6

[root:~]# !curl:gs/after/again/   #curl -s -i -L -b dvwa.cookie -d "username=user&password=pass&user_token=${CSRF}&Login=Login" 192.168.1.33/DVWA/login.php > /root/again.txt
[root:~]#
[root:~]# diff after.txt again.txt
2c2
< Date: Thu, 15 Oct 2015 19:58:45 GMT
---
> Date: Thu, 15 Oct 2015 19:59:59 GMT
13c13
< Date: Thu, 15 Oct 2015 19:58:46 GMT
---
> Date: Thu, 15 Oct 2015 19:59:59 GMT
19c19
< Content-Length: 1607
---
> Content-Length: 1618
68c68
<  <input type='hidden' name='user_token' value='3eae6f4ceeabfb56e5e390f30bb0195b' />
---
>  <input type='hidden' name='user_token' value='e9ff39f78d2418ce893e93e4066eabc0' />
74c74
<  <div class="message">Login failed</div>
---
>  <div class="message">CSRF token is incorrect</div>
[root:~]#