3 ms·
As a freelance doing fireman maintenance on Rails apps from time to time, I can tell that the word is not out enough, yet (far from it). The guides do not unde
by thibaut_barrere 13y ago
As a freelance doing fireman maintenance on Rails apps from time to time, I can tell that the word is not out enough, yet (far from it).
The guides do not underline that you can do RCE, either!
There is a metasploit module available now.
https://twitter.com/unixmonkey/status/360859127620182017 https://twitter.com/unixmonkey/status/360859127620182017
https://github.com/joernchen/metasploit-framework/blob/7f3eccd64453c3708ad4cb7ed7a6ea18354bac3d/modules/exploits/multi/http/rails_secret_deserialization.rb https://github.com/joernchen/metasploit-framework/blob/7f3ec...
- gtani 13y agoare you talking about RCE more current than http://blog.codeclimate.com/blog/2013/01/10/rails-remote-code-execution-vulnerability-explained/ http://blog.codeclimate.com/blog/2013/01/10/rails-remote-cod... https://groups.google.com/forum/?fromgroups=#!topic/rubyonrails-security/61bkgvnSGTQ https://groups.google.com/forum/?fromgroups=#!topic/rubyonra... (patched in 3.2.11)
- thibaut_barrere 13y agosee the commit message, it seems to work for Rails 3 and 4: https://github.com/joernchen/metasploit-framework/commit/7f3eccd64453c3708ad4cb7ed7a6ea18354bac3d https://github.com/joernchen/metasploit-framework/commit/7f3...