rapid7/metasploit-framework

Method on_request_uri has 71 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def on_request_uri(cli, request)

    if target['Method'] == 'automatic'
      mytarget = auto_target(cli, request)
      if (not mytarget)

Method exploit has 71 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def exploit

    print_status("Retrieving JSESSION ID")
    res = send_request_cgi({
      'method' => 'GET',

Method initialize has 71 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def initialize(info = {})
    super(
      update_info(
        info,
        'Name' => 'Linux BPF doubleput UAF Privilege Escalation',

Method initialize has 71 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def initialize(info = {})
    super(
      update_info(
        info,
        'Name' => 'Apache OFBiz XML-RPC Java Deserialization',

Method initialize has 71 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def initialize(info = {})
    super(
      update_info(
        info,
        'Name' => 'Grandstream UCM62xx IP PBX sendPasswordEmail RCE',

Method brute_force_ids has 71 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def brute_force_ids
    # perform a sanity check first
    if @host_id
      host_ids = [@host_id]
    else

Method initialize has 71 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def initialize(info = {})
    super(
      update_info(
        info,
        'Name' => 'Rocket Software Unidata udadmin_server Authentication Bypass',

Method smart_hash_dump has 71 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def smart_hash_dump(migrate_system, pwdfile)
    domain_controller = domain_controller?
    print_good('Host is a Domain Controller') if domain_controller

    if !is_uac_enabled? || is_admin?

Method decrypt_pref has 71 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def decrypt_pref(file_name)
    file_contents = read_file(file_name)
    if file_contents.nil? || file_contents.empty?
      print_status "Skipping empty file: #{file_name}"
      return []

Method decrypt_orion_db has 71 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def decrypt_orion_db(csv_dataset)
    fail_with(Msf::Exploit::Failure::Unknown, 'Dataset contains no column values') unless csv_dataset

    current_row = 0
    decrypted_rows = 0

Method run has 71 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def run
    # Registry key to manipulate
    reg_key = 'HKLM\\SAM\\SAM\\Domains\\Account\\Users'

    # Checks privileges of the session, and tries to get SYSTEM privileges if needed.

Method check_ref_identifiers has 71 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def check_ref_identifiers
    in_super     = false
    in_refs      = false
    in_notes     = false
    cve_assigned = false

Method cmd_dump_sms has 71 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def cmd_dump_sms(*args)
    path = "sms_dump_#{::Time.new.strftime('%Y%m%d%H%M%S')}.txt"
    dump_sms_opts = Rex::Parser::Arguments.new(
      '-h' => [ false, 'Help Banner' ],
      '-o' => [ true, 'Output path for sms list']

Method match_processes has 71 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def match_processes(processes, args, quiet: false)

    search_proc = nil
    search_user = nil
    exact_match = false

Method asm_bind_tcp has 71 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def asm_bind_tcp(opts={})

    reliable      = opts[:reliable]
    addr_fam      = 2
    sockaddr_size = 16

Method dot154_packet_decode has 71 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def dot154_packet_decode(packet)
    result = {}
    offset = 0
    pktchop = ['', '', '', '', '', '', [], '']
    pktchop[0] = packet[0,2]

Identical blocks of code found in 2 locations. Consider refactoring.

Open

    if res && res.code == 303 && res.headers['Location']
      location = res.headers['Location']
      print_status("#{peer} - Following redirect to [ #{location} ]")
      res = send_request_cgi(
        'uri'    => location,

• Read up
  Read up

Identical blocks of code found in 2 locations. Consider refactoring.

Open

    if sport.to_i == 0
      req = Resolv::DNS::Message.new
      txt = "spoofprobe-#{$$}#{(rand()*1000000).to_i}.red.metasploit.com"
      req.add_question(txt, Resolv::DNS::Resource::IN::TXT)
      req.rd = 1

• Read up
  Read up

Identical blocks of code found in 2 locations. Consider refactoring.

Open

  def login
    login_uri = normalize_uri(target_uri.path, 'login')
    res = send_request_cgi('method' =>  'GET', 'uri'  =>  login_uri)
    fail_with(Failure::NotFound, 'Failed to access the login page') unless res && res.code == 200

• Read up
  Read up

Identical blocks of code found in 2 locations. Consider refactoring.

Open

    if res && res.code == 303 && res.headers['Location']
      location = res.headers['Location']
      print_status("#{peer} - Following redirect to [ #{location} ]")
      res = send_request_cgi(
        'uri'    => location,

• Read up
  Read up