Get the latest tech news

Ruby 4.0 Universal RCE Deserialization Gadget Chain


This post releases a new universal chain that turns a single Marshal.load into command execution on Ruby, built with new gadgets from untapped sources as well as old gadgets put to new use.

None

Get the Android app

Or read this on Hacker News

Read more on:

Photo of ruby

ruby

Photo of universal rce

universal rce

Related news:

News photo

Calling all open source maintainers working with Ruby

News photo

Rebuilding My Homelab with Compose, Ruby, IPv6, and No Kubernetes

News photo

Reverse-engineering Codemasters' BIGF archive format in Ruby