Same as in exploit? Could combine the XML and the send_request in a common method to reduce duplication