Sign upLogin

rastating/wordpress-exploit-framework

View on GitHub
Star

Showing 121 of 338 total issues

Method initialize has 27 lines of code (exceeds 25 allowed). Consider refactoring.
Open

  def initialize
    super

    update_info(
      name: 'WP Marketplace <= 2.4.0 Arbitrary File Download',
Severity: Minor
Found in lib/wpxf/modules/auxiliary/file_download/wp_marketplace_v2.4_file_download.rb - About 1 hr to fix

    Method run has 27 lines of code (exceeds 25 allowed). Consider refactoring.
    Open

      def run
    return false unless super

    emit_info 'Creating new admin user...'
    res = execute_post_request(
    Severity: Minor
    Found in lib/wpxf/modules/auxiliary/priv_esc/download_manager_privilege_escalation.rb - About 1 hr to fix

      Method run has 27 lines of code (exceeds 25 allowed). Consider refactoring.
      Open

        def run
    return false unless super

    emit_info 'Preparing payload...'
    payload_name = "#{Utility::Text.rand_alpha(rand(5..10))}.php"
      Severity: Minor
      Found in lib/wpxf/modules/exploit/shell/infusionsoft_shell_upload.rb - About 1 hr to fix

        Method initialize has 26 lines of code (exceeds 25 allowed). Consider refactoring.
        Open

          def initialize
    super

    update_info(
      name: 'DW Question & Answer <= 1.4.2.2 Stored XSS Shell Upload',
        Severity: Minor
        Found in lib/wpxf/modules/exploit/xss/stored/dw_question_answer_stored_xss_shell_upload.rb - About 1 hr to fix

          Method initialize has 26 lines of code (exceeds 25 allowed). Consider refactoring.
          Open

            def initialize
    super

    update_info(
      name: 'Simple Download Monitor File Download',
          Severity: Minor
          Found in lib/wpxf/modules/auxiliary/file_download/simple_download_monitor_file_download.rb - About 1 hr to fix

            Method initialize has 26 lines of code (exceeds 25 allowed). Consider refactoring.
            Open

              def initialize
    super

    update_info(
      name: 'All-in-One Migration Export',
            Severity: Minor
            Found in lib/wpxf/modules/auxiliary/file_download/all_in_one_migration_export.rb - About 1 hr to fix

              Method initialize has 26 lines of code (exceeds 25 allowed). Consider refactoring.
              Open

                def initialize
    super

    update_info(
      name: 'WPLMS Theme Privilege Escalation',
              Severity: Minor
              Found in lib/wpxf/modules/auxiliary/priv_esc/wplms_privilege_escalation.rb - About 1 hr to fix

                Method initialize has 26 lines of code (exceeds 25 allowed). Consider refactoring.
                Open

                  def initialize
    super

    update_info(
      name: 'Platform Theme Privilege Escalation',
                Severity: Minor
                Found in lib/wpxf/modules/auxiliary/priv_esc/platform_privilege_escalation.rb - About 1 hr to fix

                  Method initialize has 26 lines of code (exceeds 25 allowed). Consider refactoring.
                  Open

                    def initialize
    super

    update_info(
      name: 'EasyCart Plugin Privilege Escalation',
                  Severity: Minor
                  Found in lib/wpxf/modules/auxiliary/priv_esc/easy_cart_privilege_escalation.rb - About 1 hr to fix

                    Method initialize has 26 lines of code (exceeds 25 allowed). Consider refactoring.
                    Open

                      def initialize
    super

    update_info(
      name: 'Download Manager Directory Listing Disclosure',
                    Severity: Minor
                    Found in lib/wpxf/modules/auxiliary/info/download_manager_directory_listing_disclosure.rb - About 1 hr to fix

                      Method initialize has 26 lines of code (exceeds 25 allowed). Consider refactoring.
                      Open

                        def initialize
    super

    update_info(
      name: 'Ghost Plugin <= 0.5.5 - Unrestricted Export Download',
                      Severity: Minor
                      Found in lib/wpxf/modules/auxiliary/file_download/ghost_unrestricted_export_download.rb - About 1 hr to fix

                        Method run has a Cognitive Complexity of 9 (exceeds 5 allowed). Consider refactoring.
                        Open

                          def run
    return false unless super

    emit_info 'Preparing payload...'
    payload_name = "#{Utility::Text.rand_alpha(rand(5..10))}.php"
                        Severity: Minor
                        Found in lib/wpxf/modules/exploit/shell/n_media_website_contact_form_shell_upload.rb - About 55 mins to fix

                        Cognitive Complexity

                        Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

                        A method's cognitive complexity is based on a few simple rules:

                        • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
                        • Code is considered more complex for each "break in the linear flow of the code"
                        • Code is considered more complex when "flow breaking structures are nested"

                        Further reading

                        Method _dump_and_parse_hashes has a Cognitive Complexity of 9 (exceeds 5 allowed). Consider refactoring.
                        Open

                          def _dump_and_parse_hashes
    unless reveals_one_row_per_request
      res = _execute_hashdump_request
      return _parse_hashdump_body(res.body)
    end
                        Severity: Minor
                        Found in lib/wpxf/wordpress/hash_dump.rb - About 55 mins to fix

