From ff14e71422d8afc10b6fb3712aff67625acf09b8 Mon Sep 17 00:00:00 2001 From: pussycat0x <65701233+pussycat0x@users.noreply.github.com> Date: Tue, 27 Dec 2022 19:30:11 +0530 Subject: [PATCH] csrf regex -update --- default-logins/kanboard-default-login.yaml | 25 +++++++++++----------- 1 file changed, 13 insertions(+), 12 deletions(-) diff --git a/default-logins/kanboard-default-login.yaml b/default-logins/kanboard-default-login.yaml index cd1b6ab27d..2e10333c51 100644 --- a/default-logins/kanboard-default-login.yaml +++ b/default-logins/kanboard-default-login.yaml @@ -25,7 +25,7 @@ requests: Host: {{Hostname}} Content-Type: application/x-www-form-urlencoded - username={{user}}&password={{pass}}&csrf_token={{token}} + username={{user}}&password={{pass}}&csrf_token={{csrf_token}} - | GET /?controller=DashboardController&action=show HTTP/1.1 @@ -37,24 +37,25 @@ requests: - admin pass: - admin - + extractors: + - type: regex + name: csrf_token + part: body + internal: true + group: 1 + regex: + - "hidden\" name=\"csrf_token\" value=\"([0-9a-z]+)\"" + cookie-reuse: true matchers-condition: and matchers: - type: word words: - - 'kanboard' - - 'admin' + - 'New project' + - 'Project management' condition: and + case-insensitive: true - type: status status: - 200 - - extractors: - - type: regex - name: token - part: body - regex: - - '([a-f0-9]{64})' - internal: true