Sign upLogin

ANSSI-FR/polichombr

View on GitHub
Star

Showing 1,243 of 1,244 total issues

Line is too long. [85/80]
Open

        strings << [di.address, argStr.gsub(/[\x0d]/n, '\\r').gsub(/[\x0a]/n, '\\n')]
Severity: Minor
Found in polichombr/analysis_tools/AnalyzeIt.rb by rubocop

Line is too long. [83/80]
Open

      strings << [di.address, argStr.gsub(/[\x0d]/n, '\\r').gsub(/[\x0a]/n, '\\n')]
Severity: Minor
Found in polichombr/analysis_tools/AnalyzeIt.rb by rubocop

Line is too long. [85/80]
Open

        strings << [di.address, argStr.gsub(/[\x0d]/n, '\\r').gsub(/[\x0a]/n, '\\n')]
Severity: Minor
Found in polichombr/analysis_tools/AnalyzeIt.rb by rubocop

Line is too long. [108/80]
Open

  'CreateNamedPipeA' => { 'args' => %w[PSTR UINT UINT UINT UINT UINT UINT UINT UINT], 'tags' => ['PIPE_'] },
Severity: Minor
Found in polichombr/analysis_tools/AnalyzeIt.rb by rubocop

Line is too long. [134/80]
Open

  funcname = $gdasm.get_label_at(addr).gsub('iat_', '') if defined?($gdasm.get_label_at(addr)) && $gdasm.get_label_at(addr) =~ /^iat_/
Severity: Minor
Found in polichombr/analysis_tools/AnalyzeIt.rb by rubocop

Line is too long. [237/80]
Open

          next unless (tdi.instruction.args.first.symbolic.target.bind(ebp: 0).reduce < -(sizeMax - (debstr + tdi.instruction.args.first.sz / 8))) && (tdi.instruction.args.first.symbolic.target.bind(ebp: 0).reduce >= -(sizeMax - debstr))
Severity: Minor
Found in polichombr/analysis_tools/AnalyzeIt.rb by rubocop

Line is too long. [120/80]
Open

File.open("#{target}.idacmd", 'wb') { |file| file.write("#{@IDAscript}nop() # Polichombr 1337 - Skelenox 1337 too ;]") }
Severity: Minor
Found in polichombr/analysis_tools/AnalyzeIt.rb by rubocop

Line is too long. [138/80]
Open

                  ['RC5/RC6 magic', ["\x63\x51\xe1\xb7", "\x62\x51\xe1\xb7", "\x6b\x2a\xed\x8a", "\xb9\x79\x37\x9e", "\x15\x7c\x4a\x7f"]]]
Severity: Minor
Found in polichombr/analysis_tools/AnalyzeIt.rb by rubocop

Line is too long. [228/80]
Open

                if (di.block.list[i].opcode.name == 'mov') && (((di.block.list[i].instruction.args.first.to_s == "[esp+0#{arg.to_s(16)}h]") || ((di.block.list[i].instruction.args.first.to_s == 'dword ptr [esp]') && (esp == 0))))
Severity: Minor
Found in polichombr/analysis_tools/AnalyzeIt.rb by rubocop

Line is too long. [89/80]
Open

      printSubCallTree(tdi_addr, toaddr, [[0, true]], countSubCallTree(tdi_addr, toaddr))
Severity: Minor
Found in polichombr/analysis_tools/AnalyzeIt.rb by rubocop

Line is too long. [91/80]
Open

      elsif !$gdasm.xrefs[di.instruction.args.last.symbolic.target.bind.reduce].include? di
Severity: Minor
Found in polichombr/analysis_tools/AnalyzeIt.rb by rubocop

Line is too long. [102/80]
Open

  next unless !dasm.di_at(dasm.normalize(ep)).nil? && !dasm.di_at(dasm.normalize(ep)).instruction.nil?
Severity: Minor
Found in polichombr/analysis_tools/AnalyzeIt.rb by rubocop

Line is too long. [123/80]
Open

      if !argStr.nil? && (argStr.length > 4) && (argStr =~ regexStr || ((argStr.length > 5) && (argStr !~ /[\x80-\xff]/n)))
Severity: Minor
Found in polichombr/analysis_tools/AnalyzeIt.rb by rubocop

