1.Dojo challenge #53 Hacker Club solutionblog | 2026-08-26 07:42 | yeswehack.com | Original ↗ | .md | #bug-bounty | #rce | #pentesting
2.Behind the GitLab RCE: A depthfirst Journey into the Ruby Ecosystemresearch | 2026-07-27 12:00 | depthfirst.com | Original ↗ | .md | #rce | #supply-chain | #featured
3.Going depthfirst: Achieving GitLab RCE via Two Ruby Memory Corruption Vulnerabilitiesresearch | 2026-07-24 12:00 | depthfirst.com | Original ↗ | .md | #rce | #featured | #vulnerability-research
4.SleeperGem: RubyGems supply chain attack targets dormant maintainer accountsincident | 2026-07-19 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #featured | #ruby
5.Extending Ruzzy with LibAFLresearch | 2026-04-29 11:00 | blog.trailofbits.com | Original ↗ | .md | #appsec | #ruby | #fuzzing
6.How Neo found an SSRF vulnerability in Faraday, and why it matters for every team that ships codevulnerability | 2026-03-03 17:05 | CVE-2026-25765 | projectdiscovery.io | Original ↗ | .md | #ai-security | #bug-bounty | #supply-chain
7.Dojo challenge #48 RubitMQ solutionblog | 2026-02-19 08:17 | yeswehack.com | Original ↗ | .md | #rce | #ruby | #ctf
8.The Fragile Lock: Novel Bypasses For SAML Authenticationresearch | 2026-01-21 10:34 | portswigger.net | Original ↗ | .md | #appsec | #ruby | #authentication-bypass
9.Dojo challenge #44 Hardware monitor write-upblog | 2025-09-24 13:41 | yeswehack.com | Original ↗ | .md | #rce | #ruby | #ctf
10.Marshal madness: A brief history of Ruby deserialization exploitsresearch | 2025-08-19 11:00 | blog.trailofbits.com | Original ↗ | .md | #ruby | #deserialization | #vulnerabilities
11.Dojo challenge #41 - Ruby treasure winners & writeupblog | 2025-06-04 14:53 