OESA-2026-3867 ruby security update

Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks such as Perl. Security Fixes: An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::MessageEncoder...

CVE-2015-3224

Ruby on Rails Web Console Exploit CVE-2015-3224 This repository contains a Python script to exploit an IP whitelist bypass vulnerability in the developer web console of Ruby on Rails 4.0.x and 4.1.x. The script allows for remote code execution on vulnerable servers. ⚠️ Disclaimer This script is...

CVE-2016-2098

CVE-2016-2098 Remote code execution vulnerability in Ruby-on-Rails when using render on user-supplied data. Explanation: This issue comes from the usage of the render method on user-supplied data. The method render is usually used to render a page from a template, but render method also allows...

heroku-CVE-2013-0269

heroku-CVE-2013-0269 Inspect all of your heroku apps to see if they are running a vulnerable version of JSON Background A security vulnerability has been found in the Ruby JSON gem. This is the root cause for the recently-announced MySQL injection issue in Rails. A new release of the JSON gem is...

heroku-CVE-2013-0156

heroku-CVE-2013-0156 This vulnerability has been supplanted by CVE-2013-0333. See https://groups.google.com/forum/?fromgroups=!topic/rubyonrails-security/1h2DR63ViGo for more details. A replacement for this script, covering CVE-2013-0333, can be found at...

hacker-profile

Install dependencies: root@kitploit: bundle install npm i Test with local web server: root@kitploit: $ bundle exec middleman server Build: root@kitploit: $ gulp build $ bundle exec middleman build...

creepy

creepy Current Version 1.1 Author Yiannis Kakavas Homepage http://www.geocreepy.com Installation Instructions See http://www.geocreepy.com Description Geolocation OSINT tool. Creepy is a geolocation OSINT tool. Gathers geolocation related information from online sources, and allows for presentati...

ermir

Ermir Ermir is an Evil/Rogue RMI Registry, it exploits unsecure deserialization on any Java code calling standard RMI methods on it list/lookup/bind/rebind/unbind. Requirements Ruby v3 or newer. Installation Install Ermir from rubygems.org: root@kitploit: $ gem install ermir or clone the repo and...

WiFi-Pineapple-MK7_Evil-Portal

WIFI PINEAPPLE MARK VII - EVIL PORTAL The leading rogue access point and WiFi pentest toolkit for close access operations. Passive and active attacks analyze vulnerable and misconfigured devices. https://hak5.org/collections/sale/products/wifi-pineapple Author :: TW-D Version :: 1.0.0 Copyright :...

inspec_cve_2019_15224

a malicious rest-client gem On August 19, 2019, it was discovered that the rest-client gem had had several versions published containing malicious code. In discovering the malicious rest-client, several other new gems were determined to be carrying similar code. Coverage:...

HatCloud

HatCloud - discontinued HatCloud build in Ruby. It makes bypass in CloudFlare for discover real IP. This can be useful if you need test your server and website. Testing your protection against Ddos Denial of Service or Dos. CloudFlare is services and distributed domain name server services, sitti...

declarative-policy

DeclarativePolicy: A Declarative Authorization Library This library provides a DSL for writing authorization policies. It can be used to separate logic from permissions, and has been used at scale in production at GitLab.com. The original author of this library is Jeanine Adkisson, and copyright ...

ronin

ronin Website Source Issues Documentation Discord | Mastodon Description Ronin is a free and Open Source Ruby toolkit for security research and development. Ronin contains many different CLI commands and Ruby libraries for a variety of security tasks, such as encoding/decoding data, filter...

CVE-2019-5418

CVE-2019-5418 1. Vulnerability Description Ruby on Rails is a web application framework, a relatively newer web application framework built on the Ruby language. This vulnerability is mainly caused by Ruby on Rails using the render file method with a specified parameter to render views outside th...

ctf-party

ctf-party What it is...

CVE-2023-23752

CVE-2023-23752 Joomla! v4.2.8 - Unauthenticated information disclosure To execute this script, we need to install few missing gems: root@kitploit: sudo gem install httpx sudo gem install docopt sudo gem install paint root@kitploit: ruby exploit.rb http://dev.devvortex.htb...

brakeman

Brakeman Brakeman is a static analysis tool which checks Ruby on Rails applications for security vulnerabilities. Installation Using RubyGems: root@kitploit: gem install brakeman Using Bundler: root@kitploit: group :development do gem 'brakeman', require: false end Using Docker: root@kitploit:...

WiFi-Pineapple-MK7_REST-Client

WIFI PINEAPPLE MARK VII - REST CLIENT The leading rogue access point and WiFi pentest toolkit for close access operations. Passive and active attacks analyze vulnerable and misconfigured devices. https://hak5.org/collections/sale/products/wifi-pineapple Author :: TW-D Version :: 1.3.7 Copyright :...

wordlist.rb

Wordlist Source Issues Documentation Description Wordlist is a Ruby library and CLI for reading, combining, mutating, and building wordlists, efficiently. Features Supports reading .txt wordlists, and .gz, .bz2, .xz, .zip, and .7z compressed wordlists. Supports building wordlists from arbitrary...

SecGen

Security Scenario Generator SecGen Summary SecGen creates vulnerable virtual machines, lab environments, and hacking challenges, so students can learn security penetration testing techniques. Boxes like Metasploitable2 are always the same, this project uses Vagrant, Puppet, and Ruby to create...