Sign upLogin

hackedteam/vector-exploit

View on GitHub
Star

Showing 389 of 389 total issues

Function stage1_xml has 26 lines of code (exceeds 25 allowed). Consider refactoring.
Open

def stage1_xml(base=0x6b503000, nextaddr=None):
    """
    Generates the exploit XML document. The parameter base must be an integer.
    """
Severity: Minor
Found in src/ht-webkit-Android4-src/precompiled/release/stage1_xml.py - About 1 hr to fix

    Function stage1_xml has 26 lines of code (exceeds 25 allowed). Consider refactoring.
    Open

    def stage1_xml(base=0x6b503000, nextaddr=None):
    """
    Generates the exploit XML document. The parameter base must be an integer.
    """
    Severity: Minor
    Found in src/ht-webkit-Android4-src/src/stage1_xml.py - About 1 hr to fix

      Function stage1_xml has 26 lines of code (exceeds 25 allowed). Consider refactoring.
      Open

      def stage1_xml(base=0x6b503000, nextaddr=None):
    """
    Generates the exploit XML document. The parameter base must be an integer.
    """
      Severity: Minor
      Found in src/ht-webkit-Android4-src/precompiled/debug/stage1_xml.py - About 1 hr to fix

        Similar blocks of code found in 2 locations. Consider refactoring.
        Open

            var rel = this.memobj.read32(this.addr + this.memobj.read32(this.dyntable['jmprel'] + (8 * i)));
        Severity: Major
        Found in src/ht-webkit-Android4-src/precompiled/debug/script.js and 1 other location - About 1 hr to fix
        src/ht-webkit-Android4-src/precompiled/debug/script.js on lines 2771..2771

        Duplicated Code

        Duplicated code can lead to software that is hard to understand and difficult to change. The Don't Repeat Yourself (DRY) principle states:

        Every piece of knowledge must have a single, unambiguous, authoritative representation within a system.

        When you violate DRY, bugs and maintenance problems are sure to follow. Duplicated code has a tendency to both continue to replicate and also to diverge (leaving bugs as two similar implementations differ in subtle ways).

        Tuning

        This issue has a mass of 55.

        We set useful threshold defaults for the languages we support but you may want to adjust these settings based on your project guidelines.

        The threshold configuration represents the minimum mass a code block must have to be analyzed for duplication. The lower the threshold, the more fine-grained the comparison.

        If the engine is too easily reporting duplication, try raising the threshold. If you suspect that the engine isn't catching enough duplication, try lowering the threshold. The best setting tends to differ from language to language.

        See codeclimate-duplication's documentation for more information about tuning the mass threshold in your .codeclimate.yml.

        Refactorings

        Further Reading

        Similar blocks of code found in 2 locations. Consider refactoring.
        Open

            var rel = this.memobj.read32(this.addr + this.memobj.read32(this.dyntable['jmprel'] + (8 * i)));
        Severity: Major
        Found in src/ht-webkit-Android4-src/precompiled/debug/script.js and 1 other location - About 1 hr to fix
        src/ht-webkit-Android4-src/precompiled/debug/script.js on lines 2758..2758

        Duplicated Code

        Duplicated code can lead to software that is hard to understand and difficult to change. The Don't Repeat Yourself (DRY) principle states:

        Every piece of knowledge must have a single, unambiguous, authoritative representation within a system.

        When you violate DRY, bugs and maintenance problems are sure to follow. Duplicated code has a tendency to both continue to replicate and also to diverge (leaving bugs as two similar implementations differ in subtle ways).

        Tuning

        This issue has a mass of 55.

        We set useful threshold defaults for the languages we support but you may want to adjust these settings based on your project guidelines.

        The threshold configuration represents the minimum mass a code block must have to be analyzed for duplication. The lower the threshold, the more fine-grained the comparison.

        If the engine is too easily reporting duplication, try raising the threshold. If you suspect that the engine isn't catching enough duplication, try lowering the threshold. The best setting tends to differ from language to language.

