Ruby 2.x Universal RCE Deserialization Gadget Chain

This exercise covers how to get code execution by using a Ruby Universal Gadget when an attacker controls the data passed to Marshal.load()


You can access the course for this exercise by clicking here


More details on how to access the online version of this exercise can be found here

Green Badge

This exercise is part of the Green Badge.