Land #9931, minor fixes for #9876 (Drupalgeddon 2)

rapid7 · Apr 26, 2018 · 492b600 · 492b600
1 parent d340ef2
commit 492b600
Showing 1 changed file with 0 additions and 12 deletions.
diff --git a/modules/exploits/unix/webapp/drupal_drupalgeddon2.rb b/modules/exploits/unix/webapp/drupal_drupalgeddon2.rb
@@ -19,8 +19,6 @@ def initialize(info = {})
         This module exploits a Drupal property injection in the Forms API.
 
         Drupal 6.x, < 7.58, 8.2.x, < 8.3.9, < 8.4.6, and < 8.5.1 are vulnerable.
-
-        Tested on 7.57 and 8.4.5.
       },
       'Author'         => [
         'Jasper Mattsson', # Vulnerability discovery
@@ -201,16 +199,6 @@ def exploit
     end
   end
 
-  # XXX: Ivars are being preserved
-  def cleanup
-    begin
-      remove_instance_variable(:@version)
-    rescue NameError
-    end
-
-    super
-  end
-
   def dropper_assert
     php_file = Pathname.new(
       "#{datastore['WritableDir']}/#{random_crap}.php"