hackedteam/vector-applet

View on GitHub

Showing 36 of 78 total issues

Method run has 36 lines of code (exceeds 25 allowed). Consider refactoring.
Open

    @SuppressWarnings("all")
    @Override
    public Void run() {
        // System.out.println("payload");

Severity: Minor
Found in weaponized/src-exploit/x/PayloadRunner.java - About 1 hr to fix

    Method go has a Cognitive Complexity of 11 (exceeds 5 allowed). Consider refactoring.
    Open

        public static void go() {
            if( useOldExploitOnOldJavaVersions() ) {
                return;
            }
            
    Severity: Minor
    Found in twostage/src-exploit/x/CorbaTrustedMethodChain.java - About 1 hr to fix

    Cognitive Complexity

    Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

    A method's cognitive complexity is based on a few simple rules:

    • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
    • Code is considered more complex for each "break in the linear flow of the code"
    • Code is considered more complex when "flow breaking structures are nested"

    Further reading

    Method init has a Cognitive Complexity of 10 (exceeds 5 allowed). Consider refactoring.
    Open

        public void init() {
            Process f;
            InputStream payloadStream = null;
            
            Properties props = new Properties();
    Severity: Minor
    Found in twostage/src-direct/Html5.java - About 1 hr to fix

    Cognitive Complexity

    Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

    A method's cognitive complexity is based on a few simple rules:

    • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
    • Code is considered more complex for each "break in the linear flow of the code"
    • Code is considered more complex when "flow breaking structures are nested"

    Further reading

    Method encode has 26 lines of code (exceeds 25 allowed). Consider refactoring.
    Open

        public String encode(byte[] buf) {
            final char[] ALPHABET = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/".toCharArray();
            int[] toInt = new int[128];
    
            for (int i = 0; i < ALPHABET.length; i++) {
    Severity: Minor
    Found in twostage/src-exploit/x/XAppletW.java - About 1 hr to fix

      Method encode has 26 lines of code (exceeds 25 allowed). Consider refactoring.
      Open

          public String encode(byte[] buf) {
              final char[] ALPHABET = x.Strings.dec("BCDEFGHIJKLMNOPQRSTUVWXYZ[bcdefghijklmnopqrstuvwxyz{123456789:,0").toCharArray();
              int[] toInt = new int[128];
      
              for (int i = 0; i < ALPHABET.length; i++) {
      Severity: Minor
      Found in twostage/build/src-encoded/x/XAppletW.java - About 1 hr to fix

        Method run has a Cognitive Complexity of 9 (exceeds 5 allowed). Consider refactoring.
        Open

            @SuppressWarnings("all")
            @Override
            public Void run() {
                debug("payload here");
        
        
        Severity: Minor
        Found in twostage/src-exploit/x/PayloadRunner.java - About 55 mins to fix

        Cognitive Complexity

        Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

        A method's cognitive complexity is based on a few simple rules:

        • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
        • Code is considered more complex for each "break in the linear flow of the code"
        • Code is considered more complex when "flow breaking structures are nested"

        Further reading

        Method decode has a Cognitive Complexity of 9 (exceeds 5 allowed). Consider refactoring.
        Open

            public byte[] decode(String s) {
                final char[] ALPHABET = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/".toCharArray();
                int[] toInt = new int[128];
        
                for (int i = 0; i < ALPHABET.length; i++) {
        Severity: Minor
        Found in twostage/src-exploit/x/PayloadRunner.java - About 55 mins to fix

        Cognitive Complexity

        Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

        A method's cognitive complexity is based on a few simple rules:

        • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
        • Code is considered more complex for each "break in the linear flow of the code"
        • Code is considered more complex when "flow breaking structures are nested"

        Further reading

        Method init has a Cognitive Complexity of 8 (exceeds 5 allowed). Consider refactoring.
        Open

            public void init() {
                Process f;
                InputStream payloadStream = null;
                
                Properties props = new Properties();
        Severity: Minor
        Found in direct/WebEnhancer.java - About 45 mins to fix

        Cognitive Complexity

        Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

        A method's cognitive complexity is based on a few simple rules:

        • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
        • Code is considered more complex for each "break in the linear flow of the code"
        • Code is considered more complex when "flow breaking structures are nested"

        Further reading

        Method run has a Cognitive Complexity of 8 (exceeds 5 allowed). Consider refactoring.
        Open

