Skip to content
Nuclei Templates

DVWA Headless Automatic Login

ID: dvwa-headless-automatic-login

Severity: high

Author: pdteam

Tags: headless,dvwa

Description

Section titled “Description”

YAML Source

Section titled “YAML Source”
id: dvwa-headless-automatic-login


info:
  name: DVWA Headless Automatic Login
  author: pdteam
  severity: high
  tags: headless,dvwa


headless:
  - steps:
      - args:
          url: "{{BaseURL}}/login.php"
        action: navigate


      - action: waitload


      - args:
          by: x
          xpath: /html/body/div/div[2]/form/fieldset/input
        action: click


      - action: waitload


      - args:
          by: x
          value: admin
          xpath: /html/body/div/div[2]/form/fieldset/input
        action: text


      - args:
          by: x
          xpath: /html/body/div/div[2]/form/fieldset/input[2]
        action: click


      - action: waitload


      - args:
          by: x
          value: password
          xpath: /html/body/div/div[2]/form/fieldset/input[2]
        action: text


      - args:
          by: x
          xpath: /html/body/div/div[2]/form/fieldset/p/input
        action: click


      - action: waitload


    matchers-condition: or
    matchers:
      - part: resp
        type: word
        words:
          - "You have logged in as"


      - part: resp
        type: word
        words:
          - "First time using DVWA"
# digest: 490a0046304402200f755479bf318ce263c1317bb4d50bba52e2119fd241f26e50346a3bf45c8d9702201c52a239e45c8558d532f20be2fb1de99fdaeebb58ca089ef475b72d07dac298:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

Section titled “Guide to check the vulnerabilities”

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "headless/dvwa-headless-automatic-login.yaml"

View on Github