user: pentestercrab

2232 karma | created 10 years ago

recent submissions

Ruby Array Pack Bleed (nastystereo.com)

62 pts|1 month ago|1 comment

Ruby Array Pack Bleed – Impacts Ruby 1.6.7 to 4.0.0 (nastystereo.com)

9 pts|2 months ago|discuss

Inline Style Exfiltration: leaking data with chained CSS conditionals (portswigger.net)

1 pts|6 months ago|discuss

Marshal madness: A brief history of Ruby deserialization exploits (blog.trailofbits.com)

25 pts|6 months ago|4 comments

Breaking the Sorting Barrier for Directed Single-Source Shortest Paths (arxiv.org)

99 pts|6 months ago|3 comments

(no title)

7 months ago|discuss

(no title)

10 months ago|discuss

New Method to Leverage Unsafe Reflection and Deserialisation to RCE on Rails (elttam.com)

1 pts|1 year ago|discuss

Escaping Ruby's Gem:SafeMarshal Sandbox (nastystereo.com)

2 pts|1 year ago|1 comment

Escaping Ruby's Gem:SafeMarshal Sandbox (nastystereo.com)

3 pts|1 year ago|discuss

RubyGem's Gem:SafeMarshal buffer overrun with length larger than fit into a byte (github.com)

1 pts|1 year ago|discuss

(no title)

1 year ago|discuss

CORS Vulnerabilities in Go: Vulnerable Patterns and Lessons (pentesterlab.com)

1 pts|1 year ago|discuss

Shiny Vulnerabilities in R's Most Popular Web Framework (nastystereo.com)

1 pts|1 year ago|discuss

PentesterLab: Web Hacking and Security Code Review 600 exercises and 700 videos (pentesterlab.com)

1 pts|1 year ago|discuss

Cross-Site Post Requests Without a Content-Type Header – CSRF Attack (nastystereo.com)

2 pts|1 year ago|discuss

Execute commands by sending JSON? Ruby deserialization vulnerabilities (github.blog)

2 pts|1 year ago|discuss

JWT Libraries Block Algorithm Confusion: Key Lessons for Code Review (pentesterlab.com)

3 pts|1 year ago|discuss

Chosen-Prefix Collisions on AES-Like Hashing (eprint.iacr.org)

2 pts|1 year ago|discuss

(no title)

1 year ago|discuss