rapid7/metasploit-framework

Method exploit has 92 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def exploit
    # Need to grab the PHP session cookie value first to pass to application
    vprint_status('Gathering PHP session cookie')
    if datastore['SSL'] == true
      vprint_status('SSL is true, changing protocol to HTTPS')

Method initialize has 92 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def initialize(info = {})
    super(
      update_info(
        info,
        'Name'           => 'Service Persistence',

Method import_libpcap has 92 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def import_libpcap(args={}, &block)
    data = args[:data]
    wspace = Msf::Util::DBManager.process_opts_workspace(args, framework).name
    bl = validate_ips(args[:blacklist]) ? args[:blacklist].split : []
    # seen_hosts is only used for determining when to yield an address. Once we get

Identical blocks of code found in 2 locations. Consider refactoring.

Open

  def bruteforce(ip)
    @scanner.scan! do |result|
      case result.status
      when Metasploit::Model::Login::Status::SUCCESSFUL
        print_brute(:level => :good, :ip => ip, :msg => "Success: '#{result.credential}'")

• Read up
  Read up

Identical blocks of code found in 2 locations. Consider refactoring.

Open

  def bruteforce(ip)
    @scanner.scan! do |result|
      case result.status
      when Metasploit::Model::Login::Status::SUCCESSFUL
        print_brute :level => :good, :ip => ip, :msg => "Success: '#{result.credential}'"

• Read up
  Read up

Similar blocks of code found in 2 locations. Consider refactoring.

Open

  # @return [String] Hex digest of file contents
  def file_remote_digestmd5(file_name, util: nil)
    if session.type == 'meterpreter'
      begin
        return session.fs.file.md5(file_name)&.unpack('H*').flatten.first

• Read up
  Read up

Similar blocks of code found in 2 locations. Consider refactoring.

Open

  # @return [String] Hex digest of file contents
  def file_remote_digestsha1(file_name, util: nil)
    if session.type == 'meterpreter'
      begin
        return session.fs.file.sha1(file_name)&.unpack('H*').flatten.first

• Read up
  Read up

Method listfiles has 91 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def listfiles(rhost)
    print_status("[SAP] Connecting to SAP Management Console SOAP Interface on #{rhost}:#{rport}")
    success = false
    soapenv = 'http://schemas.xmlsoap.org/soap/envelope/'
    xsi = 'http://www.w3.org/2001/XMLSchema-instance'

Method generate has 91 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def generate(_opts = {})
    encoded_port = [datastore['LPORT'].to_i, 2].pack('vv').unpack('N').first
    encoded_host = Rex::Socket.addr_aton(datastore['LHOST'] || '127.127.127.127').unpack('V').first
    retry_count = datastore['StagerRetryCount']
    seconds = datastore['StagerRetryWait']

Method on_request_uri has 91 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def on_request_uri(cli, request)
    print_status("Sending #{request.uri} to #{request['User-Agent']}")
    shellcode = Rex::Text.to_num(payload.encoded).gsub(/\r\n/, '')
    jscript = <<~JS
      var wasm_code = new Uint8Array([0,97,115,109,1,0,0,0,1,133,128,128,128,0,1,96,0,1,127,3,130,128,128,128,0,1,0,4,132,128,128,128,0,1,112,0,0,5,131,128,128,128,0,1,0,1,6,129,128,128,128,0,0,7,145,128,128,128,0,2,6,109,101,109,111,114,121,2,0,4,109,97,105,110,0,0,10,138,128,128,128,0,1,132,128,128,128,0,0,65,42,11])

Method initialize has 91 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def initialize(info = {})
    super(update_info(info,
      'Name'           => 'HTTPDX tolog() Function Format String Vulnerability',
      'Description'    => %q{
          This module exploits a format string vulnerability in HTTPDX FTP server.

Method exploit has 91 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def exploit
    factory = ssh_socket_factory

    opts = {
      auth_methods: ['password', 'keyboard-interactive'],

Method run has 91 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def run
    @credentials = Rex::Text::Table.new(
      'Header' => 'MSCACHE Credentials',
      'Indent' => 1,
      'Columns' =>

Method do_request_cert has 91 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def do_request_cert(icpr, opts)
    private_key = OpenSSL::PKey::RSA.new(2048)
    user = opts[:username] || datastore['SMBUser']
    status_msg = "Requesting a certificate for user #{user}"
    alt_dns = opts[:alt_dns] || (datastore['ALT_DNS'].blank? ? nil : datastore['ALT_DNS'])

Method http_fingerprint has 91 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def http_fingerprint(opts={})
    res    = nil
    uri    = opts[:uri] || '/'
    method = opts[:method] || 'GET'

Method fingerprint_user_agent has 91 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def fingerprint_user_agent(ua_str)

    fp = { :ua_string => ua_str }

    # Guess the browser type based on the user agent

Method adaudit_plus_login has 91 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def adaudit_plus_login(auth_domain, user = '', pass = '', only_get_cookie = false)
    cookie_jar.clear # let's start fresh

    # Visit the default homepage to retrieve some of the baseline cookies needed to authenticate.
    res_initial_cookies = send_request_cgi({

Method asm_reverse_sctp has 91 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def asm_reverse_sctp(opts={})
    # TODO: reliability is coming
    retry_count  = opts[:retry_count]
    reliable     = opts[:reliable]
    encoded_port = "%.8x" % [opts[:port].to_i,2].pack("vn").unpack("N").first

Similar blocks of code found in 3 locations. Consider refactoring.

Open

  def run
    last_str = nil
    last_inp = nil
    last_err = nil

• Read up
  Read up

Similar blocks of code found in 3 locations. Consider refactoring.

Open

  def run
    last_str = nil
    last_inp = nil
    last_err = nil

• Read up
  Read up