Home / Pennyw0rth / NetExec
AI Slop Code RIsk Monitor

Pennyw0rth/NetExec

The Network Execution Tool

31.4 High pattern signal View on GitHub

Maintenance and Governance Review

This report summarizes scanner evidence for Pennyw0rth/NetExec, a Python project with 5,921 GitHub stars. SynthScan examined 49,159 lines of code across 273 source files, recording 1127 pattern matches distributed across 14 syntactic categories. The legacy adjusted pattern signal is 31.4 (High pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

31.4
Adjusted Signal
31.4
Raw Pattern Score
100%
Time Factor
2026-10-11
Last Push
5.9K
Stars
Python
Language
49.2K
Lines of Code
273
Files
1.1K
Pattern Hits
2026-10-12
Scan Date
0.26
HC Hit Rate

Risk Review · v3

Use each vector to guide manual verification of the underlying findings.

Cognitive Ownership Risk 38.4/100 · MEDIUM

Can maintainers explain intent, assumptions, and trade-offs? 400 finding(s).

Hallucinated Dependency & Supply Chain Risk 1.1/100 · LOW

Are imports declared and package/API names verified? 4 finding(s).

Agent Over-Engineering Ratio 69.8/100 · HIGH

Are wrappers, guards, and repeated structures necessary? 829 finding(s).

PR Review Velocity Impact 83.2/100 · CRITICAL

Which changes need focused human review? 1127 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 71MEDIUM 135LOW 921

