rapid7/metasploit-framework

File task_scheduler.rb has 354 lines of code (exceeds 250 allowed). Consider refactoring.

Open

module Msf
  class Post
    module Windows
      #
      # Post module mixin for dealing with Windows Task Scheduler

Method run has 112 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def run
    found = false
    roots.each do |root|
      break if found

Method exploit has 112 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def exploit
    version = get_version

    # 1: get the cookies, the login_url and the password_form and username form names (they varies between versions)
    res = send_request_cgi({

Method on_request_uri has 112 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def on_request_uri(cli, request)

    return if ((p = regenerate_payload(cli)) == nil)

    print_status("Sending exploit HTML")

Method initialize has 112 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def initialize(info = {})
    super(
      update_info(
        info,
        'Name' => 'MS08-068 Microsoft Windows SMB Relay Code Execution',

Method exploit has 112 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def exploit

    if check != CheckCode::Appears
      fail_with(Failure::NotVulnerable, 'Target not vulnerable! punt!')
    end

Method token_generation_endpoints has 112 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def token_generation_endpoints
    %w[
      /access/file-path-manager/indexing
      /cm/autodeploy/cluster-software-images/indexing
      /cm/autodeploy/qkview/indexing

File session_notifier.rb has 353 lines of code (exceeds 250 allowed). Consider refactoring.

Open

require 'net/https'
require 'net/http'
require 'uri'
module Msf
  class Plugin::SessionNotifier < Msf::Plugin

File chaos_rat_xss_to_rce.rb has 353 lines of code (exceeds 250 allowed). Consider refactoring.

Open

class MetasploitModule < Msf::Exploit::Remote
  Rank = ExcellentRanking

  prepend Msf::Exploit::Remote::AutoCheck
  include Msf::Exploit::Remote::HttpClient

Similar blocks of code found in 3 locations. Consider refactoring.

Open

  def initialize(info = {})
    super(update_info(info,
      'Name'        => 'Borland InterBase isc_create_database() Buffer Overflow',
      'Description'    => %q{
        This module exploits a stack buffer overflow in Borland InterBase

• Read up
  Read up

Similar blocks of code found in 3 locations. Consider refactoring.

Open

  def initialize(info = {})
    super(update_info(info,
      'Name'        => 'Borland InterBase isc_attach_database() Buffer Overflow',
      'Description'    => %q{
        This module exploits a stack buffer overflow in Borland InterBase

• Read up
  Read up

Similar blocks of code found in 3 locations. Consider refactoring.

Open

  def initialize(info = {})
    super(update_info(info,
      'Name'        => 'Borland InterBase SVC_attach() Buffer Overflow',
      'Description'    => %q{
        This module exploits a stack buffer overflow in Borland InterBase

• Read up
  Read up

File getcountermeasure.rb has 352 lines of code (exceeds 250 allowed). Consider refactoring.

Open

session = client
@@exec_opts = Rex::Parser::Arguments.new(
  "-h" => [ false, "Help menu." ],
  "-k" => [ false, "Kill any AV, HIPS and Third Party Firewall process found." ],
  "-d" => [ false, "Disable built in Firewall" ]

File empire_skywalker.rb has 352 lines of code (exceeds 250 allowed). Consider refactoring.

Open

class MetasploitModule < Msf::Exploit::Remote
  Rank = ExcellentRanking

  include Msf::Exploit::Remote::HttpClient
  include Msf::Exploit::FileDropper

File cisco.rb has 352 lines of code (exceeds 250 allowed). Consider refactoring.

Open

module Msf
  ###
  #
  # This module provides methods for working with Cisco equipment
  #

Method initialize has 111 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def initialize(info = {})
    super(merge_info(info,
      'Name'          => 'Windows x86 Pingback, Bind TCP Inline',
      'Description'   => 'Open a socket and report UUID when a connection is received (Windows x86)',
      'Author'        => [ 'bwatters-r7' ],

Method initialize has 111 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def initialize(info = {})
    super(
      update_info(
        info,
        'Name' => 'Wordpress File Manager Advanced Shortcode 2.3.2 - Unauthenticated Remote Code Execution through shortcode',

Method exploit has 111 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def exploit
    return unless check == Exploit::CheckCode::Appears

    uri = target_uri.path
    vprint_status("#{peer} - Grabbing CSRF token...")

Method exploit has 111 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def exploit
      init = send_request_cgi({
        'uri' => normalize_uri(target_uri.path, 'index.php')
      })

Method win32_rwx_exec_thread has 111 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def self.win32_rwx_exec_thread(code, block_offset, which_offset='start')
    stub_block = Rex::Payloads::Shuffle.from_graphml_file(
      File.join(Msf::Config.install_root, 'data', 'shellcode', 'block_api.x86.graphml'),
      arch: ARCH_X86,
      name: 'api_call'