News for hackers. Stuff that matters.

A comment on Metasploit Rails 3 Remote Code Execution Hours Away.

Re:Metasploit Rails 3 Remote Code Execution Hours Away by postmodern_mod3 on Thursday January 10, 2013 @04:36AM (#5036162)
Proof-of-Concept Exploits for CVE-2013-0156 and CVE-2013-0155 are here:

rails_rce.rb (https://gist.github.com/4499206)

rails_sqli.rb (https://gist.github.com/4499032)

rails_dos.rb (https://gist.github.com/4499017)

rails_jsonq.rb (https://gist.github.com/4499030)

[ Parent | on HN ]

There are no comments on this comment yet.