Ruby Vulnerabilities: Exploiting Dangerous Open, Send and Deserialization Operations

Post Reply
Shane1145
Posts: 1624
Joined: Wed Sep 25, 2024 2:31 pm

Ruby Vulnerabilities: Exploiting Dangerous Open, Send and Deserialization Operations

Post by Shane1145 »

On a recent assessment, I tested a Ruby on Rails application that was vulnerable to three of the most common types of Ruby-specific remote code execution (RCE) vulnerabilities. Brakeman will typically detect all of these, but I always like to include working exploit code to give clients a visceral example of the severity of a given problem. I was able to find some examples of exploiting the most straightforward issue (insecure use of the built-in open function) but had to piece together my own for the rest. Here are the results as a cheat sheet/walkthrough to save you the trouble of doing the same thing.

https://bishopfox.com/blog/ruby-vulnera ... s-exploits
Post Reply