rapid7/metasploit-framework

Method exploit has 112 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def exploit
    version = get_version

    # 1: get the cookies, the login_url and the password_form and username form names (they varies between versions)
    res = send_request_cgi({

Method on_request_uri has 112 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def on_request_uri(cli, request)

    return if ((p = regenerate_payload(cli)) == nil)

    print_status("Sending exploit HTML")

Method initialize has 112 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def initialize(info = {})
    super(
      update_info(
        info,
        'Name' => 'MS08-068 Microsoft Windows SMB Relay Code Execution',

Method exploit has 112 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def exploit

    if check != CheckCode::Appears
      fail_with(Failure::NotVulnerable, 'Target not vulnerable! punt!')
    end

Method token_generation_endpoints has 112 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def token_generation_endpoints
    %w[
      /access/file-path-manager/indexing
      /cm/autodeploy/cluster-software-images/indexing
      /cm/autodeploy/qkview/indexing

Similar blocks of code found in 3 locations. Consider refactoring.

Open

  def initialize(info = {})
    super(update_info(info,
      'Name'        => 'Borland InterBase isc_create_database() Buffer Overflow',
      'Description'    => %q{
        This module exploits a stack buffer overflow in Borland InterBase

• Read up
  Read up

Similar blocks of code found in 3 locations. Consider refactoring.

Open

  def initialize(info = {})
    super(update_info(info,
      'Name'        => 'Borland InterBase isc_attach_database() Buffer Overflow',
      'Description'    => %q{
        This module exploits a stack buffer overflow in Borland InterBase

• Read up
  Read up

Similar blocks of code found in 3 locations. Consider refactoring.

Open

  def initialize(info = {})
    super(update_info(info,
      'Name'        => 'Borland InterBase SVC_attach() Buffer Overflow',
      'Description'    => %q{
        This module exploits a stack buffer overflow in Borland InterBase

• Read up
  Read up

Method initialize has 111 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def initialize(info = {})
    super(merge_info(info,
      'Name'          => 'Windows x86 Pingback, Bind TCP Inline',
      'Description'   => 'Open a socket and report UUID when a connection is received (Windows x86)',
      'Author'        => [ 'bwatters-r7' ],

Method initialize has 111 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def initialize(info = {})
    super(
      update_info(
        info,
        'Name' => 'Wordpress File Manager Advanced Shortcode 2.3.2 - Unauthenticated Remote Code Execution through shortcode',

Method exploit has 111 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def exploit
    return unless check == Exploit::CheckCode::Appears

    uri = target_uri.path
    vprint_status("#{peer} - Grabbing CSRF token...")

Method exploit has 111 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def exploit
      init = send_request_cgi({
        'uri' => normalize_uri(target_uri.path, 'index.php')
      })

Method win32_rwx_exec_thread has 111 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def self.win32_rwx_exec_thread(code, block_offset, which_offset='start')
    stub_block = Rex::Payloads::Shuffle.from_graphml_file(
      File.join(Msf::Config.install_root, 'data', 'shellcode', 'block_api.x86.graphml'),
      arch: ARCH_X86,
      name: 'api_call'

Method plugin_search has 110 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def plugin_search(tpath, papp, ip, osize)
    res = send_request_cgi({
      'uri' => "#{tpath}#{papp}",
      'method' => 'GET'
    })

Method exploit has 110 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def exploit
    #
    # 1. Leverage the auth bypass to generate a new administrator access token. Older version of TeamCity (circa 2018)
    #    do not have support for access token, so we fall back to creating a new administrator account. The benefit
    #    of using an access token is we can delete it when we are finished, unlike a user account.

Method generate_html has 110 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def generate_html(payload)

    enc_code = Rex::Text.to_unescape(payload.encoded, Rex::Arch.endian(target.arch))
    enc_nops = Rex::Text.to_unescape(make_nops(4), Rex::Arch.endian(target.arch))
    enc_ret  = Rex::Text.to_unescape(

Method initialize has 110 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def initialize(info = {})
    super(
      update_info(
        info,
        'Name' => 'Dup Scout Enterprise GET Buffer Overflow',

Similar blocks of code found in 5 locations. Consider refactoring.

Open

    sq_bit = Integer(response_data[6].unpack('C').first) & 0b10000000
    response_data = response_data[11..-1] # cut out acpi data
    if sq_bit.eql?(0b10000000)
      response_data = response_data[11..-1]
      ioa = response_data[0..3]

• Read up
  Read up

Similar blocks of code found in 5 locations. Consider refactoring.

Open

    sq_bit = Integer(response_data[6].unpack('C').first) & 0b10000000
    response_data = response_data[11..-1] # cut out acpi data
    if sq_bit.eql?(0b10000000)
      ioa = response_data[0..3]
      response_data = response_data[3..-1]

• Read up
  Read up

Similar blocks of code found in 5 locations. Consider refactoring.

Open

    sq_bit = Integer(response_data[6].unpack('C').first) & 0b10000000
    response_data = response_data[11..-1] # cut out acpi data
    if sq_bit.eql?(0b10000000)
      ioa = response_data[0..3]
      response_data = response_data[3..-1]

• Read up
  Read up