Ruby Vulnerabilities: Exploiting Dangerous Open, Send and Deserialization Operations

Managing Sr. Consultant Ben Lincoln tested a Ruby on Rails application that was vulnerable to three of the most common types of Ruby-specific RCE vulnerabilities. Here is a walkthrough and new test harness that you can use to enable more efficient web application exploitation.

deserialization operations ruby send vulnerabilities