minor update

stamparm · stamparm · commit 0ed5ba55597e · 2010-02-16T13:24:09.000Z
diff --git a/lib/takeover/web.py b/lib/takeover/web.py
@@ -86,6 +86,8 @@ def webFileUpload(self, fileToUpload, destFileName, directory):
         return retVal
 
     def __webFileStreamUpload(self, stream, destFileName, directory):
+        stream.seek(0) #rewind
+        
         if self.webApi in ("php", "asp"):
             multipartParams = {
                                 "upload":    "1",
@@ -95,9 +97,6 @@ def __webFileStreamUpload(self, stream, destFileName, directory):
 
             page = Request.getPage(url=self.webUploaderUrl, multipart=multipartParams, raise404=False)
 
-            if stream:
-                stream.seek(0)
-
             if "File uploaded" not in page:
                 warnMsg  = "unable to upload the backdoor through "
                 warnMsg += "the uploader agent on '%s'" % directory
@@ -118,6 +117,7 @@ def __webFileInject(self, fileContent, fileName, directory):
         query       = agent.postfixQuery(query)
         payload     = agent.payload(newValue=query)
         page        = Request.queryPage(payload)
+        return page
 
     def webInit(self):
         """
@@ -169,7 +169,6 @@ def webInit(self):
         backdoorName = "backdoor.%s" % self.webApi
         backdoorStream = decloakToNamedTemporaryFile(os.path.join(paths.SQLMAP_SHELL_PATH, backdoorName + '_'), backdoorName)
         backdoorContent = backdoorStream.read()
-        backdoorStream.seek(0)
         
         uploaderName = "uploader.%s" % self.webApi
         uploaderContent = decloak(os.path.join(paths.SQLMAP_SHELL_PATH, uploaderName + '_'))
