Tools

hackspeak/cve-2026-66066

PoC exploit for Rails Active Storage/libvips CVE-2026-66066: uses crafted MAT/HDF5 files for arbitrary file read, recovers secret_key_base, and…

trickstersec/cve-2019-5420

Exploit for Rails CVE-2019-5420 targeting insecure session key derivation in development mode, enabling remote code execution via crafted requests.

knqyf263/cve-2019-5420

Dockerized exploit environment for CVE-2019-5420 (Ruby on Rails Active Storage) enabling remote code execution. Designed for educational testing and…

pentestgeek/phishing-frenzy

Ruby on Rails framework for managing and executing phishing campaigns, including email templates, landing pages, and campaign tracking.

sealldeveloper/cve-2019-5420-poc

Proof-of-concept exploit for CVE-2019-5420 (Rails cookie deserialization) with argparse-based cookie modification, designed for PentesterLab practice.

anastaoutaou/cve-2019-5420

Proof-of-concept exploit for CVE-2019-5420, a remote code execution vulnerability in Ruby on Rails, designed for educational purposes.

noxxi/mime-is-broken

Test cases for broken MIME and tools to generate and process these

ffffffff0x/f8x

红/蓝队环境自动化部署工具 | Red/Blue team environment automation deployment tool

shinthink/cve-2026-66066

Exploit for CVE-2026-66066 against Rails Active Storage/libvips: pre-auth arbitrary file read to recover SECRET_KEY_BASE and achieve RCE, with…

omarkurt/cve-2014-0130

Proof-of-concept exploit for CVE-2014-0130, a Rails directory traversal vulnerability. Demonstrates path traversal payload and references HackerOne…

hybryx/cve-2020-8165

Python exploit for CVE-2020-8165 targeting Rails MemCacheStore and RedisCacheStore. Enables remote command execution via user-provided object…

umiterkol/cve-2020-8165--auto-shell

Automated exploit script for CVE-2020-8165 targeting Rails applications, enabling remote code execution via crafted payloads.

pentestical/cve-2019-5420

Proof-of-concept exploit for CVE-2019-5420 targeting Rails development mode secret token disclosure to escalate privileges via cookie manipulation.

laffray/ruby-rce-cve-2019-5420-

Step-by-step exploit for Ruby on Rails CVE-2019-5420 RCE via insecure Marshal deserialization, with payload generation and reverse shell capture.

dachidahu/cve-2016-0752

Proof-of-concept exploit for CVE-2016-0752, a Rails dynamic render remote code execution vulnerability, with setup instructions and reference to a…

bsodmike/rails-exploit-cve-2013-0156

Bootstrapped Rails 3.2.10 to test the remote code exploit CVE-2013-0156

random-robbie/cve-2019-5418

Go-based scanner for CVE-2019-5418 (Ruby on Rails file disclosure) that reads a list of websites and tests for the vulnerability using a burl-derived…