Home

Prompt Explicitly minor ruby deserialization exploit stream Positive Awareness

GitHub - klezVirus/deser-ruby: Ruby Deserialization Payload Generator
GitHub - klezVirus/deser-ruby: Ruby Deserialization Payload Generator

Insecure De-serialization. Serialization is the process of… | by Jay  Wandery | Medium
Insecure De-serialization. Serialization is the process of… | by Jay Wandery | Medium

Deserialization in Java and How Attackers Exploit It
Deserialization in Java and How Attackers Exploit It

Ruby taken off the rails by deserialization exploit | The Daily Swig
Ruby taken off the rails by deserialization exploit | The Daily Swig

Identifying and Exploiting Unsafe Deserialization in Ruby | by Plenum |  InfoSec Write-ups
Identifying and Exploiting Unsafe Deserialization in Ruby | by Plenum | InfoSec Write-ups

18.4 Lab: Exploiting Ruby deserialization using a documented gadget chain |  2024 | by Karthikeyan Nagaraj | Apr, 2024 | Medium
18.4 Lab: Exploiting Ruby deserialization using a documented gadget chain | 2024 | by Karthikeyan Nagaraj | Apr, 2024 | Medium

🔎Exploring de-serialization issues in Ruby projects.
🔎Exploring de-serialization issues in Ruby projects.

writeups/Ruby-deserialization-gadget-on-rails.md at main ·  httpvoid/writeups · GitHub
writeups/Ruby-deserialization-gadget-on-rails.md at main · httpvoid/writeups · GitHub

Ruby Vulnerabilities: Exploiting Open, Send, and… | Bishop Fox
Ruby Vulnerabilities: Exploiting Open, Send, and… | Bishop Fox

GitHub - j4k0m/Ruby2.x-RCE-Deserialization: Code execution by using a Ruby  Universal Gadget when an attacker controls the data passed to  Marshal.load().
GitHub - j4k0m/Ruby2.x-RCE-Deserialization: Code execution by using a Ruby Universal Gadget when an attacker controls the data passed to Marshal.load().

Deserialization Attacks Explanation | PDF | Method (Computer Programming) |  Php
Deserialization Attacks Explanation | PDF | Method (Computer Programming) | Php

RubyGems Patches Remote Code Execution Vulnerability | Threatpost
RubyGems Patches Remote Code Execution Vulnerability | Threatpost

Deserialization vulnerability
Deserialization vulnerability

How to Safely Deserialize Data in Ruby on Rails - DEV Community
How to Safely Deserialize Data in Ruby on Rails - DEV Community

Exploiting Ruby deserialization using a documented gadget chain (Video  solution)
Exploiting Ruby deserialization using a documented gadget chain (Video solution)

Zero Day Initiative — Remote Code Execution via Ruby on Rails Active  Storage Insecure Deserialization
Zero Day Initiative — Remote Code Execution via Ruby on Rails Active Storage Insecure Deserialization

Deserialization issues also affect Ruby, not just Java, PHP, and .NET |  ZDNET
Deserialization issues also affect Ruby, not just Java, PHP, and .NET | ZDNET

Ruby Vulnerabilities: Exploiting Open, Send, and… | Bishop Fox
Ruby Vulnerabilities: Exploiting Open, Send, and… | Bishop Fox

18.4 Lab: Exploiting Ruby deserialization using documented gadget chain -  Karthikeyan Nagaraj | 2024 - YouTube
18.4 Lab: Exploiting Ruby deserialization using documented gadget chain - Karthikeyan Nagaraj | 2024 - YouTube

Data Deserialization
Data Deserialization

Insecure Deserialization: Lab #7 - Exploiting Ruby deserialization using a  documented gadget chain
Insecure Deserialization: Lab #7 - Exploiting Ruby deserialization using a documented gadget chain

18.4 Lab: Exploiting Ruby deserialization using a documented gadget chain |  2024 | by Karthikeyan Nagaraj | Apr, 2024 | Medium
18.4 Lab: Exploiting Ruby deserialization using a documented gadget chain | 2024 | by Karthikeyan Nagaraj | Apr, 2024 | Medium

Discovering Deserialization Gadget Chains in Rubyland - Include Security  Research Blog
Discovering Deserialization Gadget Chains in Rubyland - Include Security Research Blog

Zero Day Initiative — Remote Code Execution via Ruby on Rails Active  Storage Insecure Deserialization
Zero Day Initiative — Remote Code Execution via Ruby on Rails Active Storage Insecure Deserialization

Unsafe Deserialization Vulnerability | SecureFlag Security Knowledge Base
Unsafe Deserialization Vulnerability | SecureFlag Security Knowledge Base