dvws-node icon indicating copy to clipboard operation
dvws-node copied to clipboard

Unable to login or create admin account

Open mrchubbsy opened this issue 3 years ago • 2 comments

I will caveat this with I'm fairly new to this type of work.

I've downloaded the Docker container to an AWS Linux2 host and have used the docker-compose.yml file to launch.

I understand there is no default user to logon with (or at least there is no information regarding a default admin logon / or if there is - it doesn't work!). With help from a colleague who knows more about this than I, we tried to use the details on the mass-assignment page to create an admin user. Unfortunately this was unsuccessful.

We also tried using curl, without success, getting a status 500 error

curl -f -d "username=foobar2&password=foobar2&admin=true" -H "Content-Type: application/x-www-form-urlencoded"  -X POST http://_**<IP_OF_HOST>**_/api/v2/users
curl: (22) The requested URL returned error: 500

curl -f -d "username=newuser&p@ssw0rd=foobar2&admin=true" -H "Content-Type: application/x-www-form-urlencoded"  -X POST http://_**<IP_OF_HOST>**_/api/v2/users
curl: (22) The requested URL returned error: 500

I would appreciate ANY help in getting started with this application.....

Many thanks,

Simon.

mrchubbsy avatar Aug 18 '22 16:08 mrchubbsy

Hey, thanks for reporting this issue, i think there was a typo in [docker-compose.yml](https://github.com/snoopysecurity/dvws-node/blob/master/docker-compose.yml) Its been fixed now. Can you clone the latest version of dvws-node and try again? thanks

snoopysecurity avatar Aug 27 '22 22:08 snoopysecurity

Your curl commands looks correct, it might be that the dockerfile had an issue. Can you clone the latest version of dvws-node, run the docker image (docker-compose up) and paste me the output

snoopysecurity avatar Sep 23 '22 16:09 snoopysecurity

I've used the docker version for a while, built and launched with "docker-compose up", and I haven't encountered this issue. Admin and non-admin users can be found in startup_script.js and they both work, and mass assignment works as well - via Burp at least.

halfluke avatar Oct 11 '22 22:10 halfluke

awesome, good to hear, i ll close this issue. thanks

snoopysecurity avatar Oct 17 '22 11:10 snoopysecurity