diff --git a/lib/takeover/web.py b/lib/takeover/web.py index 0512b772e..6461f961c 100644 --- a/lib/takeover/web.py +++ b/lib/takeover/web.py @@ -200,11 +200,11 @@ class Web: logger.info(infoMsg) if self.webApi == "asp": - runcmdName = 'runcmd.exe' - runcmdStream = decloakToNamedTemporaryFile(os.path.join(paths.SQLMAP_SHELL_PATH, runcmdName + '_'), runcmdName) + runcmdName = "tmpe%s.exe" % randomStr(4) + runcmdStream = decloakToNamedTemporaryFile(os.path.join(paths.SQLMAP_SHELL_PATH, 'runcmd.exe_'), runcmdName) scriptsDirectory = "Scripts" backdoorDirectory = "%s..\%s" % (posixToNtSlashes(directory), scriptsDirectory) - backdoorContent = backdoorContent.replace("WRITABLE_DIR", backdoorDirectory) + backdoorContent = backdoorContent.replace("WRITABLE_DIR", backdoorDirectory).replace("RUNCMD_EXE", runcmdName) backdoorStream.file.truncate() backdoorStream.read() backdoorStream.seek(0) diff --git a/shell/backdoor.asp_ b/shell/backdoor.asp_ index f46d884aa..cabdd0cfe 100644 Binary files a/shell/backdoor.asp_ and b/shell/backdoor.asp_ differ