postmodern

joined 1 year ago
MODERATOR OF
ruby_infosec
sorted by: new top controversial old
6
Ronin 2.1.0 has finally been released! New database tables, new payloads, new recon engine, new Web UI, and more! (ronin-rb.dev)
1
Announcing the Ronin 2.1.0 Open Beta (ronin-rb.dev)
1
Stop wasting your time on annoying CTF challenges (and just use Ronin)! (ronin-rb.dev)
What are You Working on Wednesday in c/cybersecurity@infosec.pub
[–] postmodern@infosec.pub 2 points 10 months ago (1 children)

Working on wrapping up the Ronin Phase II epic.

1
Solving Advent of Cyber 2023 Day 22 with ronin-exploits (ronin-rb.dev)
1
Solving Advent of Cyber 2023 Day 4 using Ronin (ronin-rb.dev)
1
Solving Advent of Cyber 2023 Day 3 using Ronin (ronin-rb.dev)
1
Solving HackThisSite Programming Level 11 with Ronin (ronin-rb.dev)
1
Solving HackThisSite Programming Level 1 with Ronin (ronin-rb.dev)
1
Yes, you can use Ronin on the OSCP (ronin-rb.dev)
1
Ronin is participating in Hacktoberfest 2023! (ronin-rb.dev)
1
ronin 2.0.5, ronin-support 1.0.3, ronin-db-activerecord 0.1.2, ronin-db 0.1.2, ronin-vulns 0.1.4, ronin-payloads 0.1.4, and ronin-exploits 1.0.3 released! (ronin-rb.dev)
1
Proposal to deprecate "|command-here" inputs for Kernel.open() accepted (bugs.ruby-lang.org)
submitted 1 year ago* (last edited 1 year ago) by postmodern@infosec.pub to c/ruby_infosec@infosec.pub
0 comments fedilink
 

Dozens of Ruby-related CVEs have been caused by user input being passed to the top-level Kernel.open() method, which not only accepts paths or URIs (if open-uri has been loaded), but also "|command-here" commands which are then opened using IO.popen() resulting in Remote Command Execution (RCE) vulnerabilities. In the next minor Ruby version (3.3.0) a deprecation warning will be printed if a "|command-here" input is given to Kernel.open(). Hopefully, in Ruby 4.0 this insecure feature will be removed.

view more: next ›