rapid7/metasploit-framework

Identical blocks of code found in 2 locations. Consider refactoring.

Open

    if sport.to_i == 0
      req = Resolv::DNS::Message.new
      txt = "spoofprobe-#{$$}#{(rand()*1000000).to_i}.red.metasploit.com"
      req.add_question(txt, Resolv::DNS::Resource::IN::TXT)
      req.rd = 1

• Read up
  Read up

Identical blocks of code found in 2 locations. Consider refactoring.

Open

  def login
    login_uri = normalize_uri(target_uri.path, 'login')
    res = send_request_cgi('method' =>  'GET',  'uri' =>  login_uri)
    fail_with(Failure::NotFound, 'Failed to access the login page') unless res && res.code == 200

• Read up
  Read up

Similar blocks of code found in 2 locations. Consider refactoring.

Open

    begin

      if majorrel.join.to_i < 11

        query = %Q|

• Read up
  Read up

Similar blocks of code found in 2 locations. Consider refactoring.

Open

    begin
      if majorrel.join.to_i < 11
        query = %Q|
          SELECT username, password
          FROM dba_users

• Read up
  Read up

Similar blocks of code found in 2 locations. Consider refactoring.

Open

  def generate_tiff(targ)
    #
    # This is a TIFF file, we have a huge range of evasion
    # capabilities, but for now, we don't use them.
    #  - https://strikecenter.bpointsys.com/articles/2007/10/10/october-2007-microsoft-tuesday

• Read up
  Read up

Similar blocks of code found in 2 locations. Consider refactoring.

Open

  def generate_tiff(code, targ)

    #
    # This is a TIFF file, we have a huge range of evasion
    # capabilities, but for now, we don't use them.

• Read up
  Read up

Method init_exploit has 70 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def init_exploit(name, mod = nil, targ = 0)
    if mod.nil?
      @exploits[name] = framework.modules.create(name)
    else
      @exploits[name] = mod.new

Method icmp_listener has 70 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def icmp_listener
    # start icmp listener

    print_status("ICMP Listener started on #{@interface} (#{@iface_ip}). Monitoring for trigger packet containing #{datastore['START_TRIGGER']}")
    if datastore['FNAME_IN_PACKET']

Method init_sqli has 70 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def init_sqli
    wrong_resp_length = send_injection_request_cgi(',\\,))+AND+1=2;+--+')&.body&.length
    fail_with(Failure::UnexpectedReply, 'The server responded unexpectedly to a request sent with uid: ",\\,))+AND+1=2;+--+"') unless wrong_resp_length
    sqli = create_sqli(dbms: MySQLi::BooleanBasedBlind, opts: { hex_encode_strings: true }) do |payload|
      fail_with(Failure::BadConfig, 'comma in payload') if payload.include?(',')

Method grab_auths has 70 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def grab_auths(sid,last_login)
    token         = '' # from hidden input
    selected_ldap = '' # from checkbox input
    new_uri       = '' # redirection
    flow_id       = '' # id of the flow

Method run_host has 70 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def run_host(ip)

    # Keep track of results (successful connections)
    results = []

Method initialize has 70 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def initialize(info = {})
    super(merge_info(info,
      'Name'          => 'Apple iOS Command Shell, Bind TCP Inline',
      'Description'   => 'Listen for a connection and spawn a command shell',
      'Author'        => 'hdm',

Method handle_intermediate_stage has 70 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def handle_intermediate_stage(conn, payload)
    entry_offset = elf_ep(payload)

    # Generated from external/source/shellcode/linux/aarch64/stage_mettle.s
    midstager = [

Method on_request_uri has 70 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def on_request_uri(cli, request)
    print_status("GET #{request.uri} #{request.headers['User-Agent']}")

    resp = create_response(200, "OK")
    if request.uri =~ /\.js$/

Method exploit has 70 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def exploit
    @token = datastore['TOKEN']
    if @token.blank?
      res = send_request_cgi({
        'uri' => normalize_uri(target_uri.path, '/post_applogin.php'),

Method exploit has 70 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def exploit
    unless wordpress_and_online?
      fail_with(Failure::NoTarget, "#{target_uri} does not seeem to be Wordpress site")
    end

Method initialize has 70 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def initialize(info = {})
    super(update_info(info,
      'Name'        => 'Rocket Servergraph Admin Center fileRequestor Remote Code Execution',
      'Description' => %q{
        This module abuses several directory traversal flaws in Rocket Servergraph Admin

Method do_login has 70 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def do_login
    print_status("Authenticating...")
    # this method borrowed with thanks from splunk_mappy_exec.rb
    res = send_request_cgi(
      'uri'     => '/en-US/account/login',

Method initialize has 70 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def initialize(info = {})
    super(
      update_info(
        info,
        'Name' => 'Geoserver unauthenticated Remote Code Execution',

Method initialize has 70 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def initialize(info = {})
    super(
      update_info(
        info,
        'Name' => 'Apache Struts 2 DefaultActionMapper Prefixes OGNL Code Execution',