rapid7/metasploit-framework

Method initialize has 139 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def initialize(info = {})
    super(
      update_info(
        info,
        'Name' => 'Script Web Delivery',

Similar blocks of code found in 2 locations. Consider refactoring.

Open

    this.asInt16 = function() {
        var value = new Int64(0);
        for (var i = 0; i < 8; i++) {
            if (i < 2) {
                value.bytes[i] = this.bytes[i];

• Read up
  Read up

Similar blocks of code found in 2 locations. Consider refactoring.

Open

    this.asInt32 = function() {
        var value = new Int64(0);
        for (var i = 0; i < 8; i++) {
            if (i < 4) {
                value.bytes[i] = this.bytes[i];

• Read up
  Read up

Method post_4a has 138 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def post_4a
    {
      'ADD' => '4A',
      'custom_fields_modify' => '0',
      'user' => '111',

Identical blocks of code found in 2 locations. Consider refactoring.

Open

  def capture_user_keys
    users = {}
    ok = session.sys.registry.open_key(HKEY_LOCAL_MACHINE, 'SAM\\SAM\\Domains\\Account\\Users', KEY_READ)
    return if !ok

• Read up
  Read up

Identical blocks of code found in 2 locations. Consider refactoring.

Open

  def capture_user_keys
    users = {}
    ok = session.sys.registry.open_key(HKEY_LOCAL_MACHINE, 'SAM\\SAM\\Domains\\Account\\Users', KEY_READ)
    return if !ok

• Read up
  Read up

Identical blocks of code found in 2 locations. Consider refactoring.

Open

  def process_propfind(cli, request)
    path = request.uri
    vprint_status("PROPFIND #{path}")

    if path !~ /\/$/

• Read up
  Read up

Identical blocks of code found in 2 locations. Consider refactoring.

Open

  def process_propfind(cli, request)
    path = request.uri
    vprint_status("PROPFIND #{path}")

    if path !~ /\/$/

• Read up
  Read up

Method build_script_response has 137 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def build_script_response(cli, request)
    response = create_response()
    response['Expires'] = '0'
    response['Cache-Control'] = 'must-revalidate'

Method run_host has 136 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def run_host(ip)

    ipmi_status("Sending IPMI probes")

    usernames = []

Method run_host has 136 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def run_host(ip)
    msg = "#{ip}:#{rhost} - DNS -"
    begin
      @lastdata = nil
      @probablyVuln = nil

Method generate has 136 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def generate(_opts = {})
    style = 0x00
    case datastore['ICON'].upcase.strip
      # default = NO
    when 'ERROR'

Method exploit has 136 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def exploit
    if datastore['DefangedMode']
      warning = <<~EOF

Method create_lm_ntlm_responses has 136 lines of code (exceeds 25 allowed). Consider refactoring.

Open

    def self.create_lm_ntlm_responses(user, pass, challenge_key, domain = '', default_name = '', default_domain = '',
            dns_host_name = '', dns_domain_name = '', chall_MsvAvTimestamp = nil, spnopt = {}, opt = {} )

      usentlm2_session     = opt[:usentlm2_session]    != nil ? opt[:usentlm2_session] : true
      use_ntlmv2         = opt[:use_ntlmv2]         != nil ? opt[:use_ntlmv2] : false

Method initialize has 135 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def initialize(info = {})
    super(update_info(info,
      'Name'           => 'CVE-2019-0708 BlueKeep RDP Remote Windows Kernel Use After Free',
      'Description'    => %q(
        The RDP termdd.sys driver improperly handles binds to internal-only channel MS_T120,

Method make_pdf has 135 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def make_pdf(ttf, js)

    #swf_name = rand_text_alpha(8 + rand(8)) + ".swf"

    xref = []

Method exploit_html has 135 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def exploit_html(cli)
    p = payload.encoded
    arch = Rex::Arch.endian(target.arch)
    payload_final = Rex::Text.to_unescape(p, arch, prefix='\\u')
    base_uri = get_module_resource

Method on_request_uri has 135 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def on_request_uri(client, request)

    return if ((p = regenerate_payload(client)) == nil)

    agent = request.headers['User-Agent']

Method make_pdf has 135 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def make_pdf(ttf, js)

    #swf_name = rand_text_alpha(8 + rand(8)) + ".swf"

    xref = []

Method parse_sddl_sid has 135 lines of code (exceeds 25 allowed). Consider refactoring.

Open

      def parse_sddl_sid(sid, domain_sid:)
        # see: https://learn.microsoft.com/en-us/windows/win32/secauthz/sid-strings
        sid = sid.dup.upcase

        # these can be validated using powershell where ?? is the code