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 1127 distinct pattern matches across 14 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Excessive Try-Catch Wrapping614 hits · 640 pts
SeverityFileLineSnippetContext
LOWbuild_collector.py22 except Exception as e:CODE
LOWbuild_collector.py29 except Exception as e:CODE
LOWnxc/database.py32 except Exception as e:CODE
MEDIUMnxc/database.py28def open_config(config_path):CODE
LOWnxc/netexec.py66 except Exception:CODE
LOWnxc/netexec.py119 except Exception as e:CODE
LOWnxc/logger.py174 except Exception as e:CODE
LOWnxc/connection.py47 except Exception:CODE
LOWnxc/connection.py68 except Exception:CODE
LOWnxc/connection.py77 except Exception:CODE
LOWnxc/connection.py128 except Exception as e:CODE
LOWnxc/connection.py187 except Exception as e:CODE
LOWnxc/connection.py209 except Exception as e:CODE
MEDIUMnxc/connection.py200def resolver(self, target):CODE
LOWnxc/cli.py120 except Exception as e:STRING
LOWnxc/parsers/ldap_results.py54 except Exception:CODE
MEDIUMnxc/parsers/ldap_results.py39def sid_to_str(sid):CODE
LOWnxc/parsers/ip.py32 except Exception as e:CODE
LOWnxc/modules/recyclebin.py86 except Exception as e:CODE
LOWnxc/modules/smbghost.py57 except Exception as e:CODE
LOWnxc/modules/sccm-recon6.py45 except Exception as e:CODE
LOWnxc/modules/sccm-recon6.py113 except Exception as e:CODE
LOWnxc/modules/sccm-recon6.py119 except Exception as e:CODE
LOWnxc/modules/ntdsutil.py70 except Exception as e:CODE
LOWnxc/modules/ntdsutil.py82 except Exception as e:CODE
LOWnxc/modules/ntdsutil.py94 except Exception as e:CODE
LOWnxc/modules/ntdsutil.py103 except Exception as e:CODE
LOWnxc/modules/ntdsutil.py136 except Exception:CODE
LOWnxc/modules/ntdsutil.py170 except Exception as e:CODE
LOWnxc/modules/find-computer.py66 except Exception as e:CODE
LOWnxc/modules/reg-query.py63 except Exception as e:CODE
LOW⚡nxc/modules/reg-query.py112 except Exception as e:CODE
LOWnxc/modules/reg-query.py135 except Exception:CODE
LOWnxc/modules/reg-query.py150 except Exception:CODE
LOWnxc/modules/reg-query.py159 except Exception as e:CODE
LOWnxc/modules/wcc.py246 except Exception as e:CODE
LOWnxc/modules/wcc.py278 except Exception as e:CODE
LOWnxc/modules/wcc.py507 except Exception:CODE
LOWnxc/modules/wcc.py520 except Exception as e:CODE
LOWnxc/modules/wcc.py585 except Exception as e:CODE
LOWnxc/modules/wcc.py606 except Exception as e:CODE
LOWnxc/modules/wcc.py727 except Exception as e:CODE
MEDIUMnxc/modules/wcc.py512def check_defender_exclusion(self, *spec, options=None):CODE
LOWnxc/modules/enable_cmdshell.py76 except Exception as e:CODE
LOWnxc/modules/hyperv-host.py50 except Exception as e:CODE
LOWnxc/modules/example_module.py46 except Exception as e:CODE
LOW⚡nxc/modules/remove-mic.py118 except Exception:CODE
LOW⚡nxc/modules/remove-mic.py122 except Exception:CODE
LOW⚡nxc/modules/remove-mic.py126 except Exception:CODE
LOWnxc/modules/spooler.py54 except Exception as e:CODE
LOWnxc/modules/spooler.py98 except Exception:CODE
LOWnxc/modules/putty.py153 except Exception as e:CODE
LOWnxc/modules/putty.py174 except Exception as e:CODE
LOWnxc/modules/putty.py227 except Exception as e:CODE
LOWnxc/modules/wdigest.py87 except Exception:CODE
LOWnxc/modules/shadowrdp.py51 except Exception as e:CODE
LOWnxc/modules/shadowrdp.py81 except Exception as e:CODE
MEDIUMnxc/modules/shadowrdp.py30def on_admin_login(self, context, connection):CODE
LOW⚡nxc/modules/wifi.py28 except Exception as e:CODE
LOW⚡nxc/modules/wifi.py36 except Exception:CODE
554 more matches not shown…
Deep Nesting227 hits · 206 pts
SeverityFileLineSnippetContext
LOWnxc/netexec.py81CODE
LOWnxc/connection.py34CODE
LOWnxc/connection.py104CODE
LOWnxc/connection.py386CODE
LOWnxc/connection.py481CODE
LOWnxc/connection.py528CODE
LOWnxc/nxcdb.py120CODE
LOWnxc/nxcdb.py388CODE
