2021-03-10 08:33:40 +00:00
|
|
|
id: dvwa-headless-automatic-login
|
|
|
|
|
info:
|
|
|
|
|
name: DVWA Headless Automatic Login
|
|
|
|
|
author: pdteam
|
|
|
|
|
severity: high
|
2021-03-10 10:41:33 +00:00
|
|
|
tags: headless
|
2021-03-10 08:33:40 +00:00
|
|
|
|
|
|
|
|
headless:
|
|
|
|
|
- steps:
|
|
|
|
|
- args:
|
|
|
|
|
url: "{{BaseURL}}/login.php"
|
|
|
|
|
action: navigate
|
|
|
|
|
- action: waitload
|
|
|
|
|
- args:
|
|
|
|
|
by: x
|
|
|
|
|
xpath: /html/body/div/div[2]/form/fieldset/input
|
|
|
|
|
action: click
|
|
|
|
|
- action: waitload
|
|
|
|
|
- args:
|
|
|
|
|
by: x
|
|
|
|
|
value: admin
|
|
|
|
|
xpath: /html/body/div/div[2]/form/fieldset/input
|
|
|
|
|
action: text
|
|
|
|
|
- args:
|
|
|
|
|
by: x
|
|
|
|
|
xpath: /html/body/div/div[2]/form/fieldset/input[2]
|
|
|
|
|
action: click
|
|
|
|
|
- action: waitload
|
|
|
|
|
- args:
|
|
|
|
|
by: x
|
|
|
|
|
value: password
|
|
|
|
|
xpath: /html/body/div/div[2]/form/fieldset/input[2]
|
|
|
|
|
action: text
|
|
|
|
|
- args:
|
|
|
|
|
by: x
|
|
|
|
|
xpath: /html/body/div/div[2]/form/fieldset/p/input
|
|
|
|
|
action: click
|
|
|
|
|
- action: waitload
|
|
|
|
|
matchers:
|
|
|
|
|
- part: resp
|
|
|
|
|
type: word
|
|
|
|
|
words:
|
|
|
|
|
- "You have logged in as"
|
