Skip to content

Commit efffbf7

Browse files
author
Tod Beardsley
committed
PHP module shouldnt zap CMD option (@wchen-r7)
As far as I can tell, there is no purpose for this cleanup. No other CMD exec module takes pains to clear out CMD after run, and it looks like a bad idea -- what happens when you rexploit?
1 parent f189033 commit efffbf7

File tree

1 file changed

+0
-7
lines changed

1 file changed

+0
-7
lines changed

modules/exploits/multi/http/phpldapadmin_query_engine.rb

Lines changed: 0 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -87,13 +87,6 @@ def get_session
8787
return res.get_cookies
8888
end
8989

90-
def cleanup
91-
# We may not be using php/exe again, so clear the CMD option
92-
if datastore['CMD']
93-
datastore['CMD'] = nil
94-
end
95-
end
96-
9790
def exploit
9891
# if we are using the exec CMD stager
9992
# important to check which php functions are disabled

0 commit comments

Comments
 (0)