rapid7/metasploit-framework

Method cmd_webcam_snap has 51 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def cmd_webcam_snap(*args)
    if client.webcam.webcam_list.length == 0
      print_error("Target does not have a webcam")
      return
    end

Method dump_sessions_verbose has 51 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def self.dump_sessions_verbose(framework, opts={})
    out = "Active sessions\n" +
          "===============\n\n"

    if framework.sessions.length == 0

Method rpc_info has 51 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def rpc_info(mtype, mname)
    m = _find_module(mtype,mname)
    res = module_short_info(m)
    res['description'] = Rex::Text.compress(m.description)
    res['license'] = m.license

Method rpc_del_service has 51 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def rpc_del_service(xopts)
  ::ApplicationRecord.connection_pool.with_connection {
    opts, wspace = init_db_opts_workspace(xopts)
    hosts  = []
    services = []

Method nagios_xi_rce_check has 51 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def nagios_xi_rce_check(version)
    matching_exploits = {}

    # Storage area for known exploits that affect versions prior to the one in the hash key
    nagios_rce_version_prior = {

Method upload_payload_plugin has 51 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def upload_payload_plugin(webshell_jar, admin_username, admin_password)
    vprint_status('Uploading payload plugin')
    post_data = Rex::MIME::Message.new
    post_data.add_part(webshell_jar, 'application/java-archive', 'binary', "form-data; name=\"plugin\"; filename=\"#{rand_text_alphanumeric(8..16)}.jar\"")
    post_data.add_part('', nil, nil, 'form-data; name="url"')

Method ping6 has 51 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def ping6(dhost, opts={})
    check_pcaprub_loaded

    dhost_intf = dhost + '%' + ipv6_interface(opts)

Method authenticate_via_kdc has 51 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def authenticate_via_kdc(options = {})
    realm = self.realm.upcase
    client_name = username
    server_name = "krbtgt/#{realm}"

Method validate has 51 lines of code (exceeds 25 allowed). Consider refactoring.

Open

    def validate(datastore)
      # First mutate the datastore and normalize all valid values before validating permutations of RHOST/etc.
      each_pair do |name, option|
        if option.valid?(datastore[name]) && (val = option.normalize(datastore[name])) != nil
          # This *will* result in a module that previously used the

Method to_xml_file has 51 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def to_xml_file(path, &block)

    yield(:status, STATUS_START, "report") if block_given?
    extract_target_entries
    report_file = ::File.open(path, "wb")

Method jsp_bind_tcp has 51 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def jsp_bind_tcp
    # Modified from: http://www.security.org.sg/code/jspreverse.html
    generator = Rex::RandomIdentifier::Generator.new({ language: :jsp })

    var_is = generator.generate(2)

Method attempt_login has 51 lines of code (exceeds 25 allowed). Consider refactoring.

Open

        def attempt_login(credential)
          result_opts = {
              credential: credential,
              host: host,
              port: port,

Similar blocks of code found in 3 locations. Consider refactoring.

Open

    frag0 =
      "\x90" + # nop
      "\x58" + # pop eax
      "\x61" + # popa
      "\xc3"   # ret

• Read up
  Read up

Similar blocks of code found in 3 locations. Consider refactoring.

Open

    frag0 =
      "\x90" + # nop
      "\x58" + # pop eax
      "\x61" + # popa
      "\xc3"   # ret

• Read up
  Read up

Similar blocks of code found in 3 locations. Consider refactoring.

Open

    frag0 =
      "\x90" + # nop
      "\x58" + # pop eax
      "\x61" + # popa
      "\xc3"   # ret

• Read up
  Read up

Similar blocks of code found in 2 locations. Consider refactoring.

Open

          alias1, alias2 = 2.times.map { Rex::Text.rand_text_alpha(rand(2..9)) }
          if @truncation_length
            retrieved_data = truncated_query('select substr(group_concat(' \
            "#{alias1},'#{@concat_separator}'),"\
            "^OFFSET^,#{@truncation_length}) from (select cast(#{columns} as blob) #{alias1} from #{table}"\

• Read up
  Read up

Similar blocks of code found in 2 locations. Consider refactoring.

Open

  def initialize(info = {})
    super(update_info(info,
      'Name'           => 'Samba trans2open Overflow (*BSD x86)',
      'Description'    => %q{
          This exploits the buffer overflow found in Samba versions

• Read up
  Read up

Similar blocks of code found in 2 locations. Consider refactoring.

Open

  def initialize(info = {})
    super(update_info(info,
      'Name'           => 'Samba trans2open Overflow (Linux x86)',
      'Description'    => %q{
          This exploits the buffer overflow found in Samba versions

• Read up
  Read up

Similar blocks of code found in 2 locations. Consider refactoring.

Open

    if res && res.code == 200 && res.body.include?('webNasIPS successful')
      # Parse the JSON response and get the data such as admin password hash and MAC address
      res_json = res.get_json_document
      unless res_json.blank?
        @data['password'] = res_json['data'].split('PWD:')[1].split('SAT')[0].strip

• Read up
  Read up

Similar blocks of code found in 2 locations. Consider refactoring.

Open

          alias1, alias2 = 2.times.map { Rex::Text.rand_text_alpha(rand(2..9)) }
          if @truncation_length
            retrieved_data = truncated_query('select substr(string_agg(' \
            "#{alias1}, '#{@concat_separator}'),"\
            "^OFFSET^,#{@truncation_length}) from (select #{columns}::text #{alias1} from #{table}"\

• Read up
  Read up