KindaRails2Shell
0xsha/kindarails2shellSingle-file PoC for Rails CVE-2026-66066: arbitrary file read, secret recovery, threaded scanning, and conditional RCE via signed image variations.
exploitationlabs-practicepayload-development+4
0xsha/kindarails2shellSingle-file PoC for Rails CVE-2026-66066: arbitrary file read, secret recovery, threaded scanning, and conditional RCE via signed image variations.
ooooooo-q/cve-2022-32224-railsProof-of-concept exploit for CVE-2022-32224: Rails ActiveRecord serialized column RCE. Demonstrates YAML deserialization leading to arbitrary class…
sealldeveloper/cve-2019-5420-pocProof-of-concept exploit for CVE-2019-5420 (Rails cookie deserialization) with argparse-based cookie modification, designed for PentesterLab practice.
ffffffff0x/f8x红/蓝队环境自动化部署工具 | Red/Blue team environment automation deployment tool
daehyeok0618/cve-2019-5418Docker-based lab environment for CVE-2019-5418 Ruby on Rails path traversal exploit, with PoC curl commands to read arbitrary server files via…
oxben10/cve-2013-0156Python exploit script for CVE-2013-0156, a remote code execution vulnerability in Ruby on Rails via insecure YAML deserialization. Designed for…
cyberharsh/ruby-on-rails-path-traversal-vulnerability-cve-2018-3760-Docker-based lab demonstrating CVE-2018-3760 path traversal in Ruby on Rails Sprockets, with POC and environment setup for security testing and…
lucasamorimca/cve-2020-8163Proof-of-concept exploit for CVE-2020-8163, a remote code execution vulnerability in Rails < 5.0.1 via user-controlled locals, with a testable…
zer0sumgam3/cve-2026-66066-pocReproducible lab for CVE-2026-66066: file-read-to-RCE exploit chain via Ruby on Rails Active Storage and libvips HDF5 matload. Includes Python…
h4ms1k/cve-2020-8163Docker-based lab environment and exploit script for CVE-2020-8163, a blind remote code execution vulnerability in Rails versions before 5.0.1 and…
cliffe/breakescapeMountable Rails engine providing 24+ cybersecurity escape room scenarios with randomized passwords, JIT-compiled NPC dialogue, and RESTful API for…
dhmosfunk/http3onsteroidsPoC and lab environment for CVE-2023-25950: HTTP request smuggling via malformed header fields in HAProxy's HTTP/3 implementation, enabling DoS and…
owasp/railsgoatA vulnerable version of Rails that follows the OWASP Top 10
matiasarenhard/rails-cve-2017-17917Educational demonstration of CVE-2017-17917 SQL injection in Rails, with step-by-step replication and secure coding mitigation using parameterized…
johangabrielson/bitbucket-testReproduction of CVE-2022-36804: pre-authentication remote code execution in Bitbucket Server via null byte injection into git archive arguments.…