rapid7/metasploit-framework

Method check has 84 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def check
    def mounts_exist?()
      vprint_status('Checking if mount points exist')
      if target.name == 'CVE-2015-1328'
        if not directory?('/tmp/ns_sploit')

Method initialize has 84 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def initialize(info = {})
    super(
      update_info(
        info,
        'Name' => 'GL.iNet Unauthenticated Remote Command Execution via the logread module.',

Method exploit has 84 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def exploit
    # This is an important check...
    fail_with(Failure::BadConfig, 'SRVHOST can\'t be localhost') if datastore['SRVHOST'] =~ /(127|0)\.0\.0\.(0|1)|localhost/

    # Step 1 generate malicious TAR archive

Method initialize has 84 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def initialize(info = {})
    super(
      update_info(
        info,
        'Name' => 'Cisco IOX XE Unauthenticated RCE Chain',

Method send_tcp has 84 lines of code (exceeds 25 allowed). Consider refactoring.

Open

    def send_tcp(packet, packet_data, nameservers, prox = @config[:proxies])
      ans = nil
      length = [packet_data.size].pack("n")
      nameservers.each do |ns, socket_options|
        socket = nil

Method win32_rwx_exec has 84 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def self.win32_rwx_exec(code)
    stub_block = Rex::Payloads::Shuffle.from_graphml_file(
      File.join(Msf::Config.install_root, 'data', 'shellcode', 'block_api.x86.graphml'),
      arch: ARCH_X86,
      name: 'api_call'

Method report_auth_info has 84 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def report_auth_info(opts={})
    return if not active
    raise ArgumentError.new("Missing required option :host") if opts[:host].nil?
    raise ArgumentError.new("Missing required option :port") if (opts[:port].nil? and opts[:service].nil?)

Method asm_block_recv_rc4 has 84 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def asm_block_recv_rc4(opts={})
    xorkey = Rex::Text.to_dword(opts[:xorkey]).chomp
    reliable     = opts[:reliable]
    asm = %Q^
      recv:

Method jtr_format_to_hashcat_format has 84 lines of code (exceeds 25 allowed). Consider refactoring.

Open

        def jtr_format_to_hashcat_format(format)
          case format
          # nix
          when 'md5crypt'
            '500'

Identical blocks of code found in 2 locations. Consider refactoring.

Open

  def login_it360
    # Do we already have a valid cookie? If yes, just return that.
    unless datastore['IAMAGENTTICKET'].nil?
      cookie_name = get_it360_cookie_name
      cookie = 'IAMAGENTTICKET' + cookie_name + '=' + datastore['IAMAGENTTICKET'] + ';'

• Read up
  Read up

Identical blocks of code found in 2 locations. Consider refactoring.

Open

    stream_1 = 'stream' << eol
    stream_1 << '0.000 0.000 0.000 rg 0.000 0.000 0.000 RG q 265.000 0 0 229.000 41.000 522.000 cm /I0 Do Q' << eol
    stream_1 << 'endstream' << eol
    add_object(6, "<</Length 91>>#{stream_1}")
    stream = '<<' << eol

• Read up
  Read up

Identical blocks of code found in 2 locations. Consider refactoring.

Open

    stream_1 = "stream" << eol
    stream_1 << "0.000 0.000 0.000 rg 0.000 0.000 0.000 RG q 265.000 0 0 229.000 41.000 522.000 cm /I0 Do Q" << eol
    stream_1 << "endstream" << eol
    add_object(6, "<</Length 91>>#{stream_1}")
    stream = "<<" << eol

• Read up
  Read up

Identical blocks of code found in 2 locations. Consider refactoring.

Open

  def login_it360
    # Do we already have a valid cookie? If yes, just return that.
    unless datastore['IAMAGENTTICKET'].nil?
      cookie_name = get_it360_cookie_name
      cookie = 'IAMAGENTTICKET' + cookie_name + '=' + datastore['IAMAGENTTICKET'] + ';'

• Read up
  Read up

Method cmd_token_hunt_user has 83 lines of code (exceeds 25 allowed). Consider refactoring.

Open

      def cmd_token_hunt_user(*args)
        opts = Rex::Parser::Arguments.new(
          '-h' => [ false, 'This help menu'],
          '-f' => [ true, 'A file containing a list of users to search for (one per line)']
        )

Method js has 83 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def js
    target_files = parse_target_files
    js_target_files = target_files * ','

    %Q|

Method osexecute has 83 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def osexecute(rhost, cmd_to_run)

    print_status("[SAP] Connecting to SAP Management Console SOAP Interface on #{rhost}:#{rport}")
    success = false

Method run_host has 83 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def run_host(target_host)
    begin
      iplist = Rex::Socket::RangeWalker.new(datastore['RANGE'])
      portlist = Rex::Socket.portspec_crack(datastore['PORTS'])
      dead = false

Method run_host has 83 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def run_host(ip)
    checkcode = Exploit::CheckCode::Unknown
    details = {}

    begin

Method initialize has 83 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def initialize(_info = {})
    super(
      'Name' => 'Log4Shell HTTP Header Injection',
      'Description' => %q{
        Versions of Apache Log4j2 impacted by CVE-2021-44228 which allow JNDI features used in configuration,

Method check has 83 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def check
    sysinfo_value = sysinfo['OS']

    if sysinfo_value !~ /windows/i
      # Non-Windows systems are definitely not affected.