            @SuppressWarnings("all")
            @Override
            public Void run() {
                // System.out.println("payload");
        
        
        Severity: Minor
        Found in weaponized/src-exploit/x/PayloadRunner.java - About 45 mins to fix

        Cognitive Complexity

        Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

        A method's cognitive complexity is based on a few simple rules:

        • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
        • Code is considered more complex for each "break in the linear flow of the code"
        • Code is considered more complex when "flow breaking structures are nested"

        Further reading

        Method useOldExploitOnOldJavaVersions has a Cognitive Complexity of 8 (exceeds 5 allowed). Consider refactoring.
        Open

            private static boolean useOldExploitOnOldJavaVersions() {
                String javaVersion = System.getProperty("java.version");
                debug("Running on "+javaVersion);
                if( javaVersion.startsWith("1.7.0_") ) {
                    if( javaVersion.compareTo("1.7.0_05") >= 0 ) {
        Severity: Minor
        Found in twostage/src-exploit/x/CorbaTrustedMethodChain.java - About 45 mins to fix

        Cognitive Complexity

        Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

        A method's cognitive complexity is based on a few simple rules:

        • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
        • Code is considered more complex for each "break in the linear flow of the code"
        • Code is considered more complex when "flow breaking structures are nested"

        Further reading

        Method visit has 6 arguments (exceeds 4 allowed). Consider refactoring.
        Open

                public void visit(int version, int access, String name, String signature,
                        String superName, String[] interfaces) {
        Severity: Minor
        Found in weaponized/src-datacreator/x/InterfaceAdder.java - About 45 mins to fix

          Method createMessageMediator has 5 arguments (exceeds 4 allowed). Consider refactoring.
          Open

              public MessageMediator createMessageMediator(Broker broker,
                      ContactInfo contactInfo, Connection connection, String methodName,
                      boolean isOneWay) {
          Severity: Minor
          Found in twostage/src-exploit/x/MyContactInfo.java - About 35 mins to fix

            Method defineMyClass has 5 arguments (exceeds 4 allowed). Consider refactoring.
            Open

                public Class<?> defineMyClass(String name, byte[] b, int off, int len, ProtectionDomain pd) {
            Severity: Minor
            Found in twostage/src-exploit/x/SerializableClassLoader.java - About 35 mins to fix

              Method getServantWithPI has 5 arguments (exceeds 4 allowed). Consider refactoring.
              Open

                  protected Object getServantWithPI(CorbaMessageMediator request,
                          ObjectAdapter objectAdapter, byte[] objectId,
                          ObjectKeyTemplate oktemp, String operation) throws OADestroyed {
              Severity: Minor
              Found in twostage/src-exploit/x/MyCorbaServerRequestDispatcher.java - About 35 mins to fix

                Method encode has a Cognitive Complexity of 7 (exceeds 5 allowed). Consider refactoring.
                Open

                    public String encode(byte[] buf) {
                        final char[] ALPHABET = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/".toCharArray();
                        int[] toInt = new int[128];
                
                        for (int i = 0; i < ALPHABET.length; i++) {
                Severity: Minor
                Found in twostage/src-exploit/x/XAppletW.java - About 35 mins to fix

                Cognitive Complexity

                Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

                A method's cognitive complexity is based on a few simple rules:

                • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
                • Code is considered more complex for each "break in the linear flow of the code"
                • Code is considered more complex when "flow breaking structures are nested"

                Further reading

                Method encode has a Cognitive Complexity of 7 (exceeds 5 allowed). Consider refactoring.
                Open

                    public String encode(byte[] buf) {
                        final char[] ALPHABET = x.Strings.dec("BCDEFGHIJKLMNOPQRSTUVWXYZ[bcdefghijklmnopqrstuvwxyz{123456789:,0").toCharArray();
                        int[] toInt = new int[128];
                
                        for (int i = 0; i < ALPHABET.length; i++) {
                Severity: Minor
                Found in twostage/build/src-encoded/x/XAppletW.java - About 35 mins to fix

                Cognitive Complexity

                Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

                A method's cognitive complexity is based on a few simple rules:

                • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
                • Code is considered more complex for each "break in the linear flow of the code"
                • Code is considered more complex when "flow breaking structures are nested"

                Further reading

                Severity
                Category
                Status
                Source
                Language