        See codeclimate-duplication's documentation for more information about tuning the mass threshold in your .codeclimate.yml.

        Refactorings

        Further Reading

        Similar blocks of code found in 6 locations. Consider refactoring.
        Open

        for i in range(len(hex_shellcode64)):
    swf_bytearray[stage264_offset + i] = hex_shellcode64[i]
        Severity: Major
        Found in ht-2013-003-Powerpoint/exploit.py and 5 other locations - About 55 mins to fix
        ht-2013-002-Word/exploit.py on lines 193..194
        ht-2013-002-Word/exploit.py on lines 236..237
        ht-2013-003-Powerpoint/exploit.py on lines 207..208
        src/exploit_vps/html/admin/2013-002-Word/exploit.py on lines 178..179
        src/exploit_vps/html/admin/2013-003-PowerPoint/exploit.py on lines 192..193

        Duplicated Code

        Duplicated code can lead to software that is hard to understand and difficult to change. The Don't Repeat Yourself (DRY) principle states:

        Every piece of knowledge must have a single, unambiguous, authoritative representation within a system.

        When you violate DRY, bugs and maintenance problems are sure to follow. Duplicated code has a tendency to both continue to replicate and also to diverge (leaving bugs as two similar implementations differ in subtle ways).

        Tuning

        This issue has a mass of 37.

        We set useful threshold defaults for the languages we support but you may want to adjust these settings based on your project guidelines.

        The threshold configuration represents the minimum mass a code block must have to be analyzed for duplication. The lower the threshold, the more fine-grained the comparison.

        If the engine is too easily reporting duplication, try raising the threshold. If you suspect that the engine isn't catching enough duplication, try lowering the threshold. The best setting tends to differ from language to language.

        See codeclimate-duplication's documentation for more information about tuning the mass threshold in your .codeclimate.yml.

        Refactorings

        Further Reading

        Similar blocks of code found in 6 locations. Consider refactoring.
        Open

        for i in range(len(hex_shellcode64)):
    swf_bytearray[stage264_offset + i] = hex_shellcode64[i]
        Severity: Major
        Found in ht-2013-002-Word/exploit.py and 5 other locations - About 55 mins to fix
        ht-2013-002-Word/exploit.py on lines 193..194
        ht-2013-003-Powerpoint/exploit.py on lines 207..208
        ht-2013-003-Powerpoint/exploit.py on lines 249..250
        src/exploit_vps/html/admin/2013-002-Word/exploit.py on lines 178..179
        src/exploit_vps/html/admin/2013-003-PowerPoint/exploit.py on lines 192..193

        Duplicated Code

        Duplicated code can lead to software that is hard to understand and difficult to change. The Don't Repeat Yourself (DRY) principle states:

        Every piece of knowledge must have a single, unambiguous, authoritative representation within a system.

        When you violate DRY, bugs and maintenance problems are sure to follow. Duplicated code has a tendency to both continue to replicate and also to diverge (leaving bugs as two similar implementations differ in subtle ways).

        Tuning

        This issue has a mass of 37.

        We set useful threshold defaults for the languages we support but you may want to adjust these settings based on your project guidelines.

        The threshold configuration represents the minimum mass a code block must have to be analyzed for duplication. The lower the threshold, the more fine-grained the comparison.

        If the engine is too easily reporting duplication, try raising the threshold. If you suspect that the engine isn't catching enough duplication, try lowering the threshold. The best setting tends to differ from language to language.

        See codeclimate-duplication's documentation for more information about tuning the mass threshold in your .codeclimate.yml.

