rapid7/metasploit-framework

Method process_ntlm_hash has 95 lines of code (exceeds 25 allowed). Consider refactoring.

Open

        def process_ntlm_hash(arg = {})
          ntlm_ver = arg[:ntlm_ver]
          lm_hash = arg[:lm_hash]
          nt_hash = arg[:nt_hash]
          unless ntlm_ver == NTLM_CONST::NTLM_V1_RESPONSE || ntlm_ver == NTLM_CONST::NTLM_2_SESSION_RESPONSE

Method cmd_generate has 95 lines of code (exceeds 25 allowed). Consider refactoring.

Open

          def cmd_generate(*args)
            # Parse the arguments
            encoder_name = nil
            sled_size = nil
            pad_nops = nil

Method start_handler has 95 lines of code (exceeds 25 allowed). Consider refactoring.

Open

      def start_handler
        # Maximum number of seconds to run the handler
        ctimeout = 150

        if (exploit_config and exploit_config['active_timeout'])

File mikrotik.rb has 325 lines of code (exceeds 250 allowed). Consider refactoring.

Open

module Msf
  ###
  #
  # This module provides methods for working with Mikrotik equipment
  #

Similar blocks of code found in 4 locations. Consider refactoring.

Open

    sq_bit = Integer(response_data[6].unpack('C').first) & 0b10000000
    response_data = response_data[11..-1] # cut out acpi data
    if sq_bit.eql?(0b10000000)
      ioa = response_data[0..3]
      response_data = response_data[3..-1]

• Read up
  Read up

Similar blocks of code found in 4 locations. Consider refactoring.

Open

    sq_bit = Integer(response_data[6].unpack('C').first) & 0b10000000
    response_data = response_data[11..-1] # cut out acpi data
    if sq_bit.eql?(0b10000000)
      ioa = response_data[0..3]
      response_data = response_data[3..-1]

• Read up
  Read up

Similar blocks of code found in 4 locations. Consider refactoring.

Open

    sq_bit = Integer(response_data[6].unpack('C').first) & 0b10000000
    response_data = response_data[11..-1] # cut out acpi data
    if sq_bit.eql?(0b10000000)
      ioa = response_data[0..3]
      response_data = response_data[3..-1]

• Read up
  Read up

Similar blocks of code found in 4 locations. Consider refactoring.

Open

    sq_bit = Integer(response_data[6].unpack('C').first) & 0b10000000 # this bit determines the object addressing structure
    response_data = response_data[11..-1] # cut out acpi data
    if sq_bit.eql?(0b10000000)
      ioa = response_data[0..3] # extract ioa value
      response_data = response_data[3..-1] # cut ioa from message

• Read up
  Read up

Similar blocks of code found in 2 locations. Consider refactoring.

Open

  def decrypt_password(data)
    pid = client.sys.process.getpid
    process = client.sys.process.open(pid, PROCESS_ALL_ACCESS)

    mem = process.memory.allocate(512)

• Read up
  Read up

Similar blocks of code found in 2 locations. Consider refactoring.

Open

  def decrypt_password(data)
    pid = client.sys.process.getpid
    process = client.sys.process.open(pid, PROCESS_ALL_ACCESS)

    mem = process.memory.allocate(128)

• Read up
  Read up

File prtg_authenticated_rce_cve_2023_32781.rb has 324 lines of code (exceeds 250 allowed). Consider refactoring.

Open

class MetasploitModule < Msf::Exploit::Remote
  Rank = ExcellentRanking
  include Msf::Exploit::Remote::HttpClient
  include Msf::Exploit::CmdStager
  include Msf::Exploit::Retry

File local_exploit_suggester.rb has 324 lines of code (exceeds 250 allowed). Consider refactoring.

Open

class MetasploitModule < Msf::Post

  include Msf::Auxiliary::Report

  def initialize(info = {})

File gpp.rb has 324 lines of code (exceeds 250 allowed). Consider refactoring.

Open

class MetasploitModule < Msf::Post
  include Msf::Auxiliary::Report
  include Msf::Post::File
  include Msf::Post::Windows::ExtAPI
  include Msf::Post::Windows::Priv

File graphml.rb has 324 lines of code (exceeds 250 allowed). Consider refactoring.

Open

module Rex
  module Parser
    #
    # A partial implementation of the GraphML specification for loading structured data from an XML file. Notable
    # missing components include GraphML parse meta-data (XML attributes with the "parse" prefix), hyperedges and ports.

File credential_api_doc.rb has 324 lines of code (exceeds 250 allowed). Consider refactoring.

Open

require 'swagger/blocks'

# TODO: Complete this documentation when the credential model is fully implemented in the API.
module Msf::WebServices::Documentation::Api::V1::CredentialApiDoc
  include Swagger::Blocks

Method dispatch_request has 94 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def dispatch_request(packet, rhost, src_port)
    rhost = ::IPAddr.new(rhost)

    # `recvfrom` (on Linux at least) will give us an ipv6/ipv4 mapped
    # addr like "::ffff:192.168.0.1" when the interface we're listening

Method run_host has 94 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def run_host(ip)
    client = datastore['CLIENT']
    data = '<?xml version="1.0" encoding="utf-8" ?>'
    data << '<env:Envelope xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:env="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">'
    data << '<env:Body>'

Method on_request_uri has 94 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def on_request_uri(cli, request)
    print_status("Sending #{request.uri} to #{request['User-Agent']}")
    shellcode = Rex::Text.to_num(payload.encoded).gsub(/\r\n/, '')
    jscript = <<~JS
      var wasm_code = new Uint8Array([0,97,115,109,1,0,0,0,1,133,128,128,128,0,1,96,0,1,127,3,130,128,128,128,0,1,0,4,132,128,128,128,0,1,112,0,0,5,131,128,128,128,0,1,0,1,6,129,128,128,128,0,0,7,145,128,128,128,0,2,6,109,101,109,111,114,121,2,0,4,109,97,105,110,0,0,10,138,128,128,128,0,1,132,128,128,128,0,0,65,42,11])

Method on_request_uri has 94 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def on_request_uri(cli, request)

    # Set target manually or automatically
    my_target = target
    if my_target.name == 'Automatic'

Method initialize has 94 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def initialize(info = {})
    super(
      update_info(
        info,
        'Name' => 'Craft CMS unauthenticated Remote Code Execution (RCE)',