rapid7/metasploit-framework

Similar blocks of code found in 2 locations. Consider refactoring.

Open

  def rpc_nops(module_info = nil, arch = nil)
    unless module_info.nil?
      module_info = module_info.strip.split(',').map(&:strip)
      module_info.map!(&:to_sym)
    end

• Read up
  Read up

Similar blocks of code found in 2 locations. Consider refactoring.

Open

            Types::Record.from_value(Types::RecordValues::ClassWithMembersAndTypes.new(
              class_info: Types::General::ClassInfo.new(
                obj_id: -4,
                name: 'System.Data.SerializationFormat',
                member_names: %w[ value__ ]

• Read up
  Read up

Similar blocks of code found in 2 locations. Consider refactoring.

Open

            Types::Record.from_value(Types::RecordValues::ClassWithMembersAndTypes.new(
              class_info: Types::General::ClassInfo.new(
                obj_id: -3,
                name: 'System.Data.SerializationFormat',
                member_names: %w[ value__ ]

• Read up
  Read up

Similar blocks of code found in 2 locations. Consider refactoring.

Open

  module OptionalSession
    module PostgreSQL
      include Msf::OptionalSession

      RHOST_GROUP_OPTIONS = %w[RHOSTS RPORT DATABASE USERNAME PASSWORD THREADS]

• Read up
  Read up

Function exploit has 61 lines of code (exceeds 25 allowed). Consider refactoring.

Open

function exploit() {
   var x = window["document"];
   var then = window["Document"]["prototype"]["createElement"];
   var _0x4d7c02 = window["Document"]["prototype"]["write"];
   var PL$22 = window["HTMLElement"]["prototype"]["appendChild"];

Method wiki has 61 lines of code (exceeds 25 allowed). Consider refactoring.

Open

      def wiki(wiki_type, *args)
        # Create a table options hash
        tbl_opts = {}
        # Set some default options for the table hash
        tbl_opts[:hosts] = []

Method run has 61 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def run

    uri = "/"
    uri << (datastore['YEAR'].to_s + "/") if datastore['YEAR'].to_s != ""
    uri << "companies.xml"

Method run_host has 61 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def run_host(ip)
    unless wordpress_and_online?
      vprint_error('Server not online or not detected as wordpress')
      return
    end

Method run_host has 61 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def run_host(ip)

    web_path = normalize_uri(datastore['PATH'])
    http_method = datastore['METHOD']
    target_host = datastore['TARGETHOST'] || Rex::Text.rand_text_alpha_lower(8)+".com"

Method run_host has 61 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def run_host(ip)
    tpath = normalize_uri(datastore['PATH'])
    if tpath[-1,1] != '/'
      tpath += '/'
    end

Method do_login has 61 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def do_login(user='DBSNMP', pass='DBSNMP', version=9.0)
    uri = datastore['URI']

    vprint_status("#{msg} Trying username:'#{user}' with password:'#{pass}' with SID '#{sid}'")
    success = false

Method query_host has 61 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def query_host(rhost)
    # Create a handler with our UUID and Transfer Syntax

    self.handle = Rex::Proto::DCERPC::Handle.new(
      [

Method run_host has 61 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def run_host(target_host)
    begin
      connect
    rescue Rex::ConnectionError
      return Exploit::CheckCode::Unknown

Method initialize has 61 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def initialize(info = {})
    super(update_info(info,
      'Name'           => 'Xorg X11 Server Local Privilege Escalation',
      'Description'    => %q(
        WARNING: Successful execution of this module results in /etc/passwd being overwritten.

Method exploit has 61 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def exploit
    uri = normalize_uri(target_uri.path)

    #get upload filepath
    print_status("Getting the upload path...")

Method initialize has 61 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def initialize(info = {})
    super(update_info(info,
      'Name'           => 'Portable UPnP SDK unique_service_name() Remote Code Execution',
      'Description'    => %q{
          This module exploits a buffer overflow in the unique_service_name()

Method initialize has 61 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def initialize(info = {})
    super(update_info(info,
      'Name'        => 'Openfire Admin Console Authentication Bypass',
      'Description' => %q{
          This module exploits an authentication bypass vulnerability in the administration

Method initialize has 61 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def initialize(info = {})
    super(
      update_info(
        info,
        'Name' => 'Mirth Connect Deserialization RCE',

Method initialize has 61 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def initialize(info = {})
    super(
      update_info(
        info,
        'Name' => 'Cacti RCE via SQLi in pollers.php',

Method setup_repo_structure has 61 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def setup_repo_structure
    link_content = '.git/hooks'
    link_name = Rex::Text.rand_text_alpha(8..12).downcase
    link_obj = GitObject.build_blob_object(link_content)