Sign upLogin

rastating/wordpress-exploit-framework

View on GitHub
Star

Showing 121 of 338 total issues

Method run has 27 lines of code (exceeds 25 allowed). Consider refactoring.
Open

  def run
    return false unless super

    @credentials = [{
      username: 'Username', password: 'Password Hash', email: 'E-mail'
Severity: Minor
Found in lib/wpxf/modules/auxiliary/hash_dump/ultimate_csv_importer_user_extract.rb - About 1 hr to fix

    Method initialize has 27 lines of code (exceeds 25 allowed). Consider refactoring.
    Open

      def initialize
    super

    update_info(
      name: 'Super Socializer <= 7.10.6 Authentication Bypass',
    Severity: Minor
    Found in lib/wpxf/modules/exploit/shell/super_socializer_shell_upload.rb - About 1 hr to fix

      Method initialize has 27 lines of code (exceeds 25 allowed). Consider refactoring.
      Open

        def initialize
    super

    update_info(
      name: 'WordPress 4.2-4.7.2 - CSRF DoS',
      Severity: Minor
      Found in lib/wpxf/modules/auxiliary/dos/wp_v4.7.2_csrf_dos.rb - About 1 hr to fix

        Method initialize has 26 lines of code (exceeds 25 allowed). Consider refactoring.
        Open

          def initialize
    super

    update_info(
      name: 'EasyCart Plugin Privilege Escalation',
        Severity: Minor
        Found in lib/wpxf/modules/auxiliary/priv_esc/easy_cart_privilege_escalation.rb - About 1 hr to fix

          Method initialize has 26 lines of code (exceeds 25 allowed). Consider refactoring.
          Open

            def initialize
    super

    update_info(
      name: 'Download Manager Directory Listing Disclosure',
          Severity: Minor
          Found in lib/wpxf/modules/auxiliary/info/download_manager_directory_listing_disclosure.rb - About 1 hr to fix

            Method initialize has 26 lines of code (exceeds 25 allowed). Consider refactoring.
            Open

              def initialize
    super

    update_info(
      name: 'WPLMS Theme Privilege Escalation',
            Severity: Minor
            Found in lib/wpxf/modules/auxiliary/priv_esc/wplms_privilege_escalation.rb - About 1 hr to fix

              Method initialize has 26 lines of code (exceeds 25 allowed). Consider refactoring.
              Open

                def initialize
    super

    update_info(
      name: 'Platform Theme Privilege Escalation',
              Severity: Minor
              Found in lib/wpxf/modules/auxiliary/priv_esc/platform_privilege_escalation.rb - About 1 hr to fix

                Method initialize has 26 lines of code (exceeds 25 allowed). Consider refactoring.
                Open

                  def initialize
    super

    update_info(
      name: 'Ghost Plugin <= 0.5.5 - Unrestricted Export Download',
                Severity: Minor
                Found in lib/wpxf/modules/auxiliary/file_download/ghost_unrestricted_export_download.rb - About 1 hr to fix

                  Method initialize has 26 lines of code (exceeds 25 allowed). Consider refactoring.
                  Open

                    def initialize
    super

    update_info(
      name: 'All-in-One Migration Export',
                  Severity: Minor
                  Found in lib/wpxf/modules/auxiliary/file_download/all_in_one_migration_export.rb - About 1 hr to fix

                    Method initialize has 26 lines of code (exceeds 25 allowed). Consider refactoring.
                    Open

                      def initialize
    super

    update_info(
      name: 'Simple Download Monitor File Download',
                    Severity: Minor
                    Found in lib/wpxf/modules/auxiliary/file_download/simple_download_monitor_file_download.rb - About 1 hr to fix

                      Method initialize has 26 lines of code (exceeds 25 allowed). Consider refactoring.
                      Open

                        def initialize
    super

    update_info(
      name: 'DW Question & Answer <= 1.4.2.2 Stored XSS Shell Upload',
                      Severity: Minor
                      Found in lib/wpxf/modules/exploit/xss/stored/dw_question_answer_stored_xss_shell_upload.rb - About 1 hr to fix

                        Method run has a Cognitive Complexity of 9 (exceeds 5 allowed). Consider refactoring.
                        Open

                          def run
    return false unless super

    emit_info 'Preparing payload...'
    payload_name = "#{Utility::Text.rand_alpha(rand(5..10))}.php"
                        Severity: Minor
                        Found in lib/wpxf/modules/exploit/shell/n_media_website_contact_form_shell_upload.rb - About 55 mins to fix

                        Cognitive Complexity

                        Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

                        A method's cognitive complexity is based on a few simple rules:

                        • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
                        • Code is considered more complex for each "break in the linear flow of the code"
                        • Code is considered more complex when "flow breaking structures are nested"

                        Further reading

                        Method _dump_and_parse_hashes has a Cognitive Complexity of 9 (exceeds 5 allowed). Consider refactoring.
                        Open

                          def _dump_and_parse_hashes
    unless reveals_one_row_per_request
      res = _execute_hashdump_request
      return _parse_hashdump_body(res.body)
    end
                        Severity: Minor
                        Found in lib/wpxf/wordpress/hash_dump.rb - About 55 mins to fix