                        Cognitive Complexity

                        Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

                        A method's cognitive complexity is based on a few simple rules:

                        • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
                        • Code is considered more complex for each "break in the linear flow of the code"
                        • Code is considered more complex when "flow breaking structures are nested"

                        Further reading

                        Method execute_user_command has a Cognitive Complexity of 8 (exceeds 5 allowed). Consider refactoring.
                        Open

                              def execute_user_command(command, args)
        command = normalise_alised_commands(command)
        if can_handle? command
          puts unless commands_without_output.include? command
          send(command, *args) if correct_number_of_args?(command, args)
                        Severity: Minor
                        Found in lib/wpxf/cli/console.rb - About 45 mins to fix

                        Cognitive Complexity

                        Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

                        A method's cognitive complexity is based on a few simple rules:

                        • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
                        • Code is considered more complex for each "break in the linear flow of the code"
                        • Code is considered more complex when "flow breaking structures are nested"

                        Further reading

                        Method run has a Cognitive Complexity of 8 (exceeds 5 allowed). Consider refactoring.
                        Open

                          def run
    return false unless super

    emit_info 'Preparing payload...'
    theme_name = Utility::Text.rand_alpha(rand(5..10))
                        Severity: Minor
                        Found in lib/wpxf/modules/exploit/shell/mailpoet_newsletters_shell_upload.rb - About 45 mins to fix

                        Cognitive Complexity

                        Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

                        A method's cognitive complexity is based on a few simple rules:

                        • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
                        • Code is considered more complex for each "break in the linear flow of the code"
                        • Code is considered more complex when "flow breaking structures are nested"

                        Further reading

                        Function sys_get_temp_dir has a Cognitive Complexity of 8 (exceeds 5 allowed). Consider refactoring.
                        Open

                            function sys_get_temp_dir() {
      if (!empty(getenv('TMP'))) { return realpath(getenv('TMP')); }
      if (!empty(getenv('TMPDIR'))) { return realpath(getenv('TMPDIR')); }
      if (!empty(getenv('TEMP'))) { return realpath(getenv('TEMP')); }
                        Severity: Minor
                        Found in data/php/download_exec.php - About 45 mins to fix

                        Cognitive Complexity

                        Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

                        A method's cognitive complexity is based on a few simple rules:

                        • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
                        • Code is considered more complex for each "break in the linear flow of the code"
                        • Code is considered more complex when "flow breaking structures are nested"

                        Further reading

                        Method run has a Cognitive Complexity of 8 (exceeds 5 allowed). Consider refactoring.
                        Open

                          def run
    return false unless super

    emit_info 'Extracting table prefix...'
    prefix = table_prefix
                        Severity: Minor
                        Found in lib/wpxf/modules/auxiliary/priv_esc/custom_contact_forms_privilege_escalation.rb - About 45 mins to fix

                        Cognitive Complexity

                        Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

                        A method's cognitive complexity is based on a few simple rules:

                        • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
                        • Code is considered more complex for each "break in the linear flow of the code"
                        • Code is considered more complex when "flow breaking structures are nested"

                        Further reading

                        Method run has a Cognitive Complexity of 8 (exceeds 5 allowed). Consider refactoring.
                        Open

                          def run
    return false unless super

    emit_info 'Preparing payload...'
    payload_name = "#{Utility::Text.rand_alpha(rand(5..10))}.php"
                        Severity: Minor
                        Found in lib/wpxf/modules/exploit/shell/creative_contact_form_shell_upload.rb - About 45 mins to fix

                        Cognitive Complexity

                        Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

                        A method's cognitive complexity is based on a few simple rules:

                        • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
                        • Code is considered more complex for each "break in the linear flow of the code"
                        • Code is considered more complex when "flow breaking structures are nested"

                        Further reading

                        Method run has a Cognitive Complexity of 8 (exceeds 5 allowed). Consider refactoring.
                        Open

                          def run
    return false unless super

    emit_info 'Validating SQL...'
    unless valid_query?
                        Severity: Minor
                        Found in lib/wpxf/modules/auxiliary/misc/simple_ads_manager_sql_injection.rb - About 45 mins to fix

                        Cognitive Complexity

                        Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

                        A method's cognitive complexity is based on a few simple rules:

                        • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
                        • Code is considered more complex for each "break in the linear flow of the code"
                        • Code is considered more complex when "flow breaking structures are nested"

                        Further reading

                        Method run has a Cognitive Complexity of 8 (exceeds 5 allowed). Consider refactoring.
                        Open

                          def run
    return false unless super

    emit_info 'Preparing payload...'
    payload_name = "#{Utility::Text.rand_alpha(rand(5..10))}.php"
                        Severity: Minor
                        Found in lib/wpxf/modules/exploit/shell/infusionsoft_shell_upload.rb - About 45 mins to fix

                        Cognitive Complexity

                        Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

                        A method's cognitive complexity is based on a few simple rules:

                        • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
                        • Code is considered more complex for each "break in the linear flow of the code"
                        • Code is considered more complex when "flow breaking structures are nested"

                        Further reading

                        Severity
                        Category
                        Status
                        Source
                        Language