PHP module shouldnt zap CMD option (@wchen-r7)

As far as I can tell, there is no purpose for this cleanup. No other CMD
exec module takes pains to clear out CMD after run, and it looks like a
bad idea -- what happens when you rexploit?
This commit is contained in:
Tod Beardsley
2014-05-23 15:05:30 -05:00
parent f189033e8a
commit efffbf751a
@@ -87,13 +87,6 @@ class Metasploit3 < Msf::Exploit::Remote
return res.get_cookies
end
def cleanup
# We may not be using php/exe again, so clear the CMD option
if datastore['CMD']
datastore['CMD'] = nil
end
end
def exploit
# if we are using the exec CMD stager
# important to check which php functions are disabled