LOWnxc/nxcdb.py471CODE
LOWnxc/parsers/ldap_results.py5CODE
LOWnxc/parsers/ip.py15CODE
LOWnxc/parsers/ip.py88CODE
LOWnxc/parsers/ip.py114CODE
LOWnxc/modules/recyclebin.py24CODE
LOWnxc/modules/sccm-recon6.py96CODE
LOWnxc/modules/find-computer.py37CODE
LOWnxc/modules/reg-query.py22CODE
LOWnxc/modules/reg-query.py77CODE
LOWnxc/modules/wcc.py131CODE
LOWnxc/modules/wcc.py253CODE
LOWnxc/modules/wcc.py538CODE
LOWnxc/modules/wcc.py621CODE
LOWnxc/modules/putty.py158CODE
LOWnxc/modules/shadowrdp.py30CODE
LOWnxc/modules/wifi.py15CODE
LOWnxc/modules/impersonate.py53CODE
LOWnxc/modules/get-network.py82CODE
LOWnxc/modules/enum_cve.py58CODE
LOWnxc/modules/mssql_priv.py49CODE
LOWnxc/modules/obsolete.py34CODE
LOWnxc/modules/group-mem.py74CODE
LOWnxc/modules/backup_operator.py214CODE
LOWnxc/modules/backup_operator.py263CODE
LOWnxc/modules/keepass_trigger.py125CODE
LOWnxc/modules/keepass_trigger.py183CODE
LOWnxc/modules/keepass_trigger.py241CODE
LOWnxc/modules/keepass_trigger.py285CODE
LOWnxc/modules/keepass_trigger.py379CODE
LOWnxc/modules/iis.py38CODE
LOWnxc/modules/handlekatz.py53CODE
LOWnxc/modules/enum_ca.py39CODE
LOWnxc/modules/groupmembership.py33CODE
LOWnxc/modules/laps.py29CODE
LOWnxc/modules/coerce_plus.py44CODE
LOWnxc/modules/sccm.py48CODE
LOWnxc/modules/sccm.py125CODE
LOWnxc/modules/sccm.py242CODE
LOWnxc/modules/badsuccessor.py107CODE
LOWnxc/modules/wam.py17CODE
LOWnxc/modules/wam.py26CODE
LOWnxc/modules/enum_av.py44CODE
LOWnxc/modules/enum_av.py63CODE
LOWnxc/modules/slinky.py74CODE
LOWnxc/modules/raisechild.py84CODE
LOWnxc/modules/raisechild.py171CODE
LOWnxc/modules/raisechild.py184CODE
LOWnxc/modules/recent_files.py19CODE
LOWnxc/modules/dpapi_hash.py18CODE
LOWnxc/modules/presence.py51CODE
LOWnxc/modules/presence.py158CODE
167 more matches not shown…
Cross-File Repetition40 hits · 200 pts
SeverityFileLineSnippetContext
HIGHnxc/modules/example_module.py0concurrent. required if on_admin_login is not present. this gets called on each authenticated connectionSTRING
HIGHnxc/modules/groupmembership.py0concurrent. required if on_admin_login is not present. this gets called on each authenticated connectionSTRING
HIGHnxc/modules/get-desc-users.py0concurrent. required if on_admin_login is not present. this gets called on each authenticated connectionSTRING
HIGHnxc/protocols/ftp/database.py0check if this credential has already been added to the database, if not add it in.STRING
HIGHnxc/protocols/winrm/database.py0check if this credential has already been added to the database, if not add it in.STRING
HIGHnxc/protocols/wmi/database.py0check if this credential has already been added to the database, if not add it in.STRING
HIGHnxc/protocols/ldap/database.py0check if this credential has already been added to the database, if not add it in.STRING
HIGHnxc/protocols/ssh/database.py0check if this credential has already been added to the database, if not add it in.STRING
HIGHnxc/protocols/smb/database.py0check if this credential has already been added to the database, if not add it in.STRING
HIGHnxc/protocols/mssql/database.py0check if this credential has already been added to the database, if not add it in.STRING
HIGHnxc/protocols/ftp/db_navigator.py0clear_database this completely destroys all data in the currently connected database you cannot undo this commandSTRING
HIGHnxc/protocols/nfs/db_navigator.py0clear_database this completely destroys all data in the currently connected database you cannot undo this commandSTRING
HIGHnxc/protocols/winrm/db_navigator.py0clear_database this completely destroys all data in the currently connected database you cannot undo this commandSTRING
HIGHnxc/protocols/wmi/db_navigator.py0clear_database this completely destroys all data in the currently connected database you cannot undo this commandSTRING
