• Earn real money by being active: Hello Guest, earn real money by simply being active on the forum — post quality content, get reactions, and help the community. Once you reach the minimum credit amount, you’ll be able to withdraw your balance directly. Learn how it works.

ruby

  1. dEEpEst

    Ruby Class Pollution in Ruby: A Deep Dive into Exploiting Recursive Merges

    Introduction In this post, we are going to explore a rarely discussed class of vulnerabilities in Ruby, known as class pollution. This concept is inspired by the idea of prototype pollution in JavaScript, where recursive merges are exploited to poison the prototype of objects, leading to...
  2. itsMe

    Ruby RubyFu: Ruby programming for Hacker

    Rubyfu, where Ruby goes evil! This book is a great collection of ideas, tricks, and skills that could be useful for Hackers. It’s a unique extraction reference, summarizes a lot of research and experience in order to achieve your w00t in shortest and smartest way. Rubyfu is where you’ll find a...
  3. 0x1

    Scripts & Templates Agile Web Development with Rails 5.1

    Agile Web Development with Rails 5 & 5.1 Learn Rails the way the Rails core team recommends it, along with the tens of thousands of developers who have used this broad, far-reaching tutorial and reference. If you’re new to Rails, you’ll get step-by-step guidance. If you’re an...
  4. 1

    Exploits Ruby On Rails DoubleTap Development Mode secret_key_base Remote Code Execution

    This Metasploit module exploits a vulnerability in Ruby on Rails. In development mode, a Rails application would use its name as the secret_key_base, and can be easily extracted by visiting an invalid resource for a path. As a result, this allows a remote user to create and deliver a signed...
Back
Top