Sign upLogin

rastating/wordpress-exploit-framework

View on GitHub
Star

Showing 338 of 338 total issues

Method initialize has 27 lines of code (exceeds 25 allowed). Consider refactoring.
Open

  def initialize
    super

    update_info(
      name: 'WordPress 4.2-4.7.2 - CSRF DoS',
Severity: Minor
Found in lib/wpxf/modules/auxiliary/dos/wp_v4.7.2_csrf_dos.rb - About 1 hr to fix

    Method initialize has 27 lines of code (exceeds 25 allowed). Consider refactoring.
    Open

      def initialize
    super

    update_info(
      name: 'Super Socializer <= 7.10.6 Authentication Bypass',
    Severity: Minor
    Found in lib/wpxf/modules/exploit/shell/super_socializer_shell_upload.rb - About 1 hr to fix

      Method run has 27 lines of code (exceeds 25 allowed). Consider refactoring.
      Open

        def run
    return false unless super

    @credentials = [{
      username: 'Username', password: 'Password Hash', email: 'E-mail'
      Severity: Minor
      Found in lib/wpxf/modules/auxiliary/hash_dump/ultimate_csv_importer_user_extract.rb - About 1 hr to fix

        Method initialize has 27 lines of code (exceeds 25 allowed). Consider refactoring.
        Open

          def initialize
    super

    update_info(
      name: 'Ultimate CSV Importer User Table Extract',
        Severity: Minor
        Found in lib/wpxf/modules/auxiliary/hash_dump/ultimate_csv_importer_user_extract.rb - About 1 hr to fix

          Method initialize has 27 lines of code (exceeds 25 allowed). Consider refactoring.
          Open

            def initialize
    super

    update_info(
      name: 'Super Socializer <= 7.10.6 Authentication Bypass',
          Severity: Minor
          Found in lib/wpxf/modules/auxiliary/priv_esc/super_socializer_auth_bypass.rb - About 1 hr to fix

            Method run has 27 lines of code (exceeds 25 allowed). Consider refactoring.
            Open

              def run
    return false unless super

    emit_info 'Preparing payload...'
    payload_name = "#{Utility::Text.rand_alpha(rand(5..10))}.php"
            Severity: Minor
            Found in lib/wpxf/modules/exploit/shell/creative_contact_form_shell_upload.rb - About 1 hr to fix

              Method run has 27 lines of code (exceeds 25 allowed). Consider refactoring.
              Open

                def run
    return false unless super

    emit_info 'Creating new admin user...'
    res = execute_post_request(
              Severity: Minor
              Found in lib/wpxf/modules/auxiliary/priv_esc/download_manager_privilege_escalation.rb - About 1 hr to fix

                Method run has 27 lines of code (exceeds 25 allowed). Consider refactoring.
                Open

                  def run
    return false unless super

    emit_info 'Preparing payload...'
    payload_name = "#{Utility::Text.rand_alpha(rand(5..10))}.php"
                Severity: Minor
                Found in lib/wpxf/modules/exploit/shell/inboundio_marketing_shell_upload.rb - About 1 hr to fix

                  Method initialize has 26 lines of code (exceeds 25 allowed). Consider refactoring.
                  Open

                    def initialize
    super

    update_info(
      name: 'Platform Theme Privilege Escalation',
                  Severity: Minor
                  Found in lib/wpxf/modules/auxiliary/priv_esc/platform_privilege_escalation.rb - About 1 hr to fix

                    Method initialize has 26 lines of code (exceeds 25 allowed). Consider refactoring.
                    Open

                      def initialize
    super

    update_info(
      name: 'WPLMS Theme Privilege Escalation',
                    Severity: Minor
                    Found in lib/wpxf/modules/auxiliary/priv_esc/wplms_privilege_escalation.rb - About 1 hr to fix

                      Method initialize has 26 lines of code (exceeds 25 allowed). Consider refactoring.
                      Open

                        def initialize
    super

    update_info(
      name: 'DW Question & Answer <= 1.4.2.2 Stored XSS Shell Upload',
                      Severity: Minor
                      Found in lib/wpxf/modules/exploit/xss/stored/dw_question_answer_stored_xss_shell_upload.rb - About 1 hr to fix

                        Method initialize has 26 lines of code (exceeds 25 allowed). Consider refactoring.
                        Open