        Refactorings

        Further Reading

        Similar blocks of code found in 6 locations. Consider refactoring.
        Open

        for i in range(len(hex_shellcode)):
    swf_bytearray[stage2_offset + i] = hex_shellcode[i]
        Severity: Major
        Found in ht-2013-002-Word/exploit.py and 5 other locations - About 55 mins to fix
        ht-2013-002-Word/exploit.py on lines 236..237
        ht-2013-003-Powerpoint/exploit.py on lines 207..208
        ht-2013-003-Powerpoint/exploit.py on lines 249..250
        src/exploit_vps/html/admin/2013-002-Word/exploit.py on lines 178..179
        src/exploit_vps/html/admin/2013-003-PowerPoint/exploit.py on lines 192..193

        Duplicated Code

        Duplicated code can lead to software that is hard to understand and difficult to change. The Don't Repeat Yourself (DRY) principle states:

        Every piece of knowledge must have a single, unambiguous, authoritative representation within a system.

        When you violate DRY, bugs and maintenance problems are sure to follow. Duplicated code has a tendency to both continue to replicate and also to diverge (leaving bugs as two similar implementations differ in subtle ways).

        Tuning

        This issue has a mass of 37.

        We set useful threshold defaults for the languages we support but you may want to adjust these settings based on your project guidelines.

        The threshold configuration represents the minimum mass a code block must have to be analyzed for duplication. The lower the threshold, the more fine-grained the comparison.

        If the engine is too easily reporting duplication, try raising the threshold. If you suspect that the engine isn't catching enough duplication, try lowering the threshold. The best setting tends to differ from language to language.

        See codeclimate-duplication's documentation for more information about tuning the mass threshold in your .codeclimate.yml.

        Refactorings

        Further Reading

        Similar blocks of code found in 6 locations. Consider refactoring.
        Open

        for i in range(len(hex_shellcode)):
    swf_bytearray[stage2_offset + i] = hex_shellcode[i]
        Severity: Major
        Found in src/exploit_vps/html/admin/2013-003-PowerPoint/exploit.py and 5 other locations - About 55 mins to fix
        ht-2013-002-Word/exploit.py on lines 193..194
        ht-2013-002-Word/exploit.py on lines 236..237
        ht-2013-003-Powerpoint/exploit.py on lines 207..208
        ht-2013-003-Powerpoint/exploit.py on lines 249..250
        src/exploit_vps/html/admin/2013-002-Word/exploit.py on lines 178..179

        Duplicated Code

        Duplicated code can lead to software that is hard to understand and difficult to change. The Don't Repeat Yourself (DRY) principle states:

        Every piece of knowledge must have a single, unambiguous, authoritative representation within a system.

        When you violate DRY, bugs and maintenance problems are sure to follow. Duplicated code has a tendency to both continue to replicate and also to diverge (leaving bugs as two similar implementations differ in subtle ways).

        Tuning

        This issue has a mass of 37.

        We set useful threshold defaults for the languages we support but you may want to adjust these settings based on your project guidelines.

        The threshold configuration represents the minimum mass a code block must have to be analyzed for duplication. The lower the threshold, the more fine-grained the comparison.

        If the engine is too easily reporting duplication, try raising the threshold. If you suspect that the engine isn't catching enough duplication, try lowering the threshold. The best setting tends to differ from language to language.

        See codeclimate-duplication's documentation for more information about tuning the mass threshold in your .codeclimate.yml.

        Refactorings

        Further Reading

        Identical blocks of code found in 2 locations. Consider refactoring.
        Open

        if not os.path.exists("c:\\RCS\\DB\\config\\test"):
    SWF_RANDOM_NAME = random_id(12) + ".swf"
else:
    SWF_RANDOM_NAME = "avtest.swf"
        Severity: Minor
        Found in ht-2013-003-Powerpoint/exploit.py and 1 other location - About 55 mins to fix
        ht-2013-002-Word/exploit.py on lines 39..42

        Duplicated Code

        Duplicated code can lead to software that is hard to understand and difficult to change. The Don't Repeat Yourself (DRY) principle states:

        Every piece of knowledge must have a single, unambiguous, authoritative representation within a system.

