rapid7/metasploit-framework

Similar blocks of code found in 2 locations. Consider refactoring.

Open

  def initialize(info={})
    super(update_info(info,
      'Name'                => 'Adobe Flash Player ShaderJob Buffer Overflow',
      'Description'         => %q{
        This module exploits a buffer overflow vulnerability related to the ShaderJob workings on

• Read up
  Read up

Similar blocks of code found in 2 locations. Consider refactoring.

Open

  def initialize(info = {})
    super(merge_info(info,
      'Name'          => 'Reverse TCP Stager',
      'Description'   => 'Connect back to the attacker',
      'Author'        =>

• Read up
  Read up

Method exploit has 132 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def exploit
    # Request using a non-existing table first, to retrieve the table prefix
    val = sqli(rand_text_alphanumeric(rand(10)+6), 'check')
    if val.nil?
      fail_with(Failure::Unknown, "#{peer} - Error retrieving table prefix")

Method run has 131 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def run
    if datastore['DEPTH'] < 5
      print_bad('A DEPTH of < 5 is unlikely to succeed as almost all observed installs require 5-11 depth.')
    end

Method send_payload_objdata has 131 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def send_payload_objdata
    # basic weblogic ClassTableEntry object (serialized)
    # TODO: WHAT DOES THIS DO?  CAN WE RANDOMIZE ANY OF IT?
    objdata = '056508000000010000001b0000005d0101007372017870737202787000000000'
    objdata << '00000000757203787000000000787400087765626c6f67696375720478700000'

Method exploit has 131 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def exploit
    peer = "#{rhost}:#{rport}"

    if target.name =~ /WMI/

Method exploit has 130 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def exploit
    jsp_name = datastore['JSP'] || rand_text_alpha(8+rand(8))
    app_base = datastore['APPBASE'] || rand_text_alpha(8+rand(8))

    mytarget = target

Method send_payload_objdata has 130 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def send_payload_objdata
    shost = srvhost
    if ['0.0.0.0', '127.0.0.1', '::'].include?(shost)
      shost = Rex::Socket.source_address
    end

Method search has 130 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def search(args = nil)
    args ||= {}

    # filtering, scoping, search base
    # filter: https://tools.ietf.org/html/rfc4511#section-4.5.1.7

Method make_js has 129 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def make_js(encoded_payload)

    # The following executes a ret2lib using BIB.dll
    # The effect is to bypass DEP and execute the shellcode in an indirect way
    stack_data = [

Method run has 128 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def run
    def check_results(passwords, results, hash_type, method)
      passwords.each do |password_line|
        password_line.chomp!
        next if password_line.blank?

Method sap_port_info has 128 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def sap_port_info(port)

    case port.to_s

    when /^3299$/

Method initialize has 128 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def initialize(info = {})
    super(
      update_info(
        info,
        'Name' => 'SpamTitan Unauthenticated RCE',

Similar blocks of code found in 2 locations. Consider refactoring.

Open

  swagger_path '/api/v1/hosts/{id}' do
    # Swagger documentation for api/v1/hosts/:id GET
    operation :get do
      key :description, 'Return specific host that is stored in the database.'
      key :tags, [ 'host' ]

• Read up
  Read up

Similar blocks of code found in 2 locations. Consider refactoring.

Open

  swagger_path '/api/v1/vulns/{id}' do
    # Swagger documentation for api/v1/vulns/:id GET
    operation :get do
      key :description, 'Return specific vuln that is stored in the database.'
      key :tags, [ 'vuln' ]

• Read up
  Read up

Similar blocks of code found in 2 locations. Consider refactoring.

Open

  def exploit

    peer = "#{rhost}:#{rport}"

    print_status "Ping host..."

• Read up
  Read up

Similar blocks of code found in 2 locations. Consider refactoring.

Open

  def exploit

    peer = "#{rhost}:#{rport}"

    print_status "Ping host..."

• Read up
  Read up

Method run has 127 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def run
    fake_host = datastore['FAKEHOST'] || datastore['HOST']
    fake_port = datastore['FAKEPORT'] || datastore['PORT']
    host = datastore['HOST']
    local_host = datastore['SRVHOST']

Method arp_poisoning has 127 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def arp_poisoning
    lsmac = datastore['LOCALSMAC'] || @smac
    raise 'Local Source Mac is not in correct format' unless is_mac?(lsmac)

    dhosts_range = Rex::Socket::RangeWalker.new(datastore['DHOSTS'])

Method run_host has 127 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def run_host(ip)
    if datastore['RPORT'].blank? || datastore['RPORT'] == 0
      smb_services = [
        { port: 445, direct: true },
        { port: 139, direct: false }