HIGHnxc/protocols/ldap/db_navigator.py0clear_database this completely destroys all data in the currently connected database you cannot undo this commandSTRING
HIGHnxc/protocols/vnc/db_navigator.py0clear_database this completely destroys all data in the currently connected database you cannot undo this commandSTRING
HIGHnxc/protocols/rdp/db_navigator.py0clear_database this completely destroys all data in the currently connected database you cannot undo this commandSTRING
HIGHnxc/protocols/ssh/db_navigator.py0clear_database this completely destroys all data in the currently connected database you cannot undo this commandSTRING
HIGHnxc/protocols/smb/db_navigator.py0clear_database this completely destroys all data in the currently connected database you cannot undo this commandSTRING
HIGHnxc/protocols/mssql/db_navigator.py0clear_database this completely destroys all data in the currently connected database you cannot undo this commandSTRING
HIGHnxc/protocols/nfs/database.py0check if this check result has already been added to the database, if not, add it in.STRING
HIGHnxc/protocols/wmi/database.py0check if this check result has already been added to the database, if not, add it in.STRING
HIGHnxc/protocols/ldap/database.py0check if this check result has already been added to the database, if not, add it in.STRING
HIGHnxc/protocols/ssh/database.py0check if this check result has already been added to the database, if not, add it in.STRING
HIGHnxc/protocols/smb/database.py0check if this check result has already been added to the database, if not, add it in.STRING
HIGHnxc/protocols/winrm/database.py0check if this host has already been added to the database, if not, add it in. todo: return inserted or updated row ids aSTRING
HIGHnxc/protocols/rdp/database.py0check if this host has already been added to the database, if not, add it in. todo: return inserted or updated row ids aSTRING
HIGHnxc/protocols/mssql/database.py0check if this host has already been added to the database, if not, add it in. todo: return inserted or updated row ids aSTRING
HIGHnxc/protocols/winrm/database.py0return credentials for a list of users from the database.STRING
HIGHnxc/protocols/wmi/database.py0return credentials for a list of users from the database.STRING
HIGHnxc/protocols/smb/database.py0return credentials for a list of users from the database.STRING
HIGHnxc/protocols/mssql/database.py0return credentials for a list of users from the database.STRING
HIGHnxc/protocols/winrm/database.py0add domain backupkey :domain is the domain fqdn :pvk is the domain backupkeySTRING
HIGHnxc/protocols/wmi/database.py0add domain backupkey :domain is the domain fqdn :pvk is the domain backupkeySTRING
HIGHnxc/protocols/smb/database.py0add domain backupkey :domain is the domain fqdn :pvk is the domain backupkeySTRING
HIGHnxc/protocols/mssql/database.py0add domain backupkey :domain is the domain fqdn :pvk is the domain backupkeySTRING
HIGHnxc/protocols/winrm/database.py0check if this dpapi secret id is valid. :dpapi_secret_id is a primary idSTRING
HIGHnxc/protocols/wmi/database.py0check if this dpapi secret id is valid. :dpapi_secret_id is a primary idSTRING
HIGHnxc/protocols/smb/database.py0check if this dpapi secret id is valid. :dpapi_secret_id is a primary idSTRING
HIGHnxc/protocols/mssql/database.py0check if this dpapi secret id is valid. :dpapi_secret_id is a primary idSTRING
Empty Error Handlers26 hits · 130 pts
SeverityFileLineSnippetContext
HIGHbuild_collector.py20except FileNotFoundError:CODE
HIGHbuild_collector.py91except FileNotFoundError:CODE
HIGHnxc/connection.py68except Exception:CODE
HIGHnxc/connection.py77except Exception:CODE
HIGHnxc/nxcdb.py571except KeyboardInterrupt:CODE
HIGHnxc/parsers/ldap_results.py54except Exception:CODE
HIGHnxc/modules/backup_operator.py255except SessionError:CODE
HIGHnxc/modules/enum_av.py57except Exception:CODE
