rapid7/metasploit-framework

Method make_pdf has 135 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def make_pdf(ttf, js)

    #swf_name = rand_text_alpha(8 + rand(8)) + ".swf"

    xref = []

File adobe_cooltype_sing.rb has 368 lines of code (exceeds 250 allowed). Consider refactoring.

Open

require 'zlib'

class MetasploitModule < Msf::Exploit::Remote
  Rank = GreatRanking # aslr+dep bypass, js heap spray, rop, stack bof

Method make_js has 109 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def make_js(encoded_payload)

    # The following executes a ret2lib using icucnv36.dll
    # The effect is to bypass DEP and execute the shellcode in an indirect way
    stack_data = [

Method initialize has 44 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def initialize(info = {})
    super(update_info(info,
      'Name'           => 'Adobe CoolType SING Table "uniqueName" Stack Buffer Overflow',
      'Description'    => %q{
          This module exploits a vulnerability in the Smart INdependent Glyplets (SING) table

Method make_ttf has 27 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def make_ttf
    ttf_data = ""

    # load the static ttf file

Identical blocks of code found in 2 locations. Consider refactoring.

Open

  def make_pdf(ttf, js)

    #swf_name = rand_text_alpha(8 + rand(8)) + ".swf"

    xref = []

• Read up
  Read up

Identical blocks of code found in 2 locations. Consider refactoring.

Open

  def make_js(encoded_payload)

    # The following executes a ret2lib using icucnv36.dll
    # The effect is to bypass DEP and execute the shellcode in an indirect way
    stack_data = [

• Read up
  Read up

Identical blocks of code found in 20 locations. Consider refactoring.

Open

  def n_obfu(str)
    #return str
    result = ""
    str.scan(/./u) do |c|
      if rand(2) == 0 and c.upcase >= 'A' and c.upcase <= 'Z'

• Read up
  Read up

Identical blocks of code found in 22 locations. Consider refactoring.

Open

  def ascii_hex_whitespace_encode(str)
    result = ""
    whitespace = ""
    str.each_byte do |b|
      result << whitespace << "%02x" % b

• Read up
  Read up