diff --git a/plugins/generic/takeover.py b/plugins/generic/takeover.py index 0287a7c18..5f44dc3f2 100644 --- a/plugins/generic/takeover.py +++ b/plugins/generic/takeover.py @@ -183,7 +183,7 @@ class Takeover(Abstraction, DEP, Metasploit, Registry): requestDir = os.path.normpath(directory.replace(kb.docRoot, "/").replace("\\", "/")) baseUrl = "%s://%s:%d%s" % (conf.scheme, conf.hostname, conf.port, requestDir) uploaderUrl = "%s/%s" % (baseUrl, uploaderName) - uploaderUrl = uploaderUrl.replace("./", "/") + uploaderUrl = uploaderUrl.replace("./", "/").replace("\\", "/").replace("//", "/") uplPage, _ = Request.getPage(url=uploaderUrl, direct=True) if "sqlmap backdoor uploader" not in uplPage: