diff --git a/default-logins/xui-weak-login.yaml b/default-logins/xui-weak-login.yaml
index 3c7957dfaad..173b1aa6380 100644
--- a/default-logins/xui-weak-login.yaml
+++ b/default-logins/xui-weak-login.yaml
@@ -24,12 +24,12 @@ requests:
       content-type: application/x-www-form-urlencoded
     body: "username={{username}}&password={{password}}"
 
+    attack: pitchfork
     payloads:
       username:
         - "admin"
       password:
         - "admin"
-    attack: pitchfork
 
     matchers-condition: and
     matchers: