PHP module shouldnt zap CMD option (@wchen-r7)
As far as I can tell, there is no purpose for this cleanup. No other CMD exec module takes pains to clear out CMD after run, and it looks like a bad idea -- what happens when you rexploit?
This commit is contained in:
@@ -87,13 +87,6 @@ class Metasploit3 < Msf::Exploit::Remote
|
||||
return res.get_cookies
|
||||
end
|
||||
|
||||
def cleanup
|
||||
# We may not be using php/exe again, so clear the CMD option
|
||||
if datastore['CMD']
|
||||
datastore['CMD'] = nil
|
||||
end
|
||||
end
|
||||
|
||||
def exploit
|
||||
# if we are using the exec CMD stager
|
||||
# important to check which php functions are disabled
|
||||
|
||||
Reference in New Issue
Block a user