        When you violate DRY, bugs and maintenance problems are sure to follow. Duplicated code has a tendency to both continue to replicate and also to diverge (leaving bugs as two similar implementations differ in subtle ways).

        Tuning

        This issue has a mass of 37.

        We set useful threshold defaults for the languages we support but you may want to adjust these settings based on your project guidelines.

        The threshold configuration represents the minimum mass a code block must have to be analyzed for duplication. The lower the threshold, the more fine-grained the comparison.

        If the engine is too easily reporting duplication, try raising the threshold. If you suspect that the engine isn't catching enough duplication, try lowering the threshold. The best setting tends to differ from language to language.

        See codeclimate-duplication's documentation for more information about tuning the mass threshold in your .codeclimate.yml.

        Refactorings

        Further Reading

        Identical blocks of code found in 2 locations. Consider refactoring.
        Open

        if not os.path.exists("c:\\RCS\\DB\\config\\test"):
    SWF_RANDOM_NAME = random_id(12) + ".swf"
else:
    SWF_RANDOM_NAME = "avtest.swf"
        Severity: Minor
        Found in ht-2013-002-Word/exploit.py and 1 other location - About 55 mins to fix
        ht-2013-003-Powerpoint/exploit.py on lines 39..42

        Duplicated Code

        Duplicated code can lead to software that is hard to understand and difficult to change. The Don't Repeat Yourself (DRY) principle states:

        Every piece of knowledge must have a single, unambiguous, authoritative representation within a system.

        When you violate DRY, bugs and maintenance problems are sure to follow. Duplicated code has a tendency to both continue to replicate and also to diverge (leaving bugs as two similar implementations differ in subtle ways).

        Tuning

        This issue has a mass of 37.

        We set useful threshold defaults for the languages we support but you may want to adjust these settings based on your project guidelines.

        The threshold configuration represents the minimum mass a code block must have to be analyzed for duplication. The lower the threshold, the more fine-grained the comparison.

        If the engine is too easily reporting duplication, try raising the threshold. If you suspect that the engine isn't catching enough duplication, try lowering the threshold. The best setting tends to differ from language to language.

        See codeclimate-duplication's documentation for more information about tuning the mass threshold in your .codeclimate.yml.

        Refactorings

        Further Reading

        Similar blocks of code found in 6 locations. Consider refactoring.
        Open

        for i in range(len(hex_shellcode)):
    swf_bytearray[stage2_offset + i] = hex_shellcode[i]
        Severity: Major
        Found in src/exploit_vps/html/admin/2013-002-Word/exploit.py and 5 other locations - About 55 mins to fix
        ht-2013-002-Word/exploit.py on lines 193..194
        ht-2013-002-Word/exploit.py on lines 236..237
        ht-2013-003-Powerpoint/exploit.py on lines 207..208
        ht-2013-003-Powerpoint/exploit.py on lines 249..250
        src/exploit_vps/html/admin/2013-003-PowerPoint/exploit.py on lines 192..193

        Duplicated Code

        Duplicated code can lead to software that is hard to understand and difficult to change. The Don't Repeat Yourself (DRY) principle states:

        Every piece of knowledge must have a single, unambiguous, authoritative representation within a system.

        When you violate DRY, bugs and maintenance problems are sure to follow. Duplicated code has a tendency to both continue to replicate and also to diverge (leaving bugs as two similar implementations differ in subtle ways).

        Tuning

        This issue has a mass of 37.

        We set useful threshold defaults for the languages we support but you may want to adjust these settings based on your project guidelines.

        The threshold configuration represents the minimum mass a code block must have to be analyzed for duplication. The lower the threshold, the more fine-grained the comparison.

        If the engine is too easily reporting duplication, try raising the threshold. If you suspect that the engine isn't catching enough duplication, try lowering the threshold. The best setting tends to differ from language to language.

        See codeclimate-duplication's documentation for more information about tuning the mass threshold in your .codeclimate.yml.

