rapid7/metasploit-framework

Method do_login has 93 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def do_login(user, pass)
    vprint_status("#{rhost}:#{rport} - Trying username:#{user.inspect} with password:#{pass.inspect}")

    # Set Cookie - Box is vuln to Session Fixation. Generating a random cookie for use.
    randomvalue = Rex::Text.rand_text_alphanumeric(26)

Method syscall_parser has 93 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def syscall_parser
    %@
    SYSCALL_LIST _SyscallList;

    DWORD HashSyscall(PCSTR FunctionName)

Method initialize has 93 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def initialize(info = {})
    super(update_info(
      info,
      'Name'           => 'Splunk Custom App Remote Code Execution',
      'Description'    =>

Method initialize has 93 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def initialize(info = {})
    super(
      update_info(
        info,
        'Name' => 'SugarCRM unauthenticated Remote Code Execution (RCE)',

Method exploit has 93 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def exploit
    unless check == Exploit::CheckCode::Appears
      fail_with(Failure::NotVulnerable, 'Target is not vulnerable')
    end

Method initialize has 93 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def initialize(info = {})
    super(
      update_info(
        info,
        'Name' => 'Apache Commons Text RCE',

Method find_target_cgi has 93 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def find_target_cgi

    target_uris = []
    common_dirs = %W^
/

Method run has 93 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def run
    userhives = load_missing_hives
    userhives.each do |hive|
      next if hive['HKU'].nil?

Method cmd_migrate has 93 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def cmd_migrate(*args)
    if args.length == 0 || args.any? { |arg| %w(-h --pid --name).include? arg }
      cmd_migrate_help
      return true
    end

Method creds_add has 93 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def creds_add(*args)
    params = args.inject({}) do |hsh, n|
      opt = n.split(':') # Splitting the string on colons.
      hsh[opt[0]] = opt[1..-1].join(':') # everything before the first : is the key, reasembling everything after the colon. why ntlm hashes
      hsh

Similar blocks of code found in 2 locations. Consider refactoring.

Open

  def check
    # sanity check to see if the target is likely OpenTSDB
    res1 = send_request_cgi({
      'method' => 'GET',
      'uri' => normalize_uri(target_uri.path)

• Read up
  Read up

Similar blocks of code found in 2 locations. Consider refactoring.

Open

  def read_coils
    if datastore['NUMBER'] + datastore['DATA_ADDRESS'] > 65535
      print_error('Coils addresses go from 0 to 65535. You cannot go beyond.')
      return
    end

• Read up
  Read up

Similar blocks of code found in 2 locations. Consider refactoring.

Open

  def read_discrete_inputs
    if datastore['NUMBER'] + datastore['DATA_ADDRESS'] > 65535
      print_error('DISCRETE INPUT addresses go from 0 to 65535. You cannot go beyond.')
      return
    end

• Read up
  Read up

Similar blocks of code found in 2 locations. Consider refactoring.

Open

  def check
    # sanity check to see if the target is likely OpenTSDB
    res1 = send_request_cgi({
      'method' => 'GET',
      'uri' => normalize_uri(target_uri.path)

• Read up
  Read up

Similar blocks of code found in 2 locations. Consider refactoring.

Open

        print_status('Preparing ROP chain for target 1.3.8.42!')

        # 0x140cd00a9 | add rsp, 0x10 ; ret
        # This is needed because the next 16 bytes are sometimes messed up.
        overwrite = [0x140cd00a9].pack('Q<')

• Read up
  Read up

Similar blocks of code found in 2 locations. Consider refactoring.

Open

        print_status('Preparing ROP chain for target 1.4.2.37!')

        # 0x140cd9759 | add rsp, 0x10 ; ret
        # This is needed because the next 16 bytes are sometimes messed up.
        overwrite = [0x140cd9759].pack('Q<')

• Read up
  Read up

Method run has 92 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def run
    begin
      @port = datastore['SRVPORT'].to_i
      @sock = Rex::Socket::Udp.create(
            'LocalHost' => datastore['SRVHOST'],

Method run_host has 92 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def run_host(ip)
    snmp = connect_snmp

    if snmp.get_value('sysDescr.0') =~ /DG950A/
      print_line("#{ip}")

Method run_host has 92 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def run_host(ip)
    self.postgres_conn = session.client if session
    # Query the Postgres Shadow table for username and password hashes and report them
    res = postgres_query('SELECT usename, passwd FROM pg_shadow',false)

Method initialize has 92 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def initialize(info = {})
    super(merge_info(info,
      'Name'          => 'OS X Write and Execute Binary',
      'Description'   => 'Spawn a command shell (staged)',
      'Author'        => 'hdm',