Added small tweaks to align with the PoC.

Ostorlab · Feb 10, 2025 · fb301fa · fb301fa
1 parent 1502e65
commit fb301fa
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/agent/exploits/cve_2018_19410.py b/agent/exploits/cve_2018_19410.py
@@ -67,10 +67,9 @@ def check(self, target: definitions.Target) -> list[definitions.Vulnerability]:
             "Accept-Language": "en-GB,en;q=0.5",
             "Accept-Encoding": "gzip, deflate, br",
             "Content-Type": "application/x-www-form-urlencoded; charset=UTF-8",
-            "X-Requested-With": "XMLHttpRequest",
             "Origin": f"{target.origin}",
             "Connection": "close",
-            "Referer": f"{target.origin}/",
+            "Referer": f"{target.origin}{LOGIN_ENDPOINT}",
         }
 
         data = {"id": "200", "users": TEST_USERNAME}