PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Marshal madness: A brief history of Ruby deserialization exploits

blog.trailofbits.com | research | #ruby | #deserialization | #vulnerabilities | #trail-of-bits | #marshal | #exploits | #gadget-chain | #vulnerability-history | #gadget-chains | #security-history
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A decade-long history of Ruby Marshal deserialization exploits shows researchers repeatedly bypassing patches, arguing for fundamental ecosystem changes rather than a patch-and-hope approach.
Published
Collected

Related coverage

research · blog.trailofbits.com
Empire Hacking Turns One
Trail of Bits marks one year of its Empire Hacking meetup: 14 talks on pragmatic security research and 312 members, spanning baseband exploitation, OS X malware, and the DARPA Cyber Grand Challenge.
research · blog.trailofbits.com
Closing the Windows Gap
Arguing Western CTFs neglect Windows while Russian ones excel, Trail of Bits releases AppJailLauncher, a framework for building secure, exploitable Windows challenges to close the 'Windows gap.'
research · blog.trailofbits.com
Empire Hacking, a New Meetup in NYC
Trail of Bits launches Empire Hacking, a bi-monthly NYC meetup for attack-and-defense research under Chatham House Rule; debut talks: offense at scale, termination proofs, baseband exploitation.
research · blog.trailofbits.com
Trail of Bits Adds Mobile Security Researcher Nicholas DePetrillo to Growing Team
Veteran mobile security researcher Nicholas DePetrillo joins Trail of Bits as Principal Security Researcher, bringing 10+ years across baseband and mobile platforms; headcount grows to 13.
research · portswigger.net
The Fragile Lock: Novel Bypasses For SAML Authentication
Novel SAML signature-wrapping attacks — attribute pollution, namespace confusion and Void Canonicalization — achieve full authentication bypass in Ruby and PHP libraries, including GitLab Enterprise.
research · depthfirst.com
Behind the GitLab RCE: A depthfirst Journey into the Ruby Ecosystem
The investigation shows how memory-safety flaws in native Ruby gems can become remotely reachable through widely deployed applications such as GitLab. Teams should inventory native-extension dependencies and move self-managed GitLab and Oj installations to fixed releases.
Back