HIGHnxc/modules/bitlocker.py108except Exception:CODE
HIGHnxc/modules/notepad++.py54except Exception:CODE
HIGHnxc/modules/user-desc.py108except AttributeError:CODE
HIGHnxc/modules/powershell_history.py64except Exception:CODE
HIGHnxc/protocols/rdp.py206except Exception:CODE
HIGHnxc/protocols/rdp.py155except Exception:CODE
HIGHnxc/protocols/ldap/kerberos.py143except Exception:CODE
HIGHnxc/protocols/smb/mmcexec.py289except Exception:CODE
HIGHnxc/protocols/smb/smbspider.py66except SessionError:CODE
HIGHnxc/protocols/smb/smbexec.py83except Exception:CODE
HIGHnxc/protocols/smb/smbexec.py90except Exception:CODE
HIGHnxc/protocols/smb/smbexec.py134except Exception:CODE
HIGHnxc/protocols/smb/smbexec.py150except Exception:CODE
HIGHnxc/protocols/smb/atexec.py220except Exception:CODE
HIGHnxc/protocols/smb/wmiexec.py180except Exception:CODE
HIGHnxc/helpers/misc.py227except ImportError:CODE
HIGHnxc/helpers/misc.py212except importlib.metadata.PackageNotFoundError:CODE
HIGHnxc/helpers/firefox.py293except Exception:CODE
Hyper-Verbose Identifiers101 hits · 118 pts
SeverityFileLineSnippetContext
LOWnxc/modules/wcc.py401 def check_last_successful_update(self):CODE
LOWnxc/modules/wcc.py423 def check_guest_account_disabled(self):CODE
LOWnxc/modules/enable_cmdshell.py47 def backup_show_advanced_options(self):CODE
LOWnxc/modules/enable_cmdshell.py53 def restore_show_advanced_options(self):CODE
LOWnxc/modules/impersonate.py49 def list_available_primary_tokens(self, _, connection):CODE
LOWnxc/modules/mssql_priv.py161 def perform_impersonation_check(self, user: User, grantors=None):CODE
LOWnxc/modules/enum_av.py44 def _detect_installed_services(self, context, connection, target):CODE
LOWnxc/modules/gpp_privileges.py174 def initialize_ldap_connection(self, connection):CODE
LOWnxc/modules/mremoteng.py144 def extract_remoteng_passwords(self, encrypted_password, encryption_attributes: MRemoteNgEncryptionAttributes):CODE
LOWnxc/modules/add-computer.py142 def _samr_set_workstation_trust(self, dce, domain_handle, user_handle):CODE
LOWnxc/modules/ldap-checker.py123 def does_ldaps_complete_handshake(self, context, dc_ip):CODE
LOWnxc/modules/vnc.py57 def vnc_client_proxyconf_extract(self, dploot_conn):CODE
LOWnxc/modules/ms17-010.py75 def generate_smb_proto_payload(self, *protos):CODE
LOWnxc/modules/ms17-010.py100 def calculate_doublepulsar_xor_key(self, s):CODE
LOW⚡nxc/modules/ms17-010.py159 def session_setup_andx_request(self):CODE
LOWnxc/modules/ms17-010.py208 def tree_connect_andx_request(self, ip, userid):CODE
LOWnxc/modules/winscp.py54 def user_object_to_name_mapper(self, context, connection, all_user_objects):STRING
LOWnxc/modules/winscp.py118 def registry_session_extractor(self, context, connection, user_object, sessionName):STRING
LOW⚡nxc/modules/winscp.py146 def find_all_logged_in_users_in_registry(self, context, connection):CODE
LOWnxc/protocols/ldap.py901 def resolve_and_display_hostname(name, domain_name=None):CODE
LOWnxc/protocols/ldap.py1797 def _collect_adcs_for_bloodhound(self, timestamp):CODE
LOWnxc/protocols/rdp.py642 async def _submit_typed_run_command(self, command):STRING
LOWnxc/protocols/ftp/database.py280 def remove_loggedin_relations(self, cred_id=None, host_id=None):CODE
LOWnxc/protocols/winrm/database.py309 def get_credentials_for_users(self, usernames: list[str], cred_type: str | None = None):CODE
LOWnxc/protocols/winrm/database.py422 def remove_loggedin_relations(self, user_id=None, host_id=None):CODE
LOWnxc/protocols/wmi/database.py208 def get_credentials_for_users(self, usernames: list[str], cred_type: str | None = None):CODE
LOWnxc/protocols/ldap/bloodhound.py113def resolve_collection_methods(methods, logger):CODE
LOWnxc/protocols/ssh/database.py412 def remove_loggedin_relations(self, cred_id=None, host_id=None):CODE
