mala

Rails の CVE-2019-5418 は RCE (Remote code execution) です

2019-03-23 更新

• Remote Code Executionとして、Advisoryが更新された。
• https://groups.google.com/d/msg/rubyonrails-security/zRNVOUhKHrg/GmmcVXcmAAAJ
• Thanks to @sorah @tenderlove

前置き

masatokinugawa

0CTF/TCTF 2018 Quals h4x0rs.space Writeup (Web 1000)

問題

I've made a blog platform let you write your secret. 
Nobody can know it since I enabled all of modern web security mechanism, is it cool, huh?

Get `document. cookie` of the admin.

h4x0rs.space

mala

var express = require("express");
var app = express();
var expressWs = require('express-ws')(app);

app.use(express.static(__dirname + '/public'));
app.listen(3000, function () {
  console.log('Example app listening on port 3000!');
});
app.ws('/state', function(ws, req) {
  ws.on('message', function(msg) {

voluntas

WebRTC コトハジメ

更新

2023-10-04

作者

@voluntas

バージョン

2023.2

URL

https://voluntas.github.io/