diff --git a/default-logins/glpi/glpi-default-login.yaml b/default-logins/glpi/glpi-default-login.yaml index 9a3f2b190d..c2ea4c26d7 100644 --- a/default-logins/glpi/glpi-default-login.yaml +++ b/default-logins/glpi/glpi-default-login.yaml @@ -1,4 +1,5 @@ id: glpi-default-login + info: name: GLPI Default Login author: andysvints @@ -20,17 +21,14 @@ requests: Content-Type: application/x-www-form-urlencoded Referer: {{BaseURL}} - {{name}}={{username}}&{{passwords}}={{password}}&auth=local&submit=Submit&_glpi_csrf_token={{token}} + {{name}}={{user}}&{{password}}={{pass}}&auth=local&submit=Submit&_glpi_csrf_token={{token}} - payloads: - username: - - glpi - password: - - glpi attack: pitchfork - - cookie-reuse: true - redirects: true + payloads: + user: + - glpi + pass: + - glpi extractors: - type: regex @@ -50,18 +48,20 @@ requests: - "type=\"text\" name=\"([0-9a-z]+)\" id=\"login_name\" required=\"required\"" - type: regex - name: passwords + name: password part: body internal: true group: 1 regex: - "type=\"password\" name=\"([0-9a-z]+)\" id=\"login_password\" required=\"required\"" + cookie-reuse: true matchers-condition: and matchers: - type: word words: - '