Insecure Deserialization - How to trace down a gadget chain - Other examples in Ruby

links Web Application Security Web Security Academy Labs Insecure Deserialization Remote Code Execution Gadget Chains Ruby

25 Dec 2022

¹

These are some Ruby examples equivalents of my previous post²(about gadget chains in PHP), that show the process of finding gadget chains in Ruby programming language; also as mentioned in one of these articles, there may still be some undiscovered gadget chains for cybersecurity researchers to find.

Also there is a Web Security Academy lab to practice these types of documented gadget chains.³

External Links

---

• RUBY 2.X UNIVERSAL RCE DESERIALIZATION GADGET CHAIN

• Universal Deserialisation Gadget for Ruby 2.x-3.x

References

---

1. Icon made by Freepik from www.flaticon.com ↩

2. Insecure Deserialization - How to trace down a gadget chain ↩

3. Lab: Exploiting Ruby deserialization using a documented gadget chain ↩