PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

How To: Command Injections

hackerone.com | vulnerability | #rce | #ruby | #web-security | #tutorial | #command-injection
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Command injection tutorial: setup with two Ruby test scripts, sleep-based timing to detect first-order injection, how it differs from RCE, plus notes on defeating mitigations and common caveats.
Published
Collected

Related coverage

vulnerability · vercel.com
Reproducing, disclosing, and fixing the libheif vulnerability with Hacktron and the maintainers
How Vercel and Hacktron coordinated a fix for a remote code execution vulnerability that reached Next.js image optimization through sharp, libvips, and libheif.
vulnerability · vercel.com
Our $1 million hacker challenge for React2Shell
We paid $1M to security researchers to break our WAF. Here's what we learned defending against React2Shell.
blog · yeswehack.com
Dojo challenge #41 - Ruby treasure winners & writeup
Winners and writeups for Dojo challenge #41 'Ruby treasure', where participants bypassed a regex filter and exploited a command injection in Ruby's IO.read function to capture the flag.
vulnerability · hackerone.com
Mitigating CWE-352: Cross-Site Request Forgery in Ruby Applications
A guide to CSRF (CWE-352) in Ruby apps: verify Rails authenticity tokens, keep side effects off GET requests, and audit skip_before_action bypasses, then fix with proper token validation.
vulnerability · hackerone.com
How To: Server-Side Request Forgery (SSRF)
Server-Side Request Forgery (SSRF) tutorial: using a vulnerable Ruby/Sinatra app, it covers the impact, how to test for SSRF, pivots into internal networks, defeating mitigations and caveats.
Medium · vulnerability · depthfirst.com
Casting a Net(ty) for Bugs, and Catching a Big One (CVE-2025-59419)
Netty's SMTP codec allowed CRLF injection in user input, letting attackers append forged mail commands that bypass SPF, DKIM and DMARC; depthfirst's agent found it, tracked as CVE-2025-59419.
Back