the.bay.news

Ruby 4.0 Universal RCE Deserialization Gadget Chain

elttam.com
Ruby 4.0 Universal RCE Deserialization Gadget Chain
This post releases a new universal chain that turns a single Marshal.load into command execution on Ruby, built with new gadgets from untapped sources as well as old gadgets put to new use.

0 comments

Sign in to join the discussion — your thebay.events account works here.

No comments yet.