This is not going to be an SQL injection its going to be a remote code execution of anything you want. Also expect that all network inspectors based on rules a

This is not going to be an SQL injection its going to be a remote code execution of anything you want. Also expect that all network inspectors based on rules are going to miss it. You can serialize so many objects using YAML (Symbols, Objects, REGEXES, Structs, extend Kernel::HASH, etc..and I've only looked for a few hours), that there are going to be just too many attack vectors.