Land #9414, wp_admin_shell_upload - remove plugin dir after exploitation

2018-01-16 21:08:22 -06:00 · 2018-01-16 21:08:22 -06:00 · d6e966b079
parent 77e76a80a1 2f9eebe28b
commit d6e966b079
1 changed files with 1 additions and 0 deletions
--- a/modules/exploits/unix/webapp/wp_admin_shell_upload.rb
+++ b/modules/exploits/unix/webapp/wp_admin_shell_upload.rb
@ -96,6 +96,7 @@ class MetasploitModule < Msf::Exploit::Remote
    print_status("Executing the payload at #{payload_uri}...")
    register_files_for_cleanup("#{payload_name}.php")
    register_files_for_cleanup("#{plugin_name}.php")
+    register_dir_for_cleanup("../#{plugin_name}")
    send_request_cgi({ 'uri' => payload_uri, 'method' => 'GET' }, 5)
  end
 end