LOWnxc/protocols/smb/samruser.py144def old_large_int_to_datetime(large_int):CODE
LOWnxc/protocols/smb/database.py431 def get_credentials_for_users(self, usernames: list[str], cred_type: str | None = None):CODE
LOWnxc/protocols/smb/database.py693 def get_users_with_share_access(self, host_id, share_name, permissions):CODE
LOWnxc/protocols/smb/database.py843 def remove_loggedin_relations(self, user_id=None, host_id=None):CODE
LOWnxc/protocols/mssql/database.py313 def get_credentials_for_users(self, usernames: list[str], cred_type: str | None = None):CODE
LOWnxc/protocols/mssql/database.py394 def remove_loggedin_relations(self, user_id=None, host_id=None):CODE
LOW⚡nxc/helpers/firefox.py237 def is_master_password_correct(self, key_data, master_password=b""):CODE
LOWnxc/helpers/negotiate_parser.py43def decode_tds_info_error_msgtext(data, offset):CODE
LOWnxc/helpers/rpc.py92 def create_from_string_binding(self, string_binding, target_ip=None, set_remote_host=None, anonymous_rpc=False):CODE
LOWnxc/helpers/dpapi.py16def upgrade_to_dploot_connection(target, connection):CODE
LOWnxc/helpers/dpapi.py130 def collect_masterkeys_from_target(self, dump_users: True, dump_system: False):CODE
LOWtests/test_smb_database.py145def test_remove_admin_relation():CODE
LOWtests/test_smb_database.py189def test_remove_group_relations():CODE
LOWtests/test_smb_database.py205def test_get_domain_controllers():CODE
LOW⚡tests/test_smb_database.py221def test_get_shares_by_access():CODE
LOW⚡tests/test_smb_database.py225def test_get_users_with_share_access():CODE
LOW⚡tests/test_smb_database.py229def test_add_domain_backupkey():CODE
LOW⚡tests/test_smb_database.py233def test_get_domain_backupkey():CODE
LOW⚡tests/test_smb_database.py237def test_is_dpapi_secret_valid():CODE
LOW⚡tests/test_smb_database.py249def test_add_loggedin_relation():CODE
LOW⚡tests/test_smb_database.py253def test_get_loggedin_relations():CODE
LOW⚡tests/test_smb_database.py257def test_remove_loggedin_relations():CODE
LOW⚡tests/test_smb_database.py261def test_get_keys_returns_empty_for_smb(db):CODE
LOW⚡tests/test_smb_database.py270def test_get_keys_all_and_by_id_fallback(db):CODE
LOW⚡tests/test_smb_database.py276def test_write_list_empty_entries(tmp_path):CODE
LOWtests/test_smb_database.py293def test_do_export_keys_empty_guard(db, tmp_path):CODE
LOW⚡tests/test_sanitize.py223def test_sanitize_dns_preserves_windows_device_names(name):CODE
LOW⚡tests/test_sanitize.py227def test_sanitize_dns_bounds_long_values_with_stable_hash():CODE
LOW⚡tests/test_sanitize.py236def test_sanitize_dns_replaces_malformed_bytes():CODE
LOW⚡tests/test_sanitize.py240def test_sanitize_dns_always_returns_a_string():CODE
LOW⚡tests/test_sanitize.py250def test_sanitize_dns_postconditions(hostname):CODE
LOW⚡tests/test_sanitize.py391def test_sanitize_path_component_handles_cross_platform_names(name, expected):CODE
41 more matches not shown…
Dead Code43 hits · 86 pts
SeverityFileLineSnippetContext
MEDIUMnxc/modules/group-mem.py44CODE
MEDIUMnxc/modules/group-mem.py45CODE
MEDIUMnxc/modules/group-mem.py47CODE
MEDIUMnxc/modules/group-mem.py49CODE
MEDIUMnxc/modules/group-mem.py54CODE
MEDIUMnxc/modules/group-mem.py55CODE
MEDIUMnxc/modules/group-mem.py58CODE
MEDIUMnxc/modules/group-mem.py59CODE
MEDIUMnxc/modules/group-mem.py60CODE
MEDIUMnxc/modules/group-mem.py63CODE
MEDIUMnxc/modules/group-mem.py64CODE
MEDIUMnxc/modules/group-mem.py65CODE
MEDIUMnxc/modules/group-mem.py67CODE
MEDIUMnxc/modules/firefox.py30CODE
MEDIUMnxc/modules/firefox.py31CODE
MEDIUMnxc/modules/firefox.py32CODE
MEDIUMnxc/modules/firefox.py33CODE
MEDIUMnxc/modules/firefox.py34CODE
MEDIUMnxc/modules/firefox.py35CODE
MEDIUMnxc/modules/firefox.py36CODE
MEDIUMnxc/modules/firefox.py37CODE
MEDIUMnxc/modules/firefox.py38CODE
MEDIUMnxc/modules/firefox.py40CODE
MEDIUMnxc/modules/firefox.py52CODE
MEDIUMnxc/modules/firefox.py67CODE
