744e611b878bb983647874d41c8e4ad4871a8129bd7257a920809328f5172022100ec6be46e75582d1bb87e9b892e2624c3d21bfdc055194913c342dbe2c9f75856:922c64590222798bb761d5b6d8e72950
|
