# This is the form login bruteforce + discovery demo

plugins
audit htaccessMethods
bruteforce formAuthBrute
discovery allowedMethods,webSpider
grep passwordProfiling
output console,textFile
output
output config textFile
set fileName output-w3af.txt
set verbose True
back
output config console
set verbose False
back
back
target
set target http://localhost/w3af/form_login/
back
start
exit