rapid7/metasploit-framework

View on GitHub
modules/exploits/multi/http/mma_backdoor_upload.rb

Summary

Maintainability
A
2 hrs
Test Coverage

Method initialize has 34 lines of code (exceeds 25 allowed). Consider refactoring.
Open

  def initialize(info={})
    super(update_info(info,
      'Name'           => 'Th3 MMA mma.php Backdoor Arbitrary File Upload',
      'Description'    => %q{
        This module exploits Th3 MMA mma.php Backdoor which allows an arbitrary file upload that
Severity: Minor
Found in modules/exploits/multi/http/mma_backdoor_upload.rb - About 1 hr to fix

    Method exploit has 27 lines of code (exceeds 25 allowed). Consider refactoring.
    Open

      def exploit
        uri = normalize_uri(target_uri.path)
        payload_name = "#{rand_text_alpha(5)}.php"
    
        print_status("Trying to upload #{payload_name} to mma.php Backdoor")
    Severity: Minor
    Found in modules/exploits/multi/http/mma_backdoor_upload.rb - About 1 hr to fix

      There are no issues that match your filters.

      Category
      Status