                        Cognitive Complexity

                        Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

                        A method's cognitive complexity is based on a few simple rules:

                        • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
                        • Code is considered more complex for each "break in the linear flow of the code"
                        • Code is considered more complex when "flow breaking structures are nested"

                        Further reading

                        Method run has a Cognitive Complexity of 8 (exceeds 5 allowed). Consider refactoring.
                        Open

                          def run
    _validate_implementation

    return false unless super
    return false unless before_download
                        Severity: Minor
                        Found in lib/wpxf/wordpress/file_download.rb - About 45 mins to fix

                        Cognitive Complexity

                        Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

                        A method's cognitive complexity is based on a few simple rules:

                        • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
                        • Code is considered more complex for each "break in the linear flow of the code"
                        • Code is considered more complex when "flow breaking structures are nested"

                        Further reading

                        Function sys_get_temp_dir has a Cognitive Complexity of 8 (exceeds 5 allowed). Consider refactoring.
                        Open

                            function sys_get_temp_dir() {
      if (!empty(getenv('TMP'))) { return realpath(getenv('TMP')); }
      if (!empty(getenv('TMPDIR'))) { return realpath(getenv('TMPDIR')); }
      if (!empty(getenv('TEMP'))) { return realpath(getenv('TEMP')); }
                        Severity: Minor
                        Found in data/php/download_exec.php - About 45 mins to fix

                        Cognitive Complexity

                        Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

                        A method's cognitive complexity is based on a few simple rules:

                        • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
                        • Code is considered more complex for each "break in the linear flow of the code"
                        • Code is considered more complex when "flow breaking structures are nested"

                        Further reading

                        Method run has a Cognitive Complexity of 8 (exceeds 5 allowed). Consider refactoring.
                        Open

                          def run
    super
    return false unless check_wordpress_and_online

    emit_info 'Preparing payload...'
                        Severity: Minor
                        Found in lib/wpxf/modules/exploit/shell/revslider_shell_upload.rb - About 45 mins to fix

                        Cognitive Complexity

                        Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

                        A method's cognitive complexity is based on a few simple rules:

                        • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
                        • Code is considered more complex for each "break in the linear flow of the code"
                        • Code is considered more complex when "flow breaking structures are nested"

                        Further reading

                        Method valid? has a Cognitive Complexity of 8 (exceeds 5 allowed). Consider refactoring.
                        Open

                            def valid?(value)
      return true if value.nil? && !required?
      return false unless valid_integer?(value)
      return false unless meets_min_requirement?(value)
      return false unless meets_max_requirement?(value)
                        Severity: Minor
                        Found in lib/wpxf/core/opts/integer_option.rb - About 45 mins to fix

                        Cognitive Complexity

                        Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

                        A method's cognitive complexity is based on a few simple rules:

                        • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
                        • Code is considered more complex for each "break in the linear flow of the code"
                        • Code is considered more complex when "flow breaking structures are nested"

                        Further reading

                        Method run has a Cognitive Complexity of 8 (exceeds 5 allowed). Consider refactoring.
                        Open

                          def run
    return false unless super

    emit_info 'Preparing payload...'
    payload_name = "#{Utility::Text.rand_alpha(rand(5..10))}.php"
                        Severity: Minor
                        Found in lib/wpxf/modules/exploit/shell/infusionsoft_shell_upload.rb - About 45 mins to fix

                        Cognitive Complexity

                        Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

                        A method's cognitive complexity is based on a few simple rules:

                        • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
                        • Code is considered more complex for each "break in the linear flow of the code"
                        • Code is considered more complex when "flow breaking structures are nested"

                        Further reading

                        Method run has a Cognitive Complexity of 8 (exceeds 5 allowed). Consider refactoring.
                        Open

                          def run
    return false unless super

    @credentials = [{
      username: 'Username', password: 'Password Hash', email: 'E-mail'
                        Severity: Minor
                        Found in lib/wpxf/modules/auxiliary/hash_dump/ultimate_csv_importer_user_extract.rb - About 45 mins to fix

                        Cognitive Complexity

                        Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

                        A method's cognitive complexity is based on a few simple rules:

                        • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
                        • Code is considered more complex for each "break in the linear flow of the code"
                        • Code is considered more complex when "flow breaking structures are nested"

                        Further reading

                        Method run has a Cognitive Complexity of 8 (exceeds 5 allowed). Consider refactoring.
                        Open

                          def run
    return false unless super

    emit_info 'Validating SQL...'
    unless valid_query?
                        Severity: Minor
                        Found in lib/wpxf/modules/auxiliary/misc/simple_ads_manager_sql_injection.rb - About 45 mins to fix

                        Cognitive Complexity

                        Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

                        A method's cognitive complexity is based on a few simple rules:

                        • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
                        • Code is considered more complex for each "break in the linear flow of the code"
                        • Code is considered more complex when "flow breaking structures are nested"

                        Further reading

                        Severity
                        Category
                        Status
                        Source
                        Language