Stories by pentestercrab

Ruby Array Pack Bleed

Ruby Array Pack Bleed – Impacts Ruby 1.6.7 to 4.0.0

Inline Style Exfiltration: leaking data with chained CSS conditionals

Marshal madness: A brief history of Ruby deserialization exploits

Breaking the Sorting Barrier for Directed Single-Source Shortest Paths

New Method to Leverage Unsafe Reflection and Deserialisation to RCE on Rails

Escaping Ruby's Gem:SafeMarshal Sandbox

Escaping Ruby's Gem:SafeMarshal Sandbox

RubyGem's Gem:SafeMarshal buffer overrun with length larger than fit into a byte

CORS Vulnerabilities in Go: Vulnerable Patterns and Lessons

Shiny Vulnerabilities in R's Most Popular Web Framework

PentesterLab: Web Hacking and Security Code Review 600 exercises and 700 videos

Cross-Site Post Requests Without a Content-Type Header – CSRF Attack

Execute commands by sending JSON? Ruby deserialization vulnerabilities

JWT Libraries Block Algorithm Confusion: Key Lessons for Code Review

Chosen-Prefix Collisions on AES-Like Hashing

Ruby 3.4 Universal RCE Deserialization Gadget Chain

Ruby's String Slice is Broken

Evaluate Markdown code blocks within Vim

SQL Injection Polyglot Payloads

1
2
3
4
5
6
7
8
9
10