        Refactorings

        Further Reading

        Similar blocks of code found in 6 locations. Consider refactoring.
        Open

        for i in range(len(hex_shellcode)):
    swf_bytearray[stage2_offset + i] = hex_shellcode[i]
        Severity: Major
        Found in ht-2013-003-Powerpoint/exploit.py and 5 other locations - About 55 mins to fix
        ht-2013-002-Word/exploit.py on lines 193..194
        ht-2013-002-Word/exploit.py on lines 236..237
        ht-2013-003-Powerpoint/exploit.py on lines 249..250
        src/exploit_vps/html/admin/2013-002-Word/exploit.py on lines 178..179
        src/exploit_vps/html/admin/2013-003-PowerPoint/exploit.py on lines 192..193

        Duplicated Code

        Duplicated code can lead to software that is hard to understand and difficult to change. The Don't Repeat Yourself (DRY) principle states:

        Every piece of knowledge must have a single, unambiguous, authoritative representation within a system.

        When you violate DRY, bugs and maintenance problems are sure to follow. Duplicated code has a tendency to both continue to replicate and also to diverge (leaving bugs as two similar implementations differ in subtle ways).

        Tuning

        This issue has a mass of 37.

        We set useful threshold defaults for the languages we support but you may want to adjust these settings based on your project guidelines.

        The threshold configuration represents the minimum mass a code block must have to be analyzed for duplication. The lower the threshold, the more fine-grained the comparison.

        If the engine is too easily reporting duplication, try raising the threshold. If you suspect that the engine isn't catching enough duplication, try lowering the threshold. The best setting tends to differ from language to language.

        See codeclimate-duplication's documentation for more information about tuning the mass threshold in your .codeclimate.yml.

        Refactorings

        Further Reading

        Function call has 7 arguments (exceeds 4 allowed). Consider refactoring.
        Open

        RCE.prototype.call = function(fn, r0, r1, r2, r3, r4, forking) {
        Severity: Major
        Found in src/ht-webkit-Android4-src/precompiled/debug/script.js - About 50 mins to fix

          Function __init__ has 7 arguments (exceeds 4 allowed). Consider refactoring.
          Open

              def __init__(self, info, start, src_start, size, folder, archive, maxsize=None):
          Severity: Major
          Found in ht-2013-002-Word/pylzma.egg/py7zlib.py - About 50 mins to fix

            Function __init__ has 7 arguments (exceeds 4 allowed). Consider refactoring.
            Open

                def __init__(self, info, start, src_start, size, folder, archive, maxsize=None):
            Severity: Major
            Found in ht-2013-003-Powerpoint/pylzma.egg/py7zlib.py - About 50 mins to fix

              Function __init__ has 7 arguments (exceeds 4 allowed). Consider refactoring.
              Open

                  def __init__(self, info, start, src_start, size, folder, archive, maxsize=None):
              Severity: Major
              Found in ht-2013-004-IE/pylzma.egg/py7zlib.py - About 50 mins to fix

                Identical blocks of code found in 4 locations. Consider refactoring.
                Open

                if len(shellcode) > 5800:
       print "[!!] Shellcode too big: 0x%x" % (len(shellcode))
       sys.exit(-1)
                Severity: Major
                Found in src/exploit_vps/html/admin/2013-002-Word/exploit.py and 3 other locations - About 50 mins to fix
                ht-2013-002-Word/exploit.py on lines 189..191
                ht-2013-003-Powerpoint/exploit.py on lines 203..205
                src/exploit_vps/html/admin/2013-003-PowerPoint/exploit.py on lines 187..189

                Duplicated Code

                Duplicated code can lead to software that is hard to understand and difficult to change. The Don't Repeat Yourself (DRY) principle states:

                Every piece of knowledge must have a single, unambiguous, authoritative representation within a system.

                When you violate DRY, bugs and maintenance problems are sure to follow. Duplicated code has a tendency to both continue to replicate and also to diverge (leaving bugs as two similar implementations differ in subtle ways).

