Method initialize has 78 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def initialize(info = {})
    super(
      update_info(
        info,
        'Name' => 'AjaxPro Deserialization Remote Code Execution',

Method check has a Cognitive Complexity of 15 (exceeds 5 allowed). Consider refactoring.

Open

  def check
    res = send_request_cgi(
      'method' => 'GET',
      'uri' => normalize_uri(target_uri.path, 'core.ashx'),
      'keep_cookies' => true

• Read up
  Read up

Method check has 34 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def check
    res = send_request_cgi(
      'method' => 'GET',
      'uri' => normalize_uri(target_uri.path, 'core.ashx'),
      'keep_cookies' => true

Method execute_command has 30 lines of code (exceeds 25 allowed). Consider refactoring.

Open

  def execute_command(cmd, _opts = {})
    vprint_status("Executing command: #{cmd}")
    json_post_data = JSON.generate(
      {
        "#{datastore['Parameter']}": {

Avoid too many return statements within this method.

Open

      return CheckCode::Safe("AjaxPro version #{@ajax_pro[:version]} is not vulnerable.")

Avoid too many return statements within this method.

Open

      return CheckCode::Appears('Failed to check if the target method exists.')

Avoid too many return statements within this method.

Open

      return CheckCode::Appears("But method '#{datastore['Method']}' with parameter '#{datastore['Parameter']}' was not found in namespace '#{datastore['Namespace']}'")

Similar blocks of code found in 17 locations. Consider refactoring.

Open

    register_options([
      OptString.new('TARGETURI', [true, 'Base path to AjaxPro Handler', '/ajaxpro/']),
      OptString.new('Namespace', [true, 'Namespace of vulnerable method', 'AjaxPro.Services.ICartService,AjaxPro.2']),
      OptString.new('Method', [true, 'Name of vulnerable method', 'AddItem']),
      OptString.new('Parameter', [true, 'Name of vulnerable parameter', 'item'])

• Read up
  Read up