Line is too long. [1598/80]
Open

  if str.downcase =~ /(\.arpa$|\.com$|\.edu$|\.firm$|\.gov$|\.int$|\.mil$|\.mobi$|\.nato$|\.net$|\.nom$|\.org$|\.store$|\.web$|\.ac$|\.ad$|\.ae$|\.af$|\.ag$|\.ai$|\.al$|\.am$|\.an$|\.ao$|\.aq$|\.ar$|\.as$|\.at$|\.au$|\.aw$|\.az$|\.ba$|\.bb$|\.bd$|\.be$|\.bf$|\.bg$|\.bh$|\.bi$|\.bj$|\.bm$|\.bn$|\.bo$|\.br$|\.bs$|\.bt$|\.bv$|\.bw$|\.by$|\.bz$|\.ca$|\.cc$|\.cf$|\.cg$|\.ch$|\.ci$|\.ck$|\.cl$|\.cm$|\.cn$|\.co$|\.cr$|\.cs$|\.cu$|\.cv$|\.cx$|\.cy$|\.cz$|\.de$|\.dj$|\.dk$|\.dm$|\.do$|\.dz$|\.ec$|\.ee$|\.eg$|\.eh$|\.er$|\.es$|\.et$|\.eu$|\.fi$|\.fj$|\.fk$|\.fm$|\.fo$|\.fr$|\.fx$|\.ga$|\.gb$|\.gd$|\.ge$|\.gf$|\.gh$|\.gi$|\.gl$|\.gm$|\.gn$|\.gp$|\.gq$|\.gr$|\.gs$|\.gt$|\.gu$|\.gw$|\.gy$|\.hk$|\.hm$|\.hn$|\.hr$|\.ht$|\.hu$|\.id$|\.ie$|\.il$|\.in$|\.io$|\.iq$|\.ir$|\.is$|\.it$|\.jm$|\.jo$|\.jp$|\.ke$|\.kg$|\.kh$|\.ki$|\.km$|\.kn$|\.kp$|\.kr$|\.kw$|\.ky$|\.kz$|\.la$|\.lb$|\.lc$|\.li$|\.lk$|\.lr$|\.ls$|\.lt$|\.lu$|\.lv$|\.ly$|\.ma$|\.mc$|\.md$|\.mg$|\.mh$|\.mk$|\.ml$|\.mm$|\.mn$|\.mo$|\.mp$|\.mq$|\.mr$|\.ms$|\.mt$|\.mu$|\.mv$|\.mw$|\.mx$|\.my$|\.mz$|\.na$|\.nc$|\.ne$|\.nf$|\.ng$|\.ni$|\.nl$|\.no$|\.np$|\.nr$|\.nt$|\.nu$|\.nz$|\.om$|\.pa$|\.pe$|\.pf$|\.pg$|\.ph$|\.pk$|\.pl$|\.pm$|\.pn$|\.pr$|\.pt$|\.pw$|\.py$|\.qa$|\.re$|\.ro$|\.ru$|\.rw$|\.sa$|\.sb$|\.sc$|\.sd$|\.se$|\.sg$|\.sh$|\.si$|\.sj$|\.sk$|\.sl$|\.sm$|\.sn$|\.so$|\.sr$|\.st$|\.su$|\.sv$|\.sy$|\.sz$|\.tc$|\.td$|\.tf$|\.tg$|\.th$|\.tj$|\.tk$|\.tm$|\.tn$|\.to$|\.tp$|\.tr$|\.tt$|\.tv$|\.tw$|\.tz$|\.ua$|\.ug$|\.uk$|\.um$|\.us$|\.uy$|\.uz$|\.va$|\.vc$|\.ve$|\.vg$|\.vi$|\.vn$|\.vu$|\.wf$|\.ws$|\.ye$|\.yt$|\.yu$|\.za$|\.zm$|\.zr$|\.zw$)/
Severity: Minor
Found in polichombr/analysis_tools/AnalyzeIt.rb by rubocop

Use snake_case for variable names.
Open

        currFunc += "#{i}:"
Severity: Minor
Found in polichombr/analysis_tools/AnalyzeIt.rb by rubocop

This cop makes sure that all variables use the configured style, snake_case or camelCase, for their names.

Example: EnforcedStyle: snake_case (default)

# bad
fooBar = 1

# good
foo_bar = 1

Example: EnforcedStyle: camelCase

# bad
foo_bar = 1

# good
fooBar = 1

Line is too long. [82/80]
Open

  'InternetOpenUrlW' => { 'args' => [nil, 'PWSTR', 'PWSTR'], 'tags' => ['Net_'] },
Severity: Minor
Found in polichombr/analysis_tools/AnalyzeIt.rb by rubocop

Line is too long. [82/80]
Open

                # "\x40\x55\x41\x54\x41\x55", # push    rbp;push    r12;push   r13
Severity: Minor
Found in polichombr/analysis_tools/AnalyzeIt.rb by rubocop

Line is too long. [166/80]
Open

  if di.instruction.to_s =~ /(564d5868h|5658h)/ || (di.opcode.name == 'sidt') || (di.opcode.name == 'sgdt') || (di.opcode.name == 'sldt') || (di.opcode.name == 'str')
Severity: Minor
Found in polichombr/analysis_tools/AnalyzeIt.rb by rubocop

Line is too long. [83/80]
Open

      strings << [di.address, argStr.gsub(/[\x0d]/n, '\\r').gsub(/[\x0a]/n, '\\n')]
Severity: Minor
Found in polichombr/analysis_tools/AnalyzeIt.rb by rubocop

Line is too long. [132/80]
Open

          if (ctb[debstr, ctbptr - debstr] !~ /([\x7f-\xff]|[\x01-\x08]|[\x0b-\x1f])/n) && (ctb[debstr, ctbptr - debstr].length > 4)
Severity: Minor
Found in polichombr/analysis_tools/AnalyzeIt.rb by rubocop
Severity
Category
Status
Source
Language