Ruby 4.0 Universal RCE Deserialization Gadget Chain
elttam.com
Ruby 4.0 Universal RCE Deserialization Gadget Chain
This post releases a new universal chain that turns a single Marshal.load into command execution on Ruby, built with new gadgets from untapped sources as well as old gadgets put to new use.
0 comments
No comments yet.