Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2019-5420 PoC — Ruby on Rails 安全特征问题漏洞

Source
https://github.com/trickstersec/CVE-2019-5420
Associated Vulnerability
Title:Ruby on Rails 安全特征问题漏洞 (CVE-2019-5420)
Description:A remote code execution vulnerability in development mode Rails <5.2.2.1, <6.0.0.beta3 can allow an attacker to guess the automatically generated development mode secret token. This secret token can be used in combination with other Rails internals to escalate to a remote code execution exploit.
Description
Exploit for the Rails CVE-2019-5420
Readme
# CVE-2019-5420
Exploit for Rails CVE-2019-5420

# The issue
Until Rails v5.2.2, when secure the sessions in development mode, the application derives the key from the name of the application.
File Snapshot

 [4.0K]  /data/pocs/7dfd81923e8da14ec57d40a61100443eef9893ab
├── [4.1K]  exploit.rb
└── [ 193]  README.md

0 directories, 2 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →