clean up the file system from sqlmap created web files

plugins/generic/misc.py

@@ -103,11 +103,18 @@ class Miscellaneous:
         inject.goStacked("DROP TABLE %s" % tblName, silent=True)
         inject.goStacked("CREATE TABLE %s(%s %s)" % (tblName, tblField, tblType))
 
-    def cleanup(self, onlyFileTbl=False, udfDict=None):
+    def cleanup(self, onlyFileTbl=False, udfDict=None, web=False):
         """
-        Cleanup database from sqlmap create tables and functions
+        Cleanup file system and database from sqlmap create files, tables
+        and functions
         """
 
+        if web:
+            logger.info("cleaning up the web files uploaded")
+
+            self.delRemoteFile(self.webStagerFilePath)
+            self.delRemoteFile(self.webBackdoorFilePath)
+
         if not isTechniqueAvailable(PAYLOAD.TECHNIQUE.STACKED) and not conf.direct:
             return
 

plugins/generic/takeover.py

@@ -60,7 +60,7 @@ class Takeover(Abstraction, Metasploit, ICMPsh, Registry, Miscellaneous):
             self.runCmd(conf.osCmd)
 
         if not conf.osShell and not conf.osPwn and not conf.cleanup:
-            self.cleanup()
+            self.cleanup(web=web)
 
     def osShell(self):
         if isTechniqueAvailable(PAYLOAD.TECHNIQUE.STACKED) or conf.direct:
@@ -83,7 +83,7 @@ class Takeover(Abstraction, Metasploit, ICMPsh, Registry, Miscellaneous):
             self.shell()
 
         if not conf.osPwn and not conf.cleanup:
-            self.cleanup()
+            self.cleanup(web=web)
 
     def osPwn(self):
         goUdf = False
@@ -239,7 +239,7 @@ class Takeover(Abstraction, Metasploit, ICMPsh, Registry, Miscellaneous):
                 self.pwn(goUdf)
 
         if not conf.cleanup:
-            self.cleanup()
+            self.cleanup(web=web)
 
     def osSmb(self):
         self.checkDbmsOs()