rapid7/metasploit-framework

Method check has 69 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def check
    # We fingerprint devices using SHA1 hash of a web resource accessible to unauthenticated users.
    # We use lang_pack/EN.js because it's the one file that changes the most between versions.
    # Note that it's not a smoking gun given that some branches keep the exact same files in /www
    # (see RV110 branch 1.2.1.x/1.2.2.x, RV130 > 1.0.3.22, RV215 1.2.0.x/1.3.x)

Method initialize has 69 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def initialize(info = {})
    super(
      update_info(
        info,
        'Name' => 'VMware Workspace ONE Access VMSA-2022-0011 exploit chain',

Method initialize has 69 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def initialize(info = {})
    super(
      update_info(
        info,
        'Name' => 'VMware Workspace ONE Access CVE-2022-22954',

Method do_decrypt has 69 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def do_decrypt
    unless datastore['DISCLAIMER']
      decrypt_disclaimer
      return
    end

Method run has 69 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def run
    unless is_rf?
      print_error('Not an RF Transceiver')
      return
    end

Method run has 69 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def run
    get_vcsa_version

    if check_cve_2022_22948
      print_good('Vulnerable to CVE-2022-22948')

Method from_sddl_text has 69 lines of code (exceeds 25 allowed). Consider refactoring.

Open

    def self.from_sddl_text(sddl_text, domain_sid:)
      sacl_set = dacl_set = false
      sd = self.new
      sddl_text = sddl_text.dup.gsub(/\s/, '')  # start by removing all whitespace
      sddl_text.scan(/([OGDS]:(?:.(?!:))*)/).each do |part,|

Method cmd_run has 69 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def cmd_run(*args, action: nil, opts: {})
    if (args.include?('-r') || args.include?('--reload-libs')) && !opts[:previously_reloaded]
      driver.run_single('reload_lib -a')
    end

Method parse_options has 69 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def self.parse_options(mod)
    action = 'run'
    actions = ['run'] + mod.meta['capabilities']
    args = mod.meta['options'].reduce({}) do |defaults, (n, opt)|
      if opt['default'].nil?

Method connect has 69 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def connect(opts={})
    dossl = false
    if(opts.has_key?('SSL'))
      dossl = opts['SSL']
    else

Method on_client_data has 69 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def on_client_data(c)
    data = c.get_once
    return if not data

    cmd,arg = data.strip.split(/\s+/, 2)

Method get_obd_standards has 69 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def get_obd_standards(bus, src_id, dst_id, opt = {})
    opt['MAXPKTS'] = 1
    packets = get_current_data(bus, src_id, dst_id, 0x1C, opt)
    return "" if packets.nil?
    if packets.key? "error"

Identical blocks of code found in 3 locations. Consider refactoring.

Open

  def on_request_uri(cli, request)
    print_status("handling request for #{request.uri}")

    case request.uri
    when /\.jar$/i

• Read up
  Read up

Identical blocks of code found in 3 locations. Consider refactoring.

Open

  def on_request_uri(cli, request)
    print_status("handling request for #{request.uri}")

    case request.uri
    when /\.jar$/i

• Read up
  Read up

Identical blocks of code found in 3 locations. Consider refactoring.

Open

  def on_request_uri(cli, request)
    print_status("handling request for #{request.uri}")

    case request.uri
    when /\.jar$/i

• Read up
  Read up

Identical blocks of code found in 2 locations. Consider refactoring.

Open

for segment in macho.segments
  #next if segment.segname == MachO::LoadCommands::SEGMENT_NAMES[:SEG_PAGEZERO]
  puts "segment: #{segment.segname} off: #{segment.offset.to_s(16)} vmaddr: #{segment.vmaddr.to_s(16)} fileoff: #{segment.fileoff.to_s(16)}"
  for section in segment.sections
    puts "section: #{section.sectname} off: #{section.offset.to_s(16)} addr: #{section.addr.to_s(16)} size: #{section.size.to_s(16)}"

• Read up
  Read up

Identical blocks of code found in 2 locations. Consider refactoring.

Open

for segment in macho.segments
  #next if segment.segname == MachO::LoadCommands::SEGMENT_NAMES[:SEG_PAGEZERO]
  puts "segment: #{segment.segname} off: #{segment.offset.to_s(16)} vmaddr: #{segment.vmaddr.to_s(16)} fileoff: #{segment.fileoff.to_s(16)}"
  for section in segment.sections
    puts "section: #{section.sectname} off: #{section.offset.to_s(16)} addr: #{section.addr.to_s(16)} size: #{section.size.to_s(16)}"

• Read up
  Read up

Similar blocks of code found in 2 locations. Consider refactoring.

Open

    begin
      ssh = nil
      ::Timeout.timeout(datastore['SSH_TIMEOUT']) do
        ssh = Net::SSH.start(rhost, username, opts)
      end

• Read up
  Read up

Similar blocks of code found in 2 locations. Consider refactoring.

Open

    begin
      ssh = nil
      ::Timeout.timeout(datastore['SSH_TIMEOUT']) do
        ssh = Net::SSH.start(rhost, username, opts)
      end

• Read up
  Read up

Similar blocks of code found in 2 locations. Consider refactoring.

Open

msfbase = __FILE__
while File.symlink?(msfbase)
  msfbase = File.expand_path(File.readlink(msfbase), File.dirname(msfbase))
end

• Read up
  Read up