corpus.blog
42,390 blogs · 5,361,753 posts Claim your blog
Record · corpus.blog/posts/01a0fcb0-b475-70f0-8435-478f47fbd412

Ruby Marshal Kick-off Gadgets - elttam

elttam.com · published 26 August 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at elttam.com Wayback capture
1blogs citing
First cited
31 Aug 2026
Most recent
31 Aug 2026
Rank this month
not ranked
External links
13
Words captured
3,724

Cited by

Blog
In the post
Date
PentesterLab
Research Worth Reading - Week 35, 2026 Read at the source ↗
31 Aug 2026

Links from this post

Link
Host
https://trailofbits.com/
trailofbits.com
https://github.com/trailofbits/publications/blob/master/reviews/2024-12-rubycentral-rubygemsorg-securityreview.pdf
github.com
https://github.com/rubygems/rubygems/commit/141c2f4388f0f6f81e4d420d73961dbd68f5c08f
github.com
https://github.com/rubygems/rubygems/commit/62b49465f8f770ebbee51d7cb4de7745cbb0d78c
github.com
https://nastystereo.com/security/ruby-4.0-deserialization.html
nastystereo.com
https://lcamtuf.coredump.cx/postxss/
lcamtuf.coredump.cx
https://docs.ruby-lang.org/en/master/Marshal.html
docs.ruby-lang.org
https://github.com/ruby/ruby/blob/master/doc/language/marshal.rdoc
github.com
https://devcraft.io/2022/04/04/universal-deserialisation-gadget-for-ruby-2-x-3-x.html
devcraft.io
https://github.com/ruby/ruby/blob/v4.0.6/random.c
github.com
https://github.com/ruby/ruby/blob/v4.0.6/hash.c
github.com
https://nastystereo.com/security/ruby-3.4-deserialization.html
nastystereo.com
https://github.com/ruby/ruby/blob/v4.0.6/vm_eval.c
github.com
Elsewhere on elttam.com (1)