Back to directory
WRITEUP #5709

Ruby 2.x Universal RCE Deserialization Gadget Chain

DeserializationInsecure deserializationRCE
by@lukejahnke(Luke Jahnke)
Program
Ruby
Published
Nov 8, 2018
Added to HackDex
Aug 8, 2023
Read Full Writeuphttps://www.elttam.com/blog/ruby-deserialization/
▸ RELATED WRITEUPS
Attacking PowerShell CLIXML Deserialization
DeserializationInsecure deserialization
Getting code execution on Veeam through CVE-2023-27532
RCEInsecure deserialization
3 ways to get Remote Code Execution in Kafka UI
RCEInsecure deserialization
Dynamics 365 Business Central - A Journey With Ups and Downs
DeserializationInsecure deserialization
Shelltorch Explained: Multiple Vulnerabilities in Pytorch Model Server (Torchserve) (CVSS 9.9, CVSS 9.8) Walkthrough
AI / LLMAI

Built with ❤️ by Shubham Rawat