PRO

Ruby 2.x Universal RCE Deserialization Gadget Chain


This exercise covers how to get code execution by using a Ruby Universal Gadget when an attacker controls the data passed to Marshal.load()

Course

You can access the course for this exercise by clicking here

Online

More details on how to access the online version of this exercise can be found here

Green Badge

This exercise is part of the Green Badge.