Tools

daehyeok0618/cve-2019-5418

Docker-based lab environment for CVE-2019-5418 Ruby on Rails path traversal exploit, with PoC curl commands to read arbitrary server files via…

assassinukg/cve-2020-8165

Python exploit shell for CVE-2020-8165, providing a reverse shell payload for remote code execution on vulnerable Rails applications.

its-arun/cve-2016-2098

Bash-based proof-of-concept exploit for CVE-2016-2098, targeting Ruby on Rails Action Pack remote code execution via unrestricted render method.

eremiel/cve-2019-5420

Python exploit script for CVE-2019-5420, targeting Ruby on Rails signed-session AES GCM key brute-forcing to achieve remote code execution in…

progfay/cve-2020-8165

Proof-of-concept exploit for CVE-2020-8165, a Ruby on Rails remote code execution vulnerability. Demonstrates exploitation of the unsafe…

3rg1s/cve-2016-2098

Proof-of-concept exploit for CVE-2016-2098, demonstrating remote Ruby code execution through Rails render method abuse; intended for security testing…

squ4nch/cve-2015-3224

Node.js exploit for CVE-2015-3224, achieving unauthenticated RCE on Rails web-console by spoofing X-Forwarded-For to bypass IP whitelist and…

bad3r/railroadbandit

Demonstrates exploitation of Ruby on Rails CVE-2019-5418, a file disclosure vulnerability, for educational purposes.

oxben10/cve-2013-0156

Python exploit script for CVE-2013-0156, a remote code execution vulnerability in Ruby on Rails via insecure YAML deserialization. Designed for…

jjdt12/kuang_grade_mk11

Pseudo shell for exploiting CVE-2013-0156, providing a command-line interface for automated exploitation of the Ruby on Rails XML/YAML parser…

cyberharsh/ruby-on-rails-path-traversal-vulnerability-cve-2018-3760-

Docker-based lab demonstrating CVE-2018-3760 path traversal in Ruby on Rails Sprockets, with POC and environment setup for security testing and…

7s26simon/cve-2013-0156

Executes remote code on vulnerable Rails applications via YAML deserialization (CVE-2013-0156); designed for CTFs and authorized penetration tests.

lucasamorimca/cve-2020-8163

Proof-of-concept exploit for CVE-2020-8163, a remote code execution vulnerability in Rails < 5.0.1 via user-controlled locals, with a testable…

zer0sumgam3/cve-2026-66066-poc

Reproducible lab for CVE-2026-66066: file-read-to-RCE exploit chain via Ruby on Rails Active Storage and libvips HDF5 matload. Includes Python…

sic4rio/cve-2015-3224

Python exploit for CVE-2015-3224, bypassing IP whitelist in Ruby on Rails web console to achieve remote code execution with interactive reverse shell.

mpgn/cve-2019-5418

Proof-of-concept exploit for CVE-2019-5418, demonstrating file content disclosure on Ruby on Rails via crafted Accept headers, with a demo…

h4ms1k/cve-2020-8163

Docker-based lab environment and exploit script for CVE-2020-8163, a blind remote code execution vulnerability in Rails versions before 5.0.1 and…