Record · corpus.blog/posts/01a0fcb0-b475-70f0-8435-478f52f62781

Ruby 2.x Universal RCE Deserialization Gadget Chain - elttam

elttam.com · published 24 March 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at elttam.com Wayback capture

1blogs citing

First cited: 31 Jul 2025
Most recent: 31 Jul 2025
Rank this month: not ranked
External links: 19
Words captured: 3,423

Cited by

Blog

In the post

Date

klezvirus.github.io

Serialization - A Hidden Threat Read at the source ↗

31 Jul 2025

Links from this post

Link

Host

https://www.ruby-lang.org/

ruby-lang.org

https://en.wikipedia.org/wiki/Serialization

en.wikipedia.org

https://www.owasp.org/images/7/72/OWASP_Top_10-2017_%28en%29.pdf.pdf

owasp.org

http://phrack.org/issues/69/12.html

phrack.org

https://twitter.com/joernchen

twitter.com

http://phenoelit.de

phenoelit.de

https://twitter.com/charliesome

twitter.com

https://docs.ruby-lang.org/en/2.5.0/Module.html

docs.ruby-lang.org

https://bugs.ruby-lang.org/issues/3511

bugs.ruby-lang.org

https://bugs.ruby-lang.org/issues/12731

bugs.ruby-lang.org

https://bugs.ruby-lang.org/issues/5653

bugs.ruby-lang.org

https://github.com/ruby/ruby/commit/ec7c76c446fcb7fafae2fa2f7eda78c2387fac23

github.com

https://secure.php.net/manual/en/language.oop5.magic.php

secure.php.net

https://ruby-doc.org/core-2.5.0/Marshal.html

ruby-doc.org

https://ruby-doc.org/stdlib-2.5.0/libdoc/tracer/rdoc/Tracer.html

ruby-doc.org

https://en.wikipedia.org/wiki/Three-way_comparison

en.wikipedia.org

https://ruby-doc.org/core-2.5.0/Kernel.html

ruby-doc.org

https://schd.ws/hosted_files/bsidessf2018/de/Fuzzing_Ruby_C_Extensions.pdf

schd.ws

https://medium.com/fuzzstation/breaking-rubys-unmarshal-with-afl-fuzz-6b5f72b581d5

medium.com