                          def initialize
    super

    update_info(
      name: 'Ghost Plugin <= 0.5.5 - Unrestricted Export Download',
                        Severity: Minor
                        Found in lib/wpxf/modules/auxiliary/file_download/ghost_unrestricted_export_download.rb - About 1 hr to fix

                          Method initialize has 26 lines of code (exceeds 25 allowed). Consider refactoring.
                          Open

                            def initialize
    super

    update_info(
      name: 'Download Manager Directory Listing Disclosure',
                          Severity: Minor
                          Found in lib/wpxf/modules/auxiliary/info/download_manager_directory_listing_disclosure.rb - About 1 hr to fix

                            Method initialize has 26 lines of code (exceeds 25 allowed). Consider refactoring.
                            Open

                              def initialize
    super

    update_info(
      name: 'EasyCart Plugin Privilege Escalation',
                            Severity: Minor
                            Found in lib/wpxf/modules/auxiliary/priv_esc/easy_cart_privilege_escalation.rb - About 1 hr to fix

                              Method initialize has 26 lines of code (exceeds 25 allowed). Consider refactoring.
                              Open

                                def initialize
    super

    update_info(
      name: 'Simple Download Monitor File Download',
                              Severity: Minor
                              Found in lib/wpxf/modules/auxiliary/file_download/simple_download_monitor_file_download.rb - About 1 hr to fix

                                Method initialize has 26 lines of code (exceeds 25 allowed). Consider refactoring.
                                Open

                                  def initialize
    super

    update_info(
      name: 'All-in-One Migration Export',
                                Severity: Minor
                                Found in lib/wpxf/modules/auxiliary/file_download/all_in_one_migration_export.rb - About 1 hr to fix

                                  Method run has a Cognitive Complexity of 9 (exceeds 5 allowed). Consider refactoring.
                                  Open

                                    def run
    return false unless super

    emit_info 'Preparing payload...'
    payload_name = "#{Utility::Text.rand_alpha(rand(5..10))}.php"
                                  Severity: Minor
                                  Found in lib/wpxf/modules/exploit/shell/n_media_website_contact_form_shell_upload.rb - About 55 mins to fix

                                  Cognitive Complexity

                                  Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

                                  A method's cognitive complexity is based on a few simple rules:

                                  • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
                                  • Code is considered more complex for each "break in the linear flow of the code"
                                  • Code is considered more complex when "flow breaking structures are nested"

                                  Further reading

                                  Method _dump_and_parse_hashes has a Cognitive Complexity of 9 (exceeds 5 allowed). Consider refactoring.
                                  Open

                                    def _dump_and_parse_hashes
    unless reveals_one_row_per_request
      res = _execute_hashdump_request
      return _parse_hashdump_body(res.body)
    end
                                  Severity: Minor
                                  Found in lib/wpxf/wordpress/hash_dump.rb - About 55 mins to fix

                                  Cognitive Complexity

                                  Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

                                  A method's cognitive complexity is based on a few simple rules:

                                  • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
                                  • Code is considered more complex for each "break in the linear flow of the code"
                                  • Code is considered more complex when "flow breaking structures are nested"

                                  Further reading

                                  Method run has a Cognitive Complexity of 8 (exceeds 5 allowed). Consider refactoring.
                                  Open

                                    def run
    return false unless super

    emit_info 'Extracting table prefix...'
    prefix = table_prefix
                                  Severity: Minor
                                  Found in lib/wpxf/modules/auxiliary/priv_esc/custom_contact_forms_privilege_escalation.rb - About 45 mins to fix

                                  Cognitive Complexity

                                  Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

                                  A method's cognitive complexity is based on a few simple rules:

                                  • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
                                  • Code is considered more complex for each "break in the linear flow of the code"
                                  • Code is considered more complex when "flow breaking structures are nested"

                                  Further reading

                                  Method run has a Cognitive Complexity of 8 (exceeds 5 allowed). Consider refactoring.
                                  Open

                                    def run
    return false unless super

    listing = [{
      name: 'Name', type: 'Type'
                                  Severity: Minor
                                  Found in lib/wpxf/modules/auxiliary/info/download_manager_directory_listing_disclosure.rb - About 45 mins to fix

                                  Cognitive Complexity

                                  Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

                                  A method's cognitive complexity is based on a few simple rules:

                                  • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
                                  • Code is considered more complex for each "break in the linear flow of the code"
                                  • Code is considered more complex when "flow breaking structures are nested"

                                  Further reading

                                  Severity
                                  Category
                                  Status
                                  Source
                                  Language