Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2019-5420 PoC — Ruby on Rails 安全特征问题漏洞

Source
https://github.com/scumdestroy/CVE-2019-5420.rb
Associated Vulnerability
Title:Ruby on Rails 安全特征问题漏洞 (CVE-2019-5420)
Description:A remote code execution vulnerability in development mode Rails <5.2.2.1, <6.0.0.beta3 can allow an attacker to guess the automatically generated development mode secret token. This secret token can be used in combination with other Rails internals to escalate to a remote code execution exploit.
Description
POC Exploit written in Ruby
Readme
# CVE-2019-5420.rb
POC Exploit written in Ruby

----

Input your cookies from the target app into the script and run via `ruby ./exploit.rb`
File Snapshot

 [4.0K]  /data/pocs/dfa76bc665c395a5c77654bf7d1d5ebda90b3dbe
├── [1.6K]  CVE-2019-5420.rb
└── [ 141]  README.md

0 directories, 2 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →