rapid7/metasploit-framework

File adobe_u3d_meshdecl.rb has 318 lines of code (exceeds 250 allowed). Consider refactoring.

Open

require 'zlib'

class MetasploitModule < Msf::Exploit::Remote
  Rank = GoodRanking

Method exploit has 81 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def exploit
    # Encode the shellcode.
    shellcode = Rex::Text.to_unescape(payload.encoded, Rex::Arch.endian(target.arch))

    # Make some nops

Method make_pdf has 70 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def make_pdf(u3d_stream, js_doc, js_pg1)

    xref = []
    eol = "\x0a"
    obj_end = "" << eol << "endobj" << eol

Method make_u3d_stream has 61 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def make_u3d_stream(size, meshname)

    # build the U3D header
    hdr_data = [1,0].pack('n*') # version info
    hdr_data << [0,0x24,31337,0,0x6a].pack('VVVVV')

Method initialize has 48 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def initialize(info = {})
    super(update_info(info,
      'Name'           => 'Adobe U3D CLODProgressiveMeshDeclaration Array Overrun',
      'Description'    => %q{
          This module exploits an array overflow in Adobe Reader and Adobe Acrobat.

Identical blocks of code found in 20 locations. Consider refactoring.

Open

  def n_obfu(str)

    result = ""
    str.scan(/./u) do |c|
      if rand(2) == 0 and c.upcase >= 'A' and c.upcase <= 'Z'

• Read up
  Read up

Identical blocks of code found in 22 locations. Consider refactoring.

Open

  def ascii_hex_whitespace_encode(str)
    result = ""
    whitespace = ""
    str.each_byte do |b|
      result << whitespace << "%02x" % b

• Read up
  Read up

Identical blocks of code found in 2 locations. Consider refactoring.

Open

  def u3d_pad(str, char="\x00")
    ret = ""
    if (str.length % 4) > 0
      ret << char * (4 - (str.length % 4))
    end

• Read up
  Read up