Move copy-pasta into a new method

lib/msf/core/db_manager/exploit_attempt.rb

@@ -28,9 +28,47 @@ module Msf::DBManager::ExploitAttempt
   end
 
   def report_exploit_failure(opts)
+    return unless opts.has_key?(:refs) && !opts[:refs].blank?
+    host   = opts[:host] || return
 
+    wspace = opts[:workspace] || workspace
+    port   = opts[:port]
+    prot   = opts[:proto] || "tcp"
+    svc    = opts[:service]
+
+    # Look up the service as appropriate
+    if port and svc.nil?
+      opts[:proto] ||= prot
+      opts[:service] = get_service(wspace, host, prot, port)
+    end
+
+    do_report_failure_or_success(opts)
+  end
+
+  def report_exploit_success(opts)
+    opts[:refs] || return
+    host   = opts[:host] || return
+
+    wspace = opts[:workspace] || workspace
+    port   = opts[:port]
+    prot   = opts[:proto] || "tcp"
+    svc    = opts[:service]
+
+    # Look up or generate the service as appropriate
+    if port and svc.nil?
+      opts[:proto] ||= "tcp"
+      opts[:service] = report_service(
+        workspace: wspace, host: host, port: port, proto: prot
+      )
+    end
+
+    do_report_failure_or_success(opts)
+  end
+
+  private
+
+  def do_report_failure_or_success(opts)
     ::ActiveRecord::Base.connection_pool.with_connection {
-    wspace = opts.delete(:workspace) || workspace
       mrefs  = opts.delete(:refs) || return
       host   = opts.delete(:host)
       port   = opts.delete(:port)
@@ -44,15 +82,6 @@ module Msf::DBManager::ExploitAttempt
       username   = opts.delete(:username)
       mname      = opts.delete(:module)
 
-    # Bail if we dont have a host object
-    return if not host
-
-    # Look up the service as appropriate
-    if port and svc.nil?
-      prot ||= "tcp"
-      svc = get_service(wspace, host, prot, port)
-    end
-
       if not vuln
         # Create a references map from the module list
         ref_objs = ::Mdm::Ref.where(:name => mrefs.map { |ref|
@@ -69,72 +98,13 @@ module Msf::DBManager::ExploitAttempt
 
       attempt_info = {
         :attempted_at => timestamp || Time.now.utc,
-      :exploited    => false,
+        :exploited    => (freason.nil? ? true : false),
         :fail_detail  => fdetail,
         :fail_reason  => freason,
         :module       => mname,
         :username     => username  || "unknown",
       }
 
-    # We have match, lets create a vuln_attempt record
-    if vuln
-      attempt_info[:vuln_id] = vuln.id
-      vuln.vuln_attempts.create(attempt_info)
-    end
-
-    # Report an exploit attempt all the same
-
-    if svc
-      attempt_info[:port]  = svc.port
-      attempt_info[:proto] = svc.proto
-    end
-
-    if port and svc.nil?
-      attempt_info[:port]  = port
-      attempt_info[:proto] = prot || "tcp"
-    end
-
-    host.exploit_attempts.create(attempt_info)
-  }
-  end
-
-  def report_exploit_success(opts)
-
-  ::ActiveRecord::Base.connection_pool.with_connection {
-    wspace = opts.delete(:workspace) || workspace
-    mrefs  = opts.delete(:refs) || return
-    host   = opts.delete(:host)
-    svc    = opts.delete(:service)
-    vuln   = opts.delete(:vuln)
-
-    timestamp = opts.delete(:timestamp)
-    username  = opts.delete(:username)
-    mname     = opts.delete(:module)
-
-    # Bail if we dont have a host object
-    return if not host
-
-    if not vuln
-      # Create a references map from the module list
-      ref_objs = ::Mdm::Ref.where(:name => mrefs.map { |ref|
-        if ref.respond_to?(:ctx_id) and ref.respond_to?(:ctx_val)
-          "#{ref.ctx_id}-#{ref.ctx_val}"
-        else
-          ref.to_s
-        end
-     })
-
-      # Try find a matching vulnerability
-      vuln = find_vuln_by_refs(ref_objs, host, svc)
-    end
-
-    attempt_info = {
-        :attempted_at => timestamp || Time.now.utc,
-        :exploited    => true,
-        :module       => mname,
-        :username     => username  || "unknown",
-    }
-
       attempt_info[:session_id] = opts[:session_id] if opts[:session_id]
       attempt_info[:loot_id]    = opts[:loot_id]    if opts[:loot_id]
 
@@ -157,7 +127,13 @@ module Msf::DBManager::ExploitAttempt
         attempt_info[:proto] = svc.proto
       end
 
+      if port and svc.nil?
+        attempt_info[:port]  = port
+        attempt_info[:proto] = prot || "tcp"
+      end
+
       host.exploit_attempts.create(attempt_info)
     }
+
   end
 end