MEDIUMnxc/modules/ntlm_reflection.py52CODE
MEDIUMnxc/modules/ntlm_reflection.py53CODE
MEDIUMnxc/modules/ntlm_reflection.py54CODE
MEDIUMnxc/modules/ntlm_reflection.py55CODE
MEDIUMnxc/modules/ntlm_reflection.py56CODE
MEDIUMnxc/modules/ntlm_reflection.py57CODE
MEDIUMnxc/modules/ntlm_reflection.py59CODE
MEDIUMnxc/modules/ntlm_reflection.py60CODE
MEDIUMnxc/modules/ntlm_reflection.py62CODE
MEDIUMnxc/modules/ldap-checker.py178CODE
MEDIUMnxc/modules/ldap-checker.py179CODE
MEDIUMnxc/modules/ldap-checker.py180CODE
MEDIUMnxc/modules/ldap-checker.py183CODE
MEDIUMnxc/modules/ldap-checker.py187CODE
MEDIUMnxc/modules/ldap-checker.py194CODE
MEDIUMnxc/modules/ldap-checker.py224CODE
MEDIUMnxc/modules/ldap-checker.py225CODE
MEDIUMnxc/modules/ldap-checker.py240CODE
Self-Referential Comments25 hits · 78 pts
SeverityFileLineSnippetContext
MEDIUMnxc/modules/recyclebin.py72 # Create the export pathCOMMENT
MEDIUMnxc/modules/pre2k.py34 # Define the search filterCOMMENT
MEDIUMnxc/modules/spider_plus.py359 # Create the subdirectories based on the share name and file path.COMMENT
MEDIUMnxc/modules/daclread.py215 # Initialize module variablesCOMMENT
MEDIUMnxc/modules/daclread.py335 # This function is called before any writing action (write, remove or restore)COMMENT
MEDIUMnxc/modules/ms17-010.py120 # Define the NetBIOS headerCOMMENT
MEDIUMnxc/modules/ms17-010.py126 # Define the SMB headerCOMMENT
MEDIUMnxc/modules/ms17-010.py142 # Define the negotiate_proto_requestCOMMENT
MEDIUM⚡nxc/modules/ms17-010.py163 # Define the NetBIOS bytesCOMMENT
MEDIUM⚡nxc/modules/ms17-010.py169 # Define the SMB header bytesCOMMENT
MEDIUMnxc/modules/ms17-010.py185 # Define the session setup andx request bytesCOMMENT
MEDIUMnxc/modules/ms17-010.py244 # Create the IPC stringCOMMENT
MEDIUMnxc/modules/ms17-010.py357 # Define the netbios section of the SMB requestCOMMENT
MEDIUMnxc/modules/ms17-010.py363 # Define the SMB header section of the SMB requestCOMMENT
MEDIUMnxc/modules/ms17-010.py379 # Define the trans2 request section of the SMB requestCOMMENT
MEDIUMnxc/protocols/ldap.py1252 # Create the format string for each rowCOMMENT
MEDIUMnxc/protocols/smb.py1307 # Create the template for formattingCOMMENT
MEDIUMnxc/protocols/smb.py1440 # Create the template for formattingCOMMENT
MEDIUMnxc/protocols/smb.py2207 # Create a safe local directory structure while retaining the raw remote path for SMB.COMMENT
MEDIUMnxc/protocols/ldap/laps.py52 # Create the baseDNCOMMENT
MEDIUMnxc/protocols/ldap/laps.py125 # Create the baseDNCOMMENT
MEDIUMnxc/protocols/ldap/bloodhound.py42 # Create a domain controller objectCOMMENT
MEDIUMnxc/protocols/ldap/bloodhound.py44 # Create an object resolverCOMMENT
MEDIUMnxc/helpers/powershell.py191 # The following code gives us some control over where and how Invoke-PSInject does its thangCOMMENT
MEDIUMnxc/helpers/rpc.py74 # Create a new SMB conn if we don't have one already orCOMMENT
Redundant / Tautological Comments33 hits · 53 pts
SeverityFileLineSnippetContext
LOWnxc/config.py18# Check if there are any missing options in the config fileCOMMENT
LOW⚡nxc/modules/reg-query.py110 # Check if value existsCOMMENT
LOW⚡nxc/modules/reg-query.py121 # Check if value existsCOMMENT
LOW⚡nxc/modules/reg-query.py123 # Check if value existsCOMMENT
LOWnxc/modules/spooler.py62 # Display results.COMMENT
LOWnxc/modules/sccm.py77 # Print resultsCOMMENT
LOWnxc/modules/presence.py152 # Check if process SID matches any admin user SIDCOMMENT
LOWnxc/modules/presence.py174 # Check if SID and LogonType are found, then check if SID matches any admin userCOMMENT
LOWnxc/modules/notepad.py154 # Read the file into a bufferCOMMENT
LOWnxc/modules/mssql_dumper.py123 # Check if any of the cells in the row match any of the regex patternsCOMMENT
LOWnxc/modules/lockscreendoors.py73 # Check if the description is as expectedCOMMENT
