4

default-logins/phpmyadmin/phpmyadmin-default-login.yaml

@@ -10,7 +10,7 @@ info:
   tags: default-login,phpmyadmin
 
 requests:
-    - raw:
+  - raw:
       - |
         GET /index.php HTTP/1.1
         Host: {{Hostname}}
@@ -36,40 +36,40 @@ requests:
 
         pma_username={{user}}&pma_password={{password}}&server=1&target=index.php&token={{token1}}
 
-      attack: clusterbomb
-      payloads:
-        user:
-          - root
-          - mysql
-        password:
-          - 123456
-          - root
-          - mysql
+    attack: clusterbomb
+    payloads:
+      user:
+        - root
+        - mysql
+      password:
+        - 123456
+        - root
+        - mysql
 
-      extractors:
-        - type: regex
-          name: token1
-          part: body
-          internal: true
-          group: 1
-          regex:
-            - ;token=(.*?)'></script>
-        - type: regex
-          name: token2
-          part: header
-          internal: true
-          group: 1
-          regex:
-            - phpMyAdmin=(.*?); path=
+    extractors:
+      - type: regex
+        name: token1
+        part: body
+        internal: true
+        group: 1
+        regex:
+          - ;token=(.*?)'></script>
+      - type: regex
+        name: token2
+        part: header
+        internal: true
+        group: 1
+        regex:
+          - phpMyAdmin=(.*?); path=
 
-      matchers-condition: and
-      matchers:
-        - type: status
-          status:
-            - 302
-        - type: word
-          part: header
-          words:
-            - 'Set-Cookie: pmaUser'
-            - 'Set-Cookie: pmaPas'
-          condition: and
+    matchers-condition: and
+    matchers:
+      - type: status
+        status:
+          - 302
+      - type: word
+        part: header
+        words:
+          - 'Set-Cookie: pmaUser'
+          - 'Set-Cookie: pmaPas'
+        condition: and