writeups.xyz / Ruby 2.x Universal RCE Deserialization Gadget Chain

Submitter : c2a

Date: 8 November 2018

Bounty : undisclosed

Vulnerabilities :

• Insecure Deserialization
• RCE

Programs :

• Ruby

Authors :

• Luke Jahnke (@Lukejahnke)

Link :
https://www.elttam.com/blog/ruby-deserialization/