LOWnxc/modules/spider_plus.py284 # Check if proceeding with download attempt.COMMENT
LOWnxc/modules/spider_plus.py304 # Check if the remote file is readable.COMMENT
LOWnxc/modules/spider_plus.py311 # Check if the file is already downloaded and up-to-date.COMMENT
LOWnxc/modules/spider_plus.py373 # Check if the file is empty and should not be.COMMENT
LOW⚡nxc/modules/veeam.py112 # Check if we found an SQL Server of some kindCOMMENT
LOW⚡nxc/protocols/ldap.py1006 # Check if we can resolve the trusted domain's DC using DNSCOMMENT
LOWnxc/protocols/smb.py230 # Check if the host is a valid IP address, if not we parse the FQDN in the ExceptionCOMMENT
LOWnxc/protocols/smb.py1338 # Check if we need to filter for usernamesCOMMENT
LOWnxc/protocols/smb.py140 self.smbv1 = None # Check if SMBv1 is supportedCODE
LOWnxc/protocols/smb.py141 self.smbv3 = None # Check if SMBv3 is supportedCODE
LOWnxc/protocols/wmi.py399 # Read the fileCOMMENT
LOW⚡nxc/protocols/nfs.py143 # Check if root escape is possibleCOMMENT
LOWnxc/protocols/nfs.py416 # Write the file data to the local fileCOMMENT
LOWnxc/protocols/nfs.py434 # Check if local file is existCOMMENT
LOWnxc/protocols/nfs.py617 # Check if "." is already the root directoryCOMMENT
LOWnxc/protocols/nfs.py853 # Write the file data to the local fileCOMMENT
LOWnxc/protocols/ftp.py130 # Check if the current connection is ASCII (ASCII does not support .size())COMMENT
LOWnxc/protocols/ftp.py145 # Check if the file was downloadedCOMMENT
LOWnxc/protocols/ftp.py162 # Check if the file was uploadedCOMMENT
LOWnxc/protocols/ftp.py172 # Check if the current connection is ASCII (ASCII does not support .size())COMMENT
LOWnxc/protocols/ldap/laps.py212 # Check if item is in cacheCOMMENT
LOWnxc/helpers/misc.py223 # Check if it's CE based on version stringCOMMENT
Cross-Language Confusion3 hits · 10 pts
SeverityFileLineSnippetContext
HIGHnxc/modules/mssql_coerce.py59 f"SELECT * FROM sys.fn_xe_file_target_read_file ('\\\\{self.listener}\\file','\\\\{self.listener}\\file',null,CODE
HIGHnxc/protocols/mssql.py575 get_owner_command = f"icacls C:\\windows\\temp\\{sam_storename} /grant {self.username}:F && icacls C:\\windows\\STRING
HIGHnxc/protocols/mssql.py610 get_owner_command = f"icacls C:\\windows\\temp\\{security_storename} /grant {self.username}:F && icacls C:\\windSTRING
Docstring Block Structure2 hits · 10 pts
SeverityFileLineSnippetContext
HIGHnxc/helpers/powershell.py62 Obfuscates a PowerShell script. Args: ---- path_to_script (str): The path to the PowerShell scriptSTRING
HIGHnxc/helpers/bloodhound.py2Adds a user to the BloodHound graph database. Args: ---- user (str or list): The username of the user oSTRING
Over-Commented Block5 hits · 5 pts
SeverityFileLineSnippetContext
LOWnxc/modules/remove-mic.py1# Original Author:COMMENT
LOWnxc/protocols/wmi/wmiexec_event.py1# Author: xiaolichan # ruff: ignore[commented-out-code]COMMENT
LOWnxc/protocols/wmi/wmiexec.py1# Author: xiaolichan # ruff: ignore[commented-out-code]COMMENT
LOWnxc/protocols/smb/mmcexec.py1# Copyright (c) 2003-2016 CORE Security TechnologiesCOMMENT
LOWnxc/helpers/pfx.py1# SECUREAUTH LABS. Copyright 2018 SecureAuth Corporation. All rights reserved.COMMENT
AI Structural Patterns5 hits · 4 pts
SeverityFileLineSnippetContext
LOWnxc/protocols/smb.py2031CODE
LOWnxc/protocols/smb/mmcexec.py62CODE
LOWnxc/protocols/smb/smbspider.py24CODE
LOWnxc/protocols/smb/atexec.py16CODE
LOWnxc/protocols/smb/wmiexec.py13CODE
AI Slop Vocabulary2 hits · 2 pts
SeverityFileLineSnippetContext
LOWnxc/parsers/ldap_results.py28 # If we can't decode the value, we'll just return the bytesCOMMENT
LOWnxc/protocols/rdp.py632 # type a one-liner that reads and executes the clipboard we just setSTRING
Unused Imports1 hit · 0 pts
SeverityFileLineSnippetContext
LOWnxc/modules/coerce_plus.py2CODE