clean up the file system from sqlmap created web files

bdamele · bdamele · commit 6f6cd676b79e · 2012-07-11T14:07:20.000+01:00
diff --git a/plugins/generic/misc.py b/plugins/generic/misc.py
@@ -103,11 +103,18 @@ def createSupportTbl(self, tblName, tblField, tblType):
         inject.goStacked("DROP TABLE %s" % tblName, silent=True)
         inject.goStacked("CREATE TABLE %s(%s %s)" % (tblName, tblField, tblType))
 
-    def cleanup(self, onlyFileTbl=False, udfDict=None):
+    def cleanup(self, onlyFileTbl=False, udfDict=None, web=False):
         """
-        Cleanup database from sqlmap create tables and functions
+        Cleanup file system and database from sqlmap create files, tables
+        and functions
         """
 
+        if web:
+            logger.info("cleaning up the web files uploaded")
+
+            self.delRemoteFile(self.webStagerFilePath)
+            self.delRemoteFile(self.webBackdoorFilePath)
+
         if not isTechniqueAvailable(PAYLOAD.TECHNIQUE.STACKED) and not conf.direct:
             return
 
diff --git a/plugins/generic/takeover.py b/plugins/generic/takeover.py
@@ -60,7 +60,7 @@ def osCmd(self):
             self.runCmd(conf.osCmd)
 
         if not conf.osShell and not conf.osPwn and not conf.cleanup:
-            self.cleanup()
+            self.cleanup(web=web)
 
     def osShell(self):
         if isTechniqueAvailable(PAYLOAD.TECHNIQUE.STACKED) or conf.direct:
@@ -83,7 +83,7 @@ def osShell(self):
             self.shell()
 
         if not conf.osPwn and not conf.cleanup:
-            self.cleanup()
+            self.cleanup(web=web)
 
     def osPwn(self):
         goUdf = False
@@ -239,7 +239,7 @@ def osPwn(self):
                 self.pwn(goUdf)
 
         if not conf.cleanup:
-            self.cleanup()
+            self.cleanup(web=web)
 
     def osSmb(self):
         self.checkDbmsOs()
