id: dvwa-headless-automatic-login

info:
  name: DVWA Headless Automatic Login
  author: pdteam
  severity: high
  tags: headless,dvwa

headless:
  - steps:
      - args:
          url: "{{BaseURL}}/login.php"
        action: navigate

      - action: waitload

      - args:
          by: x
          xpath: /html/body/div/div[2]/form/fieldset/input
        action: click

      - action: waitload

      - args:
          by: x
          value: admin
          xpath: /html/body/div/div[2]/form/fieldset/input
        action: text

      - args:
          by: x
          xpath: /html/body/div/div[2]/form/fieldset/input[2]
        action: click

      - action: waitload

      - args:
          by: x
          value: password
          xpath: /html/body/div/div[2]/form/fieldset/input[2]
        action: text

      - args:
          by: x
          xpath: /html/body/div/div[2]/form/fieldset/p/input
        action: click

      - action: waitload

    matchers-condition: or
    matchers:
      - part: resp
        type: word
        words:
          - "You have logged in as"

      - part: resp
        type: word
        words:
          - "First time using DVWA"
# digest: 490a0046304402200f755479bf318ce263c1317bb4d50bba52e2119fd241f26e50346a3bf45c8d9702201c52a239e45c8558d532f20be2fb1de99fdaeebb58ca089ef475b72d07dac298:922c64590222798bb761d5b6d8e72950