rapid7/metasploit-framework

Method cmd_set has 106 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def cmd_set(*args)
    # Figure out if these are global variables
    global = false
    append = false
    clear = false

Method cmd_vulns has 106 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def cmd_vulns(*args)
    return unless active?

    default_columns = ['Timestamp', 'Host', 'Name', 'References']
    host_ranges = []

Identical blocks of code found in 2 locations. Consider refactoring.

Open

      if(datastore['JOHNPWFILE'] and user)
        case ntlm_ver
        when NTLM_CONST::NTLM_V1_RESPONSE, NTLM_CONST::NTLM_2_SESSION_RESPONSE
          fd = File.open(datastore['JOHNPWFILE'] + '_netntlm', "ab")
          fd.puts(

• Read up
  Read up

Identical blocks of code found in 2 locations. Consider refactoring.

Open

      if(datastore['JOHNPWFILE'] and user)
        case ntlm_ver
        when NTLM_CONST::NTLM_V1_RESPONSE, NTLM_CONST::NTLM_2_SESSION_RESPONSE

          fd = File.open(datastore['JOHNPWFILE'] + '_netntlm', "ab")

• Read up
  Read up

Method getprocparam has 105 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def getprocparam(rhost)
    print_status("[SAP] Connecting to SAP Management Console SOAP Interface on #{rhost}:#{rport}")
    success = false
    soapenv = 'http://schemas.xmlsoap.org/soap/envelope/'
    xsi = 'http://www.w3.org/2001/XMLSchema-instance'

Method initialize has 105 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def initialize(info = {})
    super(
      update_info(
        info,
        'Name' => 'Oracle WebLogic Server Administration Console Handle RCE',

Method initialize has 105 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def initialize(info={})
    super(update_info(info,
      'Name'           => "ManageEngine Desktop Central / Password Manager LinkViewFetchServlet.dat SQL Injection",
      'Description'    => %q{
        This module exploits an unauthenticated blind SQL injection in LinkViewFetchServlet,

Method initialize has 105 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def initialize(info = {})
    super(
      update_info(
        info,
        'Name' => 'Citrix ADC (NetScaler) Forms SSO Target RCE',

Method process_propfind has 105 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def process_propfind(cli, request)
    path = request.uri
    print_status("PROPFIND #{path}")
    body = ''

Method on_request_uri has 105 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def on_request_uri(cli, request)

    if (request.uri.match(/payload/))
      return if ((p = regenerate_payload(cli)) == nil)
      data = generate_payload_exe({ :code => p.encoded })

Method process_propfind has 105 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def process_propfind(cli, request)
    path = request.uri
    vprint_status("PROPFIND #{path}")
    body = ''

Method process_propfind has 105 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def process_propfind(cli, request)
    path = request.uri
    print_status("PROPFIND #{path}")
    body = ''

Method dispatch_request has 105 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def dispatch_request(from, buf)
    type = buf.unpack('C').first
    if (type != Constants::Request)
      #dlog("Unknown DHCP request type: #{type}")
      return

Method cmd_jobs has 105 lines of code (exceeds 25 allowed). Consider refactoring.

Open

          def cmd_jobs(*args)
            # Make the default behavior listing all jobs if there were no options
            # or the only option is the verbose flag
            args.unshift("-l") if args.empty? || args == ["-v"]

Similar blocks of code found in 2 locations. Consider refactoring.

Open

    this.assignSub = operation(function sub(a, b) {
        var carry = 0;
        for (var i = 0; i < 8; i++) {
            var cur = a.byteAt(i) - b.byteAt(i) - carry;
            carry = cur < 0 | 0;

• Read up
  Read up

Similar blocks of code found in 2 locations. Consider refactoring.

Open

    this.assignAdd = operation(function add(a, b) {
        var carry = 0;
        for (var i = 0; i < 8; i++) {
            var cur = a.byteAt(i) + b.byteAt(i) + carry;
            carry = cur > 0xff | 0;

• Read up
  Read up

Similar blocks of code found in 2 locations. Consider refactoring.

Open

    script = %Q|
    var #{rand1} = unescape("#{shellcode}");
    var #{rand2} ="";
    for (#{rand3}=128;#{rand3}>=0;--#{rand3}) #{rand2} += unescape("#{nops}");
    #{rand4} = #{rand2} + #{rand1};

• Read up
  Read up

Similar blocks of code found in 2 locations. Consider refactoring.

Open

    content = %Q|<html>
<object classid='clsid:#{clsid}' id='#{chemview}'></object>
<script>
#{j_shellcode}=unescape('#{shellcode}');
#{j_nops}=unescape('#{nops}');

• Read up
  Read up

Method run has 104 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def run
    res = xymon_send('ping').to_s

    unless res.starts_with? 'xymond'
      print_error 'Target is not a Xymon daemon'

Method run has 104 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def run
    headings = [
      ["Database", "Schema", "Table", "Column", "Data Type", "Row Count"]
    ]