diff --git a/lib/takeover/web.py b/lib/takeover/web.py index ad853862b..0550dc5ea 100644 --- a/lib/takeover/web.py +++ b/lib/takeover/web.py @@ -136,12 +136,12 @@ class Web: message = "which web application language does the web server " message += "support?\n" - message += "[1] ASP\n" - message += "[2] PHP (default)\n" + message += "[1] ASP%s\n" % " (default)" if kb.os == "Windows" else "" + message += "[2] PHP%s\n" % "" if kb.os == "Windows" else " (default)" message += "[3] JSP" while True: - choice = readInput(message, default="2") + choice = readInput(message, default="1" if kb.os == "Windows" else "2") if not choice or choice == "2": self.webApi = "php" @@ -202,9 +202,9 @@ class Web: if self.webApi == "asp": runcmdName = "tmpe%s.exe" % randomStr(4) runcmdStream = decloakToNamedTemporaryFile(os.path.join(paths.SQLMAP_SHELL_PATH, 'runcmd.exe_'), runcmdName) - match = re.search(r'input type=hidden name=scriptsdir value="([^"]+)"', uplPage) + match = re.search(r'input type=hidden name=scriptsdir value="([^"]+)"', uplPage) - if match: + if match: backdoorDirectory = match.group(1) else: continue