                Tuning

                This issue has a mass of 36.

                We set useful threshold defaults for the languages we support but you may want to adjust these settings based on your project guidelines.

                The threshold configuration represents the minimum mass a code block must have to be analyzed for duplication. The lower the threshold, the more fine-grained the comparison.

                If the engine is too easily reporting duplication, try raising the threshold. If you suspect that the engine isn't catching enough duplication, try lowering the threshold. The best setting tends to differ from language to language.

                See codeclimate-duplication's documentation for more information about tuning the mass threshold in your .codeclimate.yml.

                Refactorings

                Further Reading

                Identical blocks of code found in 4 locations. Consider refactoring.
                Open

                if len(shellcode) > 5800:
       print "[!!] Shellcode too big: 0x%x" % (len(shellcode))
       sys.exit(-1)
                Severity: Major
                Found in ht-2013-003-Powerpoint/exploit.py and 3 other locations - About 50 mins to fix
                ht-2013-002-Word/exploit.py on lines 189..191
                src/exploit_vps/html/admin/2013-002-Word/exploit.py on lines 173..175
                src/exploit_vps/html/admin/2013-003-PowerPoint/exploit.py on lines 187..189

                Duplicated Code

                Duplicated code can lead to software that is hard to understand and difficult to change. The Don't Repeat Yourself (DRY) principle states:

                Every piece of knowledge must have a single, unambiguous, authoritative representation within a system.

                When you violate DRY, bugs and maintenance problems are sure to follow. Duplicated code has a tendency to both continue to replicate and also to diverge (leaving bugs as two similar implementations differ in subtle ways).

                Tuning

                This issue has a mass of 36.

                We set useful threshold defaults for the languages we support but you may want to adjust these settings based on your project guidelines.

                The threshold configuration represents the minimum mass a code block must have to be analyzed for duplication. The lower the threshold, the more fine-grained the comparison.

                If the engine is too easily reporting duplication, try raising the threshold. If you suspect that the engine isn't catching enough duplication, try lowering the threshold. The best setting tends to differ from language to language.

                See codeclimate-duplication's documentation for more information about tuning the mass threshold in your .codeclimate.yml.

                Refactorings

                Further Reading

                Identical blocks of code found in 4 locations. Consider refactoring.
                Open

                if len(shellcode) > 5800:
       print "[!!] Shellcode too big: 0x%x" % (len(shellcode))
       sys.exit(-1)
                Severity: Major
                Found in ht-2013-002-Word/exploit.py and 3 other locations - About 50 mins to fix
                ht-2013-003-Powerpoint/exploit.py on lines 203..205
                src/exploit_vps/html/admin/2013-002-Word/exploit.py on lines 173..175
                src/exploit_vps/html/admin/2013-003-PowerPoint/exploit.py on lines 187..189

                Duplicated Code

                Duplicated code can lead to software that is hard to understand and difficult to change. The Don't Repeat Yourself (DRY) principle states:

                Every piece of knowledge must have a single, unambiguous, authoritative representation within a system.

                When you violate DRY, bugs and maintenance problems are sure to follow. Duplicated code has a tendency to both continue to replicate and also to diverge (leaving bugs as two similar implementations differ in subtle ways).

                Tuning

                This issue has a mass of 36.

                We set useful threshold defaults for the languages we support but you may want to adjust these settings based on your project guidelines.

                The threshold configuration represents the minimum mass a code block must have to be analyzed for duplication. The lower the threshold, the more fine-grained the comparison.

                If the engine is too easily reporting duplication, try raising the threshold. If you suspect that the engine isn't catching enough duplication, try lowering the threshold. The best setting tends to differ from language to language.

                See codeclimate-duplication's documentation for more information about tuning the mass threshold in your .codeclimate.yml.

                Refactorings

                Further Reading

                Severity
                Category
                Status
                Source
                Language