rapid7/metasploit-framework

View on GitHub

Showing 7,361 of 22,177 total issues

Avoid deeply nested control flow statements.
Open

            elsif args[0] == '-a'
              if scan['status'] == 'canceled'
                tbl << [ scan['id'], scan['name'], scan['owner'], scan['starttime'], scan['status'], scan['folder_id'] ]
              end
            else
Severity: Major
Found in plugins/nessus.rb - About 45 mins to fix

    Avoid deeply nested control flow statements.
    Open

                            rescue ::Exception
                              print_status(" >> Exception during launch from #{xref[0]}: #{$ERROR_INFO}")
    Severity: Major
    Found in plugins/wmap.rb - About 45 mins to fix

      Avoid deeply nested control flow statements.
      Open

                          if !modname.empty?
                            eprofile << modname
                          end
      Severity: Major
      Found in plugins/wmap.rb - About 45 mins to fix

        Avoid deeply nested control flow statements.
        Open

                                  if execmod
                                    rpc_round_exec(xref[0], xref[1], modopts, njobs)
                                  end
        Severity: Major
        Found in plugins/wmap.rb - About 45 mins to fix

          Avoid deeply nested control flow statements.
          Open

                        if scan['status'] == 'completed'
                          tbl << [ scan['id'], scan['name'], scan['owner'], scan['starttime'], scan['status'], scan['folder_id'] ]
                        end
          Severity: Major
          Found in plugins/nessus.rb - About 45 mins to fix

            Avoid deeply nested control flow statements.
            Open

            elsif srv_create
              priv_check
              if srv_name and srv_command
                begin
                  print_status("Creating Service #{srv_name}")
            Severity: Major
            Found in scripts/meterpreter/service_manager.rb - About 45 mins to fix

              Avoid deeply nested control flow statements.
              Open

                    dump_mem(p,name,toggle) if not query
              Severity: Major
              Found in scripts/meterpreter/process_memdump.rb - About 45 mins to fix

                Avoid deeply nested control flow statements.
                Open

                    rescue
                      print_error("A Service Name must be provided, service names are case sensitive.")
                Severity: Major
                Found in scripts/meterpreter/service_manager.rb - About 45 mins to fix

                  Avoid deeply nested control flow statements.
                  Open

                    if srv_name
                      begin
                        print_status("Changing Service #{srv_name} Startup to #{srv_startup}")
                        service_change_startup(srv_name,srv_startup)
                        print_good("Service Startup changed!")
                  Severity: Major
                  Found in scripts/meterpreter/service_manager.rb - About 45 mins to fix

                    Avoid deeply nested control flow statements.
                    Open

                      elsif stdlkp == 1
                        if dom != nil
                          message(logs)
                          stdlookup(session, dom, dest)
                        else
                    Severity: Major
                    Found in scripts/meterpreter/netenum.rb - About 45 mins to fix

                      Avoid deeply nested control flow statements.
                      Open

                          print_status("Dumping memory for #{name}") if not query
                      Severity: Major
                      Found in scripts/meterpreter/process_memdump.rb - About 45 mins to fix

                        Avoid deeply nested control flow statements.
                        Open

                              print_status("\tsize for #{name} in PID #{p} is #{get_mem_usage(p)}K") if query
                        Severity: Major
                        Found in scripts/meterpreter/process_memdump.rb - About 45 mins to fix

                          Avoid deeply nested control flow statements.
                          Open

                              if dom != nil && hostlist!= nil &&
                                message(logs)
                                frwdlp(session, hostlist, dom, dest)
                              elsif dom == nil
                                print_error("Please add a domain name for DNS forward lookup: -d <value>")
                          Severity: Major
                          Found in scripts/meterpreter/netenum.rb - About 45 mins to fix

                            Avoid deeply nested control flow statements.
                            Open

                                      if kill_frfx
                                        kill_firefox
                                      end
                            Severity: Major
                            Found in scripts/meterpreter/enum_firefox.rb - About 45 mins to fix

                              Avoid deeply nested control flow statements.
                              Open

                                  elsif request.uri =~ /custom_methods$/i
                                    print_status("Sending custom methods") if datastore['VERBOSE']
                                    send_response_html(cli, get_custom_methods().to_json(), { 'Content-Type' => 'application/json' })
                                  elsif request.uri =~ /custom\/sample_cmd\?data=(\S+)$/
                                    print_status("Request for custom command with args #{$1}") if datastore['VERBOSE']
                              Severity: Major
                              Found in modules/auxiliary/server/local_hwbridge.rb - About 45 mins to fix

                                Avoid deeply nested control flow statements.
                                Open

                                              resp << ( auth_tokens['nc'] ? auth_tokens['nc'] : "" )
                                Severity: Major
                                Found in modules/auxiliary/server/capture/sip.rb - About 45 mins to fix

                                  Avoid deeply nested control flow statements.
                                  Open

                                        print_status("Sending Timezone") if datastore['VERBOSE']
                                  Severity: Major
                                  Found in modules/auxiliary/server/local_hwbridge.rb - About 45 mins to fix

                                    Avoid deeply nested control flow statements.
                                    Open

                                                  resp << ( auth_tokens['qop'] ? auth_tokens['qop'] : "" )
                                    Severity: Major
                                    Found in modules/auxiliary/server/capture/sip.rb - About 45 mins to fix

                                      Avoid deeply nested control flow statements.
                                      Open

                                                    resp << ( auth_tokens['cnonce'] ? auth_tokens['cnonce'] : "" )
                                      Severity: Major
                                      Found in modules/auxiliary/server/capture/sip.rb - About 45 mins to fix

                                        Avoid deeply nested control flow statements.
                                        Open

                                                        unless client_matches_module_spec?(host_info[:os_name], s[:os_name])
                                                          vprint_status("Rejecting #{s[:name]} for non-matching OS")
                                                          next
                                                        end
                                        Severity: Major
                                        Found in modules/auxiliary/server/browser_autopwn.rb - About 45 mins to fix
                                          Severity
                                          Category
                                          Status
                                          Source
                                          Language