rapid7/metasploit-framework

View on GitHub
modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb

Summary

Maintainability
F
6 days
Test Coverage

Method vuln_version? has a Cognitive Complexity of 76 (exceeds 5 allowed). Consider refactoring.
Open

  def vuln_version?(res)
    # checks the model, firmware and hardware version
    @d_link = { 'product' => nil, 'firmware' => nil, 'hardware' => nil, 'arch' => nil }
    html = Nokogiri.HTML(res.body, nil, 'UTF-8')

Severity: Minor
Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb - About 1 day to fix

Cognitive Complexity

Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

A method's cognitive complexity is based on a few simple rules:

  • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
  • Code is considered more complex for each "break in the linear flow of the code"
  • Code is considered more complex when "flow breaking structures are nested"

Further reading

Method vuln_version? has 166 lines of code (exceeds 25 allowed). Consider refactoring.
Open

  def vuln_version?(res)
    # checks the model, firmware and hardware version
    @d_link = { 'product' => nil, 'firmware' => nil, 'hardware' => nil, 'arch' => nil }
    html = Nokogiri.HTML(res.body, nil, 'UTF-8')

Severity: Major
Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb - About 6 hrs to fix

    Method initialize has 108 lines of code (exceeds 25 allowed). Consider refactoring.
    Open

      def initialize(info = {})
        super(
          update_info(
            info,
            'Name' => 'D-Link Unauthenticated Remote Command Execution using UPnP via a special crafted M-SEARCH packet.',
    Severity: Major
    Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb - About 4 hrs to fix

      File dlink_upnp_msearch_exec.rb has 320 lines of code (exceeds 250 allowed). Consider refactoring.
      Open

      class MetasploitModule < Msf::Exploit::Remote
        Rank = ExcellentRanking
      
        include Msf::Exploit::Remote::HttpClient
        include Msf::Exploit::CmdStager
      Severity: Minor
      Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb - About 3 hrs to fix

        Method check has a Cognitive Complexity of 10 (exceeds 5 allowed). Consider refactoring.
        Open

          def check
            print_status("Checking if #{peer} can be exploited.")
            res = send_request_cgi!({
              'rport' => datastore['HTTP_PORT'],
              'method' => 'GET',
        Severity: Minor
        Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb - About 1 hr to fix

        Cognitive Complexity

        Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

        A method's cognitive complexity is based on a few simple rules:

        • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
        • Code is considered more complex for each "break in the linear flow of the code"
        • Code is considered more complex when "flow breaking structures are nested"

        Further reading

        Avoid too many return statements within this method.
        Open

              return Rex::Version.new(@d_link['firmware']) <= Rex::Version.new('1.07') && @d_link['hardware'][0] == 'A'
        Severity: Major
        Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb - About 30 mins to fix

          Avoid too many return statements within this method.
          Open

                return Rex::Version.new(@d_link['firmware']) <= Rex::Version.new('2.05') && @d_link['hardware'][0] == 'B'
          Severity: Major
          Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb - About 30 mins to fix

            Avoid too many return statements within this method.
            Open

                return CheckCode::Detected("Product info: #{@d_link['product']}|#{@d_link['firmware']}|#{@d_link['hardware']}|#{@d_link['arch']}") unless @d_link['product'].nil?
            Severity: Major
            Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb - About 30 mins to fix

              Avoid too many return statements within this method.
              Open

                    return Rex::Version.new(@d_link['firmware']) <= Rex::Version.new('2.03') && @d_link['hardware'][0] == 'B'
              Severity: Major
              Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb - About 30 mins to fix

                Avoid too many return statements within this method.
                Open

                      return Rex::Version.new(@d_link['firmware']) <= Rex::Version.new('1.11') && @d_link['hardware'][0] == 'A'
                Severity: Major
                Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb - About 30 mins to fix

                  Avoid too many return statements within this method.
                  Open

                        return Rex::Version.new(@d_link['firmware']) <= Rex::Version.new('1.05') && (@d_link['hardware'][0] == 'A' || @d_link['hardware'] == 'N/A')
                  Severity: Major
                  Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb - About 30 mins to fix

                    Avoid too many return statements within this method.
                    Open

                          return Rex::Version.new(@d_link['firmware']) <= Rex::Version.new('1.04')
                    Severity: Major
                    Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb - About 30 mins to fix

                      Avoid too many return statements within this method.
                      Open

                            return Rex::Version.new(@d_link['firmware']) <= Rex::Version.new('1.12') && @d_link['hardware'][0] == 'A'
                      Severity: Major
                      Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb - About 30 mins to fix

                        Avoid too many return statements within this method.
                        Open

                              return Rex::Version.new(@d_link['firmware']) <= Rex::Version.new('1.03') && @d_link['hardware'][0] == 'A'
                        Severity: Major
                        Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb - About 30 mins to fix

                          Avoid too many return statements within this method.
                          Open

                                return Rex::Version.new(@d_link['firmware']) <= Rex::Version.new('1.04') && (@d_link['hardware'][0] == 'A' || @d_link['hardware'] == 'N/A')
                          Severity: Major
                          Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb - About 30 mins to fix

                            Avoid too many return statements within this method.
                            Open

                                  return true if Rex::Version.new(@d_link['firmware']) <= Rex::Version.new('2.04') && @d_link['hardware'][0] == 'B'
                            Severity: Major
                            Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb - About 30 mins to fix

                              Avoid too many return statements within this method.
                              Open

                                    return Rex::Version.new(@d_link['firmware']) <= Rex::Version.new('1.05') && @d_link['hardware'][0] == 'A'
                              Severity: Major
                              Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb - About 30 mins to fix

                                Avoid too many return statements within this method.
                                Open

                                      return Rex::Version.new(@d_link['firmware']) <= Rex::Version.new('1.12') && (@d_link['hardware'][0] == 'A' || @d_link['hardware'] == 'N/A')
                                Severity: Major
                                Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb - About 30 mins to fix

                                  Avoid too many return statements within this method.
                                  Open

                                        return true if Rex::Version.new(@d_link['firmware']) <= Rex::Version.new('2.03') && @d_link['hardware'][0] == 'B'
                                  Severity: Major
                                  Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb - About 30 mins to fix

                                    Avoid too many return statements within this method.
                                    Open

                                          return Rex::Version.new(@d_link['firmware']) <= Rex::Version.new('1.06') && @d_link['hardware'][0] == 'A'
                                    Severity: Major
                                    Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb - About 30 mins to fix

                                      Avoid too many return statements within this method.
                                      Open

                                            return Rex::Version.new(@d_link['firmware']) <= Rex::Version.new('1.02') && (@d_link['hardware'][0] == 'A' || @d_link['hardware'] == 'N/A')
                                      Severity: Major
                                      Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb - About 30 mins to fix

                                        Avoid too many return statements within this method.
                                        Open

                                              return Rex::Version.new(@d_link['firmware']) <= Rex::Version.new('3.12') && @d_link['hardware'][0] == 'C'
                                        Severity: Major
                                        Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb - About 30 mins to fix

                                          Avoid too many return statements within this method.
                                          Open

                                                return true if Rex::Version.new(@d_link['firmware']) <= Rex::Version.new('1.12') && @d_link['hardware'][0] == 'A'
                                          Severity: Major
                                          Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb - About 30 mins to fix

                                            Avoid too many return statements within this method.
                                            Open

                                                return CheckCode::Detected
                                            Severity: Major
                                            Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb - About 30 mins to fix

                                              Avoid too many return statements within this method.
                                              Open

                                                    return Rex::Version.new(@d_link['firmware']) <= Rex::Version.new('1.12') && @d_link['hardware'][0] == 'A'
                                              Severity: Major
                                              Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb - About 30 mins to fix

                                                Avoid too many return statements within this method.
                                                Open

                                                      return true if Rex::Version.new(@d_link['firmware']) <= Rex::Version.new('1.10') && @d_link['hardware'][0] == 'A'
                                                Severity: Major
                                                Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb - About 30 mins to fix

                                                  Avoid too many return statements within this method.
                                                  Open

                                                        return Rex::Version.new(@d_link['firmware']) <= Rex::Version.new('2.06') && (@d_link['hardware'][0] == 'B' || @d_link['hardware'] == 'N/A')
                                                  Severity: Major
                                                  Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb - About 30 mins to fix

                                                    Avoid too many return statements within this method.
                                                    Open

                                                          return Rex::Version.new(@d_link['firmware']) <= Rex::Version.new('1.00') && @d_link['hardware'][0] == 'A'
                                                    Severity: Major
                                                    Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb - About 30 mins to fix

                                                      Avoid too many return statements within this method.
                                                      Open

                                                            return Rex::Version.new(@d_link['firmware']) <= Rex::Version.new('1.08') && @d_link['hardware'][0] == 'A'
                                                      Severity: Major
                                                      Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb - About 30 mins to fix

                                                        Similar blocks of code found in 2 locations. Consider refactoring.
                                                        Open

                                                            if @d_link['product'].nil?
                                                              xml_soap_data = <<~EOS
                                                                <?xml version="1.0" encoding="utf-8"?>
                                                                  <soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
                                                                    <soap:Body>
                                                        Severity: Major
                                                        Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb and 1 other location - About 2 hrs to fix
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 191..218

                                                        Duplicated Code

                                                        Duplicated code can lead to software that is hard to understand and difficult to change. The Don't Repeat Yourself (DRY) principle states:

                                                        Every piece of knowledge must have a single, unambiguous, authoritative representation within a system.

                                                        When you violate DRY, bugs and maintenance problems are sure to follow. Duplicated code has a tendency to both continue to replicate and also to diverge (leaving bugs as two similar implementations differ in subtle ways).

                                                        Tuning

                                                        This issue has a mass of 77.

                                                        We set useful threshold defaults for the languages we support but you may want to adjust these settings based on your project guidelines.

                                                        The threshold configuration represents the minimum mass a code block must have to be analyzed for duplication. The lower the threshold, the more fine-grained the comparison.

                                                        If the engine is too easily reporting duplication, try raising the threshold. If you suspect that the engine isn't catching enough duplication, try lowering the threshold. The best setting tends to differ from language to language.

                                                        See codeclimate-duplication's documentation for more information about tuning the mass threshold in your .codeclimate.yml.

                                                        Refactorings

                                                        Further Reading

                                                        Similar blocks of code found in 2 locations. Consider refactoring.
                                                        Open

                                                            if @d_link['product'].nil?
                                                              xml_soap_data = <<~EOS
                                                                <?xml version="1.0" encoding="utf-8"?>
                                                                  <soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
                                                                    <soap:Body>
                                                        Severity: Major
                                                        Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb and 1 other location - About 2 hrs to fix
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 223..250

                                                        Duplicated Code

                                                        Duplicated code can lead to software that is hard to understand and difficult to change. The Don't Repeat Yourself (DRY) principle states:

                                                        Every piece of knowledge must have a single, unambiguous, authoritative representation within a system.

                                                        When you violate DRY, bugs and maintenance problems are sure to follow. Duplicated code has a tendency to both continue to replicate and also to diverge (leaving bugs as two similar implementations differ in subtle ways).

                                                        Tuning

                                                        This issue has a mass of 77.

                                                        We set useful threshold defaults for the languages we support but you may want to adjust these settings based on your project guidelines.

                                                        The threshold configuration represents the minimum mass a code block must have to be analyzed for duplication. The lower the threshold, the more fine-grained the comparison.

                                                        If the engine is too easily reporting duplication, try raising the threshold. If you suspect that the engine isn't catching enough duplication, try lowering the threshold. The best setting tends to differ from language to language.

                                                        See codeclimate-duplication's documentation for more information about tuning the mass threshold in your .codeclimate.yml.

                                                        Refactorings

                                                        Further Reading

                                                        Similar blocks of code found in 3 locations. Consider refactoring.
                                                        Open

                                                            when 'DIR-860L'
                                                              @d_link['arch'] = 'armle'
                                                              return true if Rex::Version.new(@d_link['firmware']) <= Rex::Version.new('1.10') && @d_link['hardware'][0] == 'A'
                                                        
                                                              return Rex::Version.new(@d_link['firmware']) <= Rex::Version.new('2.03') && @d_link['hardware'][0] == 'B'
                                                        Severity: Major
                                                        Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb and 2 other locations - About 1 hr to fix
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 286..291
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 311..316

                                                        Duplicated Code

                                                        Duplicated code can lead to software that is hard to understand and difficult to change. The Don't Repeat Yourself (DRY) principle states:

                                                        Every piece of knowledge must have a single, unambiguous, authoritative representation within a system.

                                                        When you violate DRY, bugs and maintenance problems are sure to follow. Duplicated code has a tendency to both continue to replicate and also to diverge (leaving bugs as two similar implementations differ in subtle ways).

                                                        Tuning

                                                        This issue has a mass of 49.

                                                        We set useful threshold defaults for the languages we support but you may want to adjust these settings based on your project guidelines.

                                                        The threshold configuration represents the minimum mass a code block must have to be analyzed for duplication. The lower the threshold, the more fine-grained the comparison.

                                                        If the engine is too easily reporting duplication, try raising the threshold. If you suspect that the engine isn't catching enough duplication, try lowering the threshold. The best setting tends to differ from language to language.

                                                        See codeclimate-duplication's documentation for more information about tuning the mass threshold in your .codeclimate.yml.

                                                        Refactorings

                                                        Further Reading

                                                        Similar blocks of code found in 3 locations. Consider refactoring.
                                                        Open

                                                            when 'DIR-822'
                                                              @d_link['arch'] = 'mipsbe'
                                                              return true if Rex::Version.new(@d_link['firmware']) <= Rex::Version.new('2.03') && @d_link['hardware'][0] == 'B'
                                                        
                                                              return Rex::Version.new(@d_link['firmware']) <= Rex::Version.new('3.12') && @d_link['hardware'][0] == 'C'
                                                        Severity: Major
                                                        Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb and 2 other locations - About 1 hr to fix
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 303..308
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 311..316

                                                        Duplicated Code

                                                        Duplicated code can lead to software that is hard to understand and difficult to change. The Don't Repeat Yourself (DRY) principle states:

                                                        Every piece of knowledge must have a single, unambiguous, authoritative representation within a system.

                                                        When you violate DRY, bugs and maintenance problems are sure to follow. Duplicated code has a tendency to both continue to replicate and also to diverge (leaving bugs as two similar implementations differ in subtle ways).

                                                        Tuning

                                                        This issue has a mass of 49.

                                                        We set useful threshold defaults for the languages we support but you may want to adjust these settings based on your project guidelines.

                                                        The threshold configuration represents the minimum mass a code block must have to be analyzed for duplication. The lower the threshold, the more fine-grained the comparison.

                                                        If the engine is too easily reporting duplication, try raising the threshold. If you suspect that the engine isn't catching enough duplication, try lowering the threshold. The best setting tends to differ from language to language.

                                                        See codeclimate-duplication's documentation for more information about tuning the mass threshold in your .codeclimate.yml.

                                                        Refactorings

                                                        Further Reading

                                                        Similar blocks of code found in 3 locations. Consider refactoring.
                                                        Open

                                                            when 'DIR-868L'
                                                              @d_link['arch'] = 'armle'
                                                              return true if Rex::Version.new(@d_link['firmware']) <= Rex::Version.new('1.12') && @d_link['hardware'][0] == 'A'
                                                        
                                                              return Rex::Version.new(@d_link['firmware']) <= Rex::Version.new('2.05') && @d_link['hardware'][0] == 'B'
                                                        Severity: Major
                                                        Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb and 2 other locations - About 1 hr to fix
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 286..291
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 303..308

                                                        Duplicated Code

                                                        Duplicated code can lead to software that is hard to understand and difficult to change. The Don't Repeat Yourself (DRY) principle states:

                                                        Every piece of knowledge must have a single, unambiguous, authoritative representation within a system.

                                                        When you violate DRY, bugs and maintenance problems are sure to follow. Duplicated code has a tendency to both continue to replicate and also to diverge (leaving bugs as two similar implementations differ in subtle ways).

                                                        Tuning

                                                        This issue has a mass of 49.

                                                        We set useful threshold defaults for the languages we support but you may want to adjust these settings based on your project guidelines.

                                                        The threshold configuration represents the minimum mass a code block must have to be analyzed for duplication. The lower the threshold, the more fine-grained the comparison.

                                                        If the engine is too easily reporting duplication, try raising the threshold. If you suspect that the engine isn't catching enough duplication, try lowering the threshold. The best setting tends to differ from language to language.

                                                        See codeclimate-duplication's documentation for more information about tuning the mass threshold in your .codeclimate.yml.

                                                        Refactorings

                                                        Further Reading

                                                        Similar blocks of code found in 5 locations. Consider refactoring.
                                                        Open

                                                            when 'DIR-816L'
                                                              @d_link['arch'] = 'mipsbe'
                                                              return Rex::Version.new(@d_link['firmware']) <= Rex::Version.new('2.06') && (@d_link['hardware'][0] == 'B' || @d_link['hardware'] == 'N/A')
                                                            when 'DIR-817LW'
                                                        Severity: Major
                                                        Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb and 4 other locations - About 30 mins to fix
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 269..272
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 278..281
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 294..297
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 297..300

                                                        Duplicated Code

                                                        Duplicated code can lead to software that is hard to understand and difficult to change. The Don't Repeat Yourself (DRY) principle states:

                                                        Every piece of knowledge must have a single, unambiguous, authoritative representation within a system.

                                                        When you violate DRY, bugs and maintenance problems are sure to follow. Duplicated code has a tendency to both continue to replicate and also to diverge (leaving bugs as two similar implementations differ in subtle ways).

                                                        Tuning

                                                        This issue has a mass of 33.

                                                        We set useful threshold defaults for the languages we support but you may want to adjust these settings based on your project guidelines.

                                                        The threshold configuration represents the minimum mass a code block must have to be analyzed for duplication. The lower the threshold, the more fine-grained the comparison.

                                                        If the engine is too easily reporting duplication, try raising the threshold. If you suspect that the engine isn't catching enough duplication, try lowering the threshold. The best setting tends to differ from language to language.

                                                        See codeclimate-duplication's documentation for more information about tuning the mass threshold in your .codeclimate.yml.

                                                        Refactorings

                                                        Further Reading

                                                        Similar blocks of code found in 5 locations. Consider refactoring.
                                                        Open

                                                            when 'DIR-845L'
                                                              @d_link['arch'] = 'mipsle'
                                                              return Rex::Version.new(@d_link['firmware']) <= Rex::Version.new('1.02') && (@d_link['hardware'][0] == 'A' || @d_link['hardware'] == 'N/A')
                                                            when 'DIR-850L'
                                                        Severity: Major
                                                        Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb and 4 other locations - About 30 mins to fix
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 269..272
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 275..278
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 278..281
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 297..300

                                                        Duplicated Code

                                                        Duplicated code can lead to software that is hard to understand and difficult to change. The Don't Repeat Yourself (DRY) principle states:

                                                        Every piece of knowledge must have a single, unambiguous, authoritative representation within a system.

                                                        When you violate DRY, bugs and maintenance problems are sure to follow. Duplicated code has a tendency to both continue to replicate and also to diverge (leaving bugs as two similar implementations differ in subtle ways).

                                                        Tuning

                                                        This issue has a mass of 33.

                                                        We set useful threshold defaults for the languages we support but you may want to adjust these settings based on your project guidelines.

                                                        The threshold configuration represents the minimum mass a code block must have to be analyzed for duplication. The lower the threshold, the more fine-grained the comparison.

                                                        If the engine is too easily reporting duplication, try raising the threshold. If you suspect that the engine isn't catching enough duplication, try lowering the threshold. The best setting tends to differ from language to language.

                                                        See codeclimate-duplication's documentation for more information about tuning the mass threshold in your .codeclimate.yml.

                                                        Refactorings

                                                        Further Reading

                                                        Similar blocks of code found in 5 locations. Consider refactoring.
                                                        Open

                                                            when 'DIR-817LW'
                                                              @d_link['arch'] = 'mipsbe'
                                                              return Rex::Version.new(@d_link['firmware']) <= Rex::Version.new('1.04') && (@d_link['hardware'][0] == 'A' || @d_link['hardware'] == 'N/A')
                                                            when 'DIR-818LW', 'DIR-818L'
                                                        Severity: Major
                                                        Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb and 4 other locations - About 30 mins to fix
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 269..272
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 275..278
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 294..297
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 297..300

                                                        Duplicated Code

                                                        Duplicated code can lead to software that is hard to understand and difficult to change. The Don't Repeat Yourself (DRY) principle states:

                                                        Every piece of knowledge must have a single, unambiguous, authoritative representation within a system.

                                                        When you violate DRY, bugs and maintenance problems are sure to follow. Duplicated code has a tendency to both continue to replicate and also to diverge (leaving bugs as two similar implementations differ in subtle ways).

                                                        Tuning

                                                        This issue has a mass of 33.

                                                        We set useful threshold defaults for the languages we support but you may want to adjust these settings based on your project guidelines.

                                                        The threshold configuration represents the minimum mass a code block must have to be analyzed for duplication. The lower the threshold, the more fine-grained the comparison.

                                                        If the engine is too easily reporting duplication, try raising the threshold. If you suspect that the engine isn't catching enough duplication, try lowering the threshold. The best setting tends to differ from language to language.

                                                        See codeclimate-duplication's documentation for more information about tuning the mass threshold in your .codeclimate.yml.

                                                        Refactorings

                                                        Further Reading

                                                        Similar blocks of code found in 5 locations. Consider refactoring.
                                                        Open

                                                            when 'DIR-645'
                                                              @d_link['arch'] = 'mipsle'
                                                              return Rex::Version.new(@d_link['firmware']) <= Rex::Version.new('1.05') && (@d_link['hardware'][0] == 'A' || @d_link['hardware'] == 'N/A')
                                                            when 'DIR-815'
                                                        Severity: Major
                                                        Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb and 4 other locations - About 30 mins to fix
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 275..278
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 278..281
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 294..297
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 297..300

                                                        Duplicated Code

                                                        Duplicated code can lead to software that is hard to understand and difficult to change. The Don't Repeat Yourself (DRY) principle states:

                                                        Every piece of knowledge must have a single, unambiguous, authoritative representation within a system.

                                                        When you violate DRY, bugs and maintenance problems are sure to follow. Duplicated code has a tendency to both continue to replicate and also to diverge (leaving bugs as two similar implementations differ in subtle ways).

                                                        Tuning

                                                        This issue has a mass of 33.

                                                        We set useful threshold defaults for the languages we support but you may want to adjust these settings based on your project guidelines.

                                                        The threshold configuration represents the minimum mass a code block must have to be analyzed for duplication. The lower the threshold, the more fine-grained the comparison.

                                                        If the engine is too easily reporting duplication, try raising the threshold. If you suspect that the engine isn't catching enough duplication, try lowering the threshold. The best setting tends to differ from language to language.

                                                        See codeclimate-duplication's documentation for more information about tuning the mass threshold in your .codeclimate.yml.

                                                        Refactorings

                                                        Further Reading

                                                        Similar blocks of code found in 5 locations. Consider refactoring.
                                                        Open

                                                            when 'DIR-850L'
                                                              @d_link['arch'] = 'mipsbe'
                                                              return Rex::Version.new(@d_link['firmware']) <= Rex::Version.new('1.12') && (@d_link['hardware'][0] == 'A' || @d_link['hardware'] == 'N/A')
                                                            when 'DIR-859'
                                                        Severity: Major
                                                        Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb and 4 other locations - About 30 mins to fix
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 269..272
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 275..278
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 278..281
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 294..297

                                                        Duplicated Code

                                                        Duplicated code can lead to software that is hard to understand and difficult to change. The Don't Repeat Yourself (DRY) principle states:

                                                        Every piece of knowledge must have a single, unambiguous, authoritative representation within a system.

                                                        When you violate DRY, bugs and maintenance problems are sure to follow. Duplicated code has a tendency to both continue to replicate and also to diverge (leaving bugs as two similar implementations differ in subtle ways).

                                                        Tuning

                                                        This issue has a mass of 33.

                                                        We set useful threshold defaults for the languages we support but you may want to adjust these settings based on your project guidelines.

                                                        The threshold configuration represents the minimum mass a code block must have to be analyzed for duplication. The lower the threshold, the more fine-grained the comparison.

                                                        If the engine is too easily reporting duplication, try raising the threshold. If you suspect that the engine isn't catching enough duplication, try lowering the threshold. The best setting tends to differ from language to language.

                                                        See codeclimate-duplication's documentation for more information about tuning the mass threshold in your .codeclimate.yml.

                                                        Refactorings

                                                        Further Reading

                                                        Identical blocks of code found in 2 locations. Consider refactoring.
                                                        Open

                                                          def exploit
                                                            print_status("Executing #{target.name} for #{datastore['PAYLOAD']}")
                                                            case target['Type']
                                                            when :unix_cmd
                                                              execute_command(payload.encoded)
                                                        Severity: Minor
                                                        Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb and 1 other location - About 30 mins to fix
                                                        modules/exploits/linux/http/totolink_unauth_rce_cve_2023_30013.rb on lines 129..137

                                                        Duplicated Code

                                                        Duplicated code can lead to software that is hard to understand and difficult to change. The Don't Repeat Yourself (DRY) principle states:

                                                        Every piece of knowledge must have a single, unambiguous, authoritative representation within a system.

                                                        When you violate DRY, bugs and maintenance problems are sure to follow. Duplicated code has a tendency to both continue to replicate and also to diverge (leaving bugs as two similar implementations differ in subtle ways).

                                                        Tuning

                                                        This issue has a mass of 32.

                                                        We set useful threshold defaults for the languages we support but you may want to adjust these settings based on your project guidelines.

                                                        The threshold configuration represents the minimum mass a code block must have to be analyzed for duplication. The lower the threshold, the more fine-grained the comparison.

                                                        If the engine is too easily reporting duplication, try raising the threshold. If you suspect that the engine isn't catching enough duplication, try lowering the threshold. The best setting tends to differ from language to language.

                                                        See codeclimate-duplication's documentation for more information about tuning the mass threshold in your .codeclimate.yml.

                                                        Refactorings

                                                        Further Reading

                                                        Similar blocks of code found in 22 locations. Consider refactoring.
                                                        Open

                                                                  ['CVE', '2023-33625'],
                                                                  ['CVE', '2020-15893'],
                                                                  ['CVE', '2019-20215'],
                                                                  ['URL', 'https://attackerkb.com/topics/uqicA23ecz/cve-2023-33625'],
                                                                  ['URL', 'https://github.com/zcutlip/exploit-poc/tree/master/dlink/dir-815-a1/upnp-command-injection'],
                                                        Severity: Major
                                                        Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb and 21 other locations - About 20 mins to fix
                                                        modules/auxiliary/dos/http/hashcollision_dos.rb on lines 36..44
                                                        modules/auxiliary/scanner/http/wp_woocommerce_payments_add_user.rb on lines 61..69
                                                        modules/exploits/android/browser/webview_addjavascriptinterface.rb on lines 58..66
                                                        modules/exploits/freebsd/local/rtld_execl_priv_esc.rb on lines 57..65
                                                        modules/exploits/linux/http/apache_superset_cookie_sig_rce.rb on lines 32..40
                                                        modules/exploits/linux/http/zimbra_cpio_cve_2022_41352.rb on lines 44..52
                                                        modules/exploits/linux/local/bpf_priv_esc.rb on lines 48..56
                                                        modules/exploits/linux/local/cve_2021_3490_ebpf_alu32_bounds_check_lpe.rb on lines 53..61
                                                        modules/exploits/linux/local/glibc_realpath_priv_esc.rb on lines 48..56
                                                        modules/exploits/linux/local/systemtap_modprobe_options_priv_esc.rb on lines 43..51
                                                        modules/exploits/linux/misc/cisco_ios_xe_rce.rb on lines 52..65
                                                        modules/exploits/linux/misc/lprng_format_string.rb on lines 26..34
                                                        modules/exploits/multi/browser/java_jre17_exec.rb on lines 43..51
                                                        modules/exploits/multi/http/git_client_command_exec.rb on lines 47..55
                                                        modules/exploits/multi/http/vtiger_soap_upload.rb on lines 33..41
                                                        modules/exploits/windows/browser/ms13_022_silverlight_script_object.rb on lines 40..48
                                                        modules/exploits/windows/browser/webex_ucf_newobject.rb on lines 40..48
                                                        modules/exploits/windows/fileformat/allplayer_m3u_bof.rb on lines 31..39
                                                        modules/exploits/windows/http/exchange_chainedserializationbinder_rce.rb on lines 45..54
                                                        modules/exploits/windows/http/exchange_ecp_dlp_policy.rb on lines 49..57
                                                        modules/exploits/windows/http/netgear_nms_rce.rb on lines 32..40

                                                        Duplicated Code

                                                        Duplicated code can lead to software that is hard to understand and difficult to change. The Don't Repeat Yourself (DRY) principle states:

                                                        Every piece of knowledge must have a single, unambiguous, authoritative representation within a system.

                                                        When you violate DRY, bugs and maintenance problems are sure to follow. Duplicated code has a tendency to both continue to replicate and also to diverge (leaving bugs as two similar implementations differ in subtle ways).

                                                        Tuning

                                                        This issue has a mass of 28.

                                                        We set useful threshold defaults for the languages we support but you may want to adjust these settings based on your project guidelines.

                                                        The threshold configuration represents the minimum mass a code block must have to be analyzed for duplication. The lower the threshold, the more fine-grained the comparison.

                                                        If the engine is too easily reporting duplication, try raising the threshold. If you suspect that the engine isn't catching enough duplication, try lowering the threshold. The best setting tends to differ from language to language.

                                                        See codeclimate-duplication's documentation for more information about tuning the mass threshold in your .codeclimate.yml.

                                                        Refactorings

                                                        Further Reading

                                                        Similar blocks of code found in 3 locations. Consider refactoring.
                                                        Open

                                                            when 'DIR-885L', 'DIR-885R'
                                                              @d_link['arch'] = 'armle'
                                                              return Rex::Version.new(@d_link['firmware']) <= Rex::Version.new('1.12') && @d_link['hardware'][0] == 'A'
                                                            when 'DIR-895L', 'DIR-895R'
                                                        Severity: Minor
                                                        Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb and 2 other locations - About 20 mins to fix
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 322..325
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 328..331

                                                        Duplicated Code

                                                        Duplicated code can lead to software that is hard to understand and difficult to change. The Don't Repeat Yourself (DRY) principle states:

                                                        Every piece of knowledge must have a single, unambiguous, authoritative representation within a system.

                                                        When you violate DRY, bugs and maintenance problems are sure to follow. Duplicated code has a tendency to both continue to replicate and also to diverge (leaving bugs as two similar implementations differ in subtle ways).

                                                        Tuning

                                                        This issue has a mass of 28.

                                                        We set useful threshold defaults for the languages we support but you may want to adjust these settings based on your project guidelines.

                                                        The threshold configuration represents the minimum mass a code block must have to be analyzed for duplication. The lower the threshold, the more fine-grained the comparison.

                                                        If the engine is too easily reporting duplication, try raising the threshold. If you suspect that the engine isn't catching enough duplication, try lowering the threshold. The best setting tends to differ from language to language.

                                                        See codeclimate-duplication's documentation for more information about tuning the mass threshold in your .codeclimate.yml.

                                                        Refactorings

                                                        Further Reading

                                                        Similar blocks of code found in 3 locations. Consider refactoring.
                                                        Open

                                                            when 'DIR-895L', 'DIR-895R'
                                                              @d_link['arch'] = 'armle'
                                                              return Rex::Version.new(@d_link['firmware']) <= Rex::Version.new('1.12') && @d_link['hardware'][0] == 'A'
                                                            end
                                                        Severity: Minor
                                                        Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb and 2 other locations - About 20 mins to fix
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 322..325
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 325..328

                                                        Duplicated Code

                                                        Duplicated code can lead to software that is hard to understand and difficult to change. The Don't Repeat Yourself (DRY) principle states:

                                                        Every piece of knowledge must have a single, unambiguous, authoritative representation within a system.

                                                        When you violate DRY, bugs and maintenance problems are sure to follow. Duplicated code has a tendency to both continue to replicate and also to diverge (leaving bugs as two similar implementations differ in subtle ways).

                                                        Tuning

                                                        This issue has a mass of 28.

                                                        We set useful threshold defaults for the languages we support but you may want to adjust these settings based on your project guidelines.

                                                        The threshold configuration represents the minimum mass a code block must have to be analyzed for duplication. The lower the threshold, the more fine-grained the comparison.

                                                        If the engine is too easily reporting duplication, try raising the threshold. If you suspect that the engine isn't catching enough duplication, try lowering the threshold. The best setting tends to differ from language to language.

                                                        See codeclimate-duplication's documentation for more information about tuning the mass threshold in your .codeclimate.yml.

                                                        Refactorings

                                                        Further Reading

                                                        Similar blocks of code found in 3 locations. Consider refactoring.
                                                        Open

                                                            when 'DIR-890L', 'DIR-890R'
                                                              @d_link['arch'] = 'armle'
                                                              return Rex::Version.new(@d_link['firmware']) <= Rex::Version.new('1.11') && @d_link['hardware'][0] == 'A'
                                                            when 'DIR-885L', 'DIR-885R'
                                                        Severity: Minor
                                                        Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb and 2 other locations - About 20 mins to fix
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 325..328
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 328..331

                                                        Duplicated Code

                                                        Duplicated code can lead to software that is hard to understand and difficult to change. The Don't Repeat Yourself (DRY) principle states:

                                                        Every piece of knowledge must have a single, unambiguous, authoritative representation within a system.

                                                        When you violate DRY, bugs and maintenance problems are sure to follow. Duplicated code has a tendency to both continue to replicate and also to diverge (leaving bugs as two similar implementations differ in subtle ways).

                                                        Tuning

                                                        This issue has a mass of 28.

                                                        We set useful threshold defaults for the languages we support but you may want to adjust these settings based on your project guidelines.

                                                        The threshold configuration represents the minimum mass a code block must have to be analyzed for duplication. The lower the threshold, the more fine-grained the comparison.

                                                        If the engine is too easily reporting duplication, try raising the threshold. If you suspect that the engine isn't catching enough duplication, try lowering the threshold. The best setting tends to differ from language to language.

                                                        See codeclimate-duplication's documentation for more information about tuning the mass threshold in your .codeclimate.yml.

                                                        Refactorings

                                                        Further Reading

                                                        Similar blocks of code found in 2 locations. Consider refactoring.
                                                        Open

                                                            return CheckCode::Safe("Product info: #{@d_link['product']}|#{@d_link['firmware']}|#{@d_link['hardware']}|#{@d_link['arch']}") unless @d_link['arch'].nil?
                                                        Severity: Minor
                                                        Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb and 1 other location - About 20 mins to fix
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 365..365

                                                        Duplicated Code

                                                        Duplicated code can lead to software that is hard to understand and difficult to change. The Don't Repeat Yourself (DRY) principle states:

                                                        Every piece of knowledge must have a single, unambiguous, authoritative representation within a system.

                                                        When you violate DRY, bugs and maintenance problems are sure to follow. Duplicated code has a tendency to both continue to replicate and also to diverge (leaving bugs as two similar implementations differ in subtle ways).

                                                        Tuning

                                                        This issue has a mass of 28.

                                                        We set useful threshold defaults for the languages we support but you may want to adjust these settings based on your project guidelines.

                                                        The threshold configuration represents the minimum mass a code block must have to be analyzed for duplication. The lower the threshold, the more fine-grained the comparison.

                                                        If the engine is too easily reporting duplication, try raising the threshold. If you suspect that the engine isn't catching enough duplication, try lowering the threshold. The best setting tends to differ from language to language.

                                                        See codeclimate-duplication's documentation for more information about tuning the mass threshold in your .codeclimate.yml.

                                                        Refactorings

                                                        Further Reading

                                                        Similar blocks of code found in 2 locations. Consider refactoring.
                                                        Open

                                                            return CheckCode::Detected("Product info: #{@d_link['product']}|#{@d_link['firmware']}|#{@d_link['hardware']}|#{@d_link['arch']}") unless @d_link['product'].nil?
                                                        Severity: Minor
                                                        Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb and 1 other location - About 20 mins to fix
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 363..363

                                                        Duplicated Code

                                                        Duplicated code can lead to software that is hard to understand and difficult to change. The Don't Repeat Yourself (DRY) principle states:

                                                        Every piece of knowledge must have a single, unambiguous, authoritative representation within a system.

                                                        When you violate DRY, bugs and maintenance problems are sure to follow. Duplicated code has a tendency to both continue to replicate and also to diverge (leaving bugs as two similar implementations differ in subtle ways).

                                                        Tuning

                                                        This issue has a mass of 28.

                                                        We set useful threshold defaults for the languages we support but you may want to adjust these settings based on your project guidelines.

                                                        The threshold configuration represents the minimum mass a code block must have to be analyzed for duplication. The lower the threshold, the more fine-grained the comparison.

                                                        If the engine is too easily reporting duplication, try raising the threshold. If you suspect that the engine isn't catching enough duplication, try lowering the threshold. The best setting tends to differ from language to language.

                                                        See codeclimate-duplication's documentation for more information about tuning the mass threshold in your .codeclimate.yml.

                                                        Refactorings

                                                        Further Reading

                                                        Similar blocks of code found in 7 locations. Consider refactoring.
                                                        Open

                                                            when 'DIR-600'
                                                              @d_link['arch'] = 'mipsle'
                                                              return Rex::Version.new(@d_link['firmware']) <= Rex::Version.new('2.18') && @d_link['hardware'][0] == 'B'
                                                            when 'DIR-645'
                                                        Severity: Major
                                                        Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb and 6 other locations - About 20 mins to fix
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 255..258
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 291..294
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 300..303
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 308..311
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 316..319
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 319..322

                                                        Duplicated Code

                                                        Duplicated code can lead to software that is hard to understand and difficult to change. The Don't Repeat Yourself (DRY) principle states:

                                                        Every piece of knowledge must have a single, unambiguous, authoritative representation within a system.

                                                        When you violate DRY, bugs and maintenance problems are sure to follow. Duplicated code has a tendency to both continue to replicate and also to diverge (leaving bugs as two similar implementations differ in subtle ways).

                                                        Tuning

                                                        This issue has a mass of 27.

                                                        We set useful threshold defaults for the languages we support but you may want to adjust these settings based on your project guidelines.

                                                        The threshold configuration represents the minimum mass a code block must have to be analyzed for duplication. The lower the threshold, the more fine-grained the comparison.

                                                        If the engine is too easily reporting duplication, try raising the threshold. If you suspect that the engine isn't catching enough duplication, try lowering the threshold. The best setting tends to differ from language to language.

                                                        See codeclimate-duplication's documentation for more information about tuning the mass threshold in your .codeclimate.yml.

                                                        Refactorings

                                                        Further Reading

                                                        Similar blocks of code found in 7 locations. Consider refactoring.
                                                        Open

                                                            when 'GO-RT-AC750'
                                                              @d_link['arch'] = 'mipsbe'
                                                              return Rex::Version.new(@d_link['firmware']) <= Rex::Version.new('1.01') && @d_link['hardware'][0] == 'A'
                                                            when 'DIR-300'
                                                        Severity: Major
                                                        Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb and 6 other locations - About 20 mins to fix
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 266..269
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 291..294
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 300..303
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 308..311
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 316..319
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 319..322

                                                        Duplicated Code

                                                        Duplicated code can lead to software that is hard to understand and difficult to change. The Don't Repeat Yourself (DRY) principle states:

                                                        Every piece of knowledge must have a single, unambiguous, authoritative representation within a system.

                                                        When you violate DRY, bugs and maintenance problems are sure to follow. Duplicated code has a tendency to both continue to replicate and also to diverge (leaving bugs as two similar implementations differ in subtle ways).

                                                        Tuning

                                                        This issue has a mass of 27.

                                                        We set useful threshold defaults for the languages we support but you may want to adjust these settings based on your project guidelines.

                                                        The threshold configuration represents the minimum mass a code block must have to be analyzed for duplication. The lower the threshold, the more fine-grained the comparison.

                                                        If the engine is too easily reporting duplication, try raising the threshold. If you suspect that the engine isn't catching enough duplication, try lowering the threshold. The best setting tends to differ from language to language.

                                                        See codeclimate-duplication's documentation for more information about tuning the mass threshold in your .codeclimate.yml.

                                                        Refactorings

                                                        Further Reading

                                                        Similar blocks of code found in 7 locations. Consider refactoring.
                                                        Open

                                                            when 'DIR-859'
                                                              @d_link['arch'] = 'mipsbe'
                                                              return Rex::Version.new(@d_link['firmware']) <= Rex::Version.new('1.06') && @d_link['hardware'][0] == 'A'
                                                            when 'DIR-860L'
                                                        Severity: Major
                                                        Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb and 6 other locations - About 20 mins to fix
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 255..258
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 266..269
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 291..294
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 308..311
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 316..319
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 319..322

                                                        Duplicated Code

                                                        Duplicated code can lead to software that is hard to understand and difficult to change. The Don't Repeat Yourself (DRY) principle states:

                                                        Every piece of knowledge must have a single, unambiguous, authoritative representation within a system.

                                                        When you violate DRY, bugs and maintenance problems are sure to follow. Duplicated code has a tendency to both continue to replicate and also to diverge (leaving bugs as two similar implementations differ in subtle ways).

                                                        Tuning

                                                        This issue has a mass of 27.

                                                        We set useful threshold defaults for the languages we support but you may want to adjust these settings based on your project guidelines.

                                                        The threshold configuration represents the minimum mass a code block must have to be analyzed for duplication. The lower the threshold, the more fine-grained the comparison.

                                                        If the engine is too easily reporting duplication, try raising the threshold. If you suspect that the engine isn't catching enough duplication, try lowering the threshold. The best setting tends to differ from language to language.

                                                        See codeclimate-duplication's documentation for more information about tuning the mass threshold in your .codeclimate.yml.

                                                        Refactorings

                                                        Further Reading

                                                        Similar blocks of code found in 7 locations. Consider refactoring.
                                                        Open

                                                            when 'DIR-823'
                                                              @d_link['arch'] = 'mipsbe'
                                                              return Rex::Version.new(@d_link['firmware']) <= Rex::Version.new('1.00') && @d_link['hardware'][0] == 'A'
                                                            when 'DIR-845L'
                                                        Severity: Major
                                                        Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb and 6 other locations - About 20 mins to fix
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 255..258
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 266..269
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 300..303
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 308..311
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 316..319
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 319..322

                                                        Duplicated Code

                                                        Duplicated code can lead to software that is hard to understand and difficult to change. The Don't Repeat Yourself (DRY) principle states:

                                                        Every piece of knowledge must have a single, unambiguous, authoritative representation within a system.

                                                        When you violate DRY, bugs and maintenance problems are sure to follow. Duplicated code has a tendency to both continue to replicate and also to diverge (leaving bugs as two similar implementations differ in subtle ways).

                                                        Tuning

                                                        This issue has a mass of 27.

                                                        We set useful threshold defaults for the languages we support but you may want to adjust these settings based on your project guidelines.

                                                        The threshold configuration represents the minimum mass a code block must have to be analyzed for duplication. The lower the threshold, the more fine-grained the comparison.

                                                        If the engine is too easily reporting duplication, try raising the threshold. If you suspect that the engine isn't catching enough duplication, try lowering the threshold. The best setting tends to differ from language to language.

                                                        See codeclimate-duplication's documentation for more information about tuning the mass threshold in your .codeclimate.yml.

                                                        Refactorings

                                                        Further Reading

                                                        Similar blocks of code found in 7 locations. Consider refactoring.
                                                        Open

                                                            when 'DIR-880L'
                                                              @d_link['arch'] = 'armle'
                                                              return Rex::Version.new(@d_link['firmware']) <= Rex::Version.new('1.08') && @d_link['hardware'][0] == 'A'
                                                            when 'DIR-890L', 'DIR-890R'
                                                        Severity: Major
                                                        Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb and 6 other locations - About 20 mins to fix
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 255..258
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 266..269
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 291..294
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 300..303
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 308..311
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 316..319

                                                        Duplicated Code

                                                        Duplicated code can lead to software that is hard to understand and difficult to change. The Don't Repeat Yourself (DRY) principle states:

                                                        Every piece of knowledge must have a single, unambiguous, authoritative representation within a system.

                                                        When you violate DRY, bugs and maintenance problems are sure to follow. Duplicated code has a tendency to both continue to replicate and also to diverge (leaving bugs as two similar implementations differ in subtle ways).

                                                        Tuning

                                                        This issue has a mass of 27.

                                                        We set useful threshold defaults for the languages we support but you may want to adjust these settings based on your project guidelines.

                                                        The threshold configuration represents the minimum mass a code block must have to be analyzed for duplication. The lower the threshold, the more fine-grained the comparison.

                                                        If the engine is too easily reporting duplication, try raising the threshold. If you suspect that the engine isn't catching enough duplication, try lowering the threshold. The best setting tends to differ from language to language.

                                                        See codeclimate-duplication's documentation for more information about tuning the mass threshold in your .codeclimate.yml.

                                                        Refactorings

                                                        Further Reading

                                                        Similar blocks of code found in 7 locations. Consider refactoring.
                                                        Open

                                                            when 'DIR-865L'
                                                              @d_link['arch'] = 'mipsle'
                                                              return Rex::Version.new(@d_link['firmware']) <= Rex::Version.new('1.07') && @d_link['hardware'][0] == 'A'
                                                            when 'DIR-868L'
                                                        Severity: Major
                                                        Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb and 6 other locations - About 20 mins to fix
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 255..258
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 266..269
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 291..294
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 300..303
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 316..319
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 319..322

                                                        Duplicated Code

                                                        Duplicated code can lead to software that is hard to understand and difficult to change. The Don't Repeat Yourself (DRY) principle states:

                                                        Every piece of knowledge must have a single, unambiguous, authoritative representation within a system.

                                                        When you violate DRY, bugs and maintenance problems are sure to follow. Duplicated code has a tendency to both continue to replicate and also to diverge (leaving bugs as two similar implementations differ in subtle ways).

                                                        Tuning

                                                        This issue has a mass of 27.

                                                        We set useful threshold defaults for the languages we support but you may want to adjust these settings based on your project guidelines.

                                                        The threshold configuration represents the minimum mass a code block must have to be analyzed for duplication. The lower the threshold, the more fine-grained the comparison.

                                                        If the engine is too easily reporting duplication, try raising the threshold. If you suspect that the engine isn't catching enough duplication, try lowering the threshold. The best setting tends to differ from language to language.

                                                        See codeclimate-duplication's documentation for more information about tuning the mass threshold in your .codeclimate.yml.

                                                        Refactorings

                                                        Further Reading

                                                        Similar blocks of code found in 7 locations. Consider refactoring.
                                                        Open

                                                            when 'DIR-869'
                                                              @d_link['arch'] = 'mipsbe'
                                                              return Rex::Version.new(@d_link['firmware']) <= Rex::Version.new('1.03') && @d_link['hardware'][0] == 'A'
                                                            when 'DIR-880L'
                                                        Severity: Major
                                                        Found in modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb and 6 other locations - About 20 mins to fix
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 255..258
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 266..269
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 291..294
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 300..303
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 308..311
                                                        modules/exploits/linux/upnp/dlink_upnp_msearch_exec.rb on lines 319..322

                                                        Duplicated Code

                                                        Duplicated code can lead to software that is hard to understand and difficult to change. The Don't Repeat Yourself (DRY) principle states:

                                                        Every piece of knowledge must have a single, unambiguous, authoritative representation within a system.

                                                        When you violate DRY, bugs and maintenance problems are sure to follow. Duplicated code has a tendency to both continue to replicate and also to diverge (leaving bugs as two similar implementations differ in subtle ways).

                                                        Tuning

                                                        This issue has a mass of 27.

                                                        We set useful threshold defaults for the languages we support but you may want to adjust these settings based on your project guidelines.

                                                        The threshold configuration represents the minimum mass a code block must have to be analyzed for duplication. The lower the threshold, the more fine-grained the comparison.

                                                        If the engine is too easily reporting duplication, try raising the threshold. If you suspect that the engine isn't catching enough duplication, try lowering the threshold. The best setting tends to differ from language to language.

                                                        See codeclimate-duplication's documentation for more information about tuning the mass threshold in your .codeclimate.yml.

                                                        Refactorings

                                                        Further Reading

                                                        There are no issues that match your filters.

                                                        Category
                                                        Status