CVE-2013-0156: Rails Object Injection

This course explores the exploitation of CVE-2013-0156, a vulnerability in Ruby on Rails that allows for arbitrary code execution through XML deserialization. By adapting a public exploit, learners will gain hands-on experience in achieving code execution on a server.

Skills covered