rapid7/metasploit-framework

Method try_user_pass has 173 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def try_user_pass(opts)
    user = opts[:user]
    pass = opts[:pass]
    auth_path = opts[:auth_path]
    inbox_path = opts[:inbox_path]

Method on_client_data has 173 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def on_client_data(c)
    # get the client data
    data = c.get_once
    return if not data
    # split data into command and arguments

Method exploit has 173 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def exploit
    @uri = normalize_uri(target_uri.path)
    @uri << '/' if @uri[-1, 1] != '/'

    # Create user with empty credentials

Method run has 173 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def run
    print_status('Gathering System info ....')
    vm = nil
    dmi_info = nil

Identical blocks of code found in 2 locations. Consider refactoring.

Open

          [ 'Automatic', { } ],

          #
          # Individual targets
          #

• Read up
  Read up

Identical blocks of code found in 2 locations. Consider refactoring.

Open

          [ 'Automatic', { } ],

          #
          # Individual targets
          #

• Read up
  Read up

Method generate_html has 171 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def generate_html(payload)
    enc_code = Rex::Text.to_unescape(payload.encoded, Rex::Arch.endian(target.arch))

    custom_js = %Q|
function check(){

Method dump_ntds_hashes has 170 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def dump_ntds_hashes
    _machine_name, domain_name, dns_domain_name = get_machine_name_and_domain_info
    return unless domain_name

    print_status('Dumping Domain Credentials (domain\\uid:rid:lmhash:nthash)')

Method run has 170 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def run
    # we have to overload the process_cracker_results from password_cracker.rb since LANMAN
    # is a special case where we may need to do some combining
    def process_cracker_results(results, cred)
      return results if cred['core_id'].nil? # make sure we have good data

Method initialize has 170 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def initialize(info = {})
    super(merge_info(info,
      'Name'          => 'Reverse TCP Stager',
      'Description'   => 'Connect back to the attacker',
      'Author'        => 'toto',

Method generate has 170 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def generate(_opts = {})

    dnsname        = datastore['DNSZONE']
    wType        = 0x0010    #DNS_TYPE_TEXT (TEXT)
    wTypeOffset    = 0x1c

Method get_filezilla_creds has 170 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def get_filezilla_creds(paths)
    fs_xml = '' # FileZilla Server.xml           - Settings for the local install
    fsi_xml = '' # FileZilla Server Interface.xml - Last server used with the interface
    credentials = Rex::Text::Table.new(
      'Header' => 'FileZilla FTP Server Credentials',

Method exploit_newuser has 169 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def exploit_newuser

    # TODO: Check if option admin_role exists via admin/people/permissions/roles

    # call login page to extract tokens

Method exploit has 169 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def exploit
    marker = rand_text_alpha(6)
    sqli_rand = rand_text_numeric(4+rand(4))
    sqli = "' and (select 1 from(select count(*),concat((select (select concat(0x#{marker.unpack('H*')[0]},Hex(cast(id as char)),0x#{marker.unpack('H*')[0]})) "
    sqli << "from alienvault.sessions where login='admin' limit 0,1),floor(rand(0)*2))x from information_schema.tables group by x)a) and '#{sqli_rand}'='#{sqli_rand}"

Identical blocks of code found in 2 locations. Consider refactoring.

Open

function process_list() {
    var res = new Array();
    var wbemFlagReturnImmediately = 0x10;
    var wbemFlagForwardOnly = 0x20;
    var oWMI = GetObject("winmgmts:\\\\localhost\\root\\CIMV2");

• Read up
  Read up

Identical blocks of code found in 2 locations. Consider refactoring.

Open

function process_list() {
    var res = new Array();
    var wbemFlagReturnImmediately = 0x10;
    var wbemFlagForwardOnly = 0x20;
    var oWMI = GetObject("winmgmts:\\\\localhost\\root\\CIMV2");

• Read up
  Read up

Method cmd_transport has 168 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def cmd_transport(*args)
    if ( args.length == 0 or args.include?("-h") )
      cmd_transport_help
      return
    end

Identical blocks of code found in 2 locations. Consider refactoring.

Open

  def build_hta(cli)
    var_shellobj    = rand_text_alpha(rand(5) + 5);
    var_fsobj    = rand_text_alpha(rand(5) + 5);
    var_fsobj_file    = rand_text_alpha(rand(5) + 5);
    var_vbsname    = rand_text_alpha(rand(5) + 5);

• Read up
  Read up

Identical blocks of code found in 2 locations. Consider refactoring.

Open

  def build_hta(cli)
    var_shellobj    = rand_text_alpha(rand(5) + 5);
    var_fsobj    = rand_text_alpha(rand(5) + 5);
    var_fsobj_file    = rand_text_alpha(rand(5) + 5);
    var_vbsname    = rand_text_alpha(rand(5) + 5);

• Read up
  Read up

Similar blocks of code found in 2 locations. Consider refactoring.

Open

  def check
    targ = rhost

    srv_sock = Rex::Socket.create_udp(
      'PeerHost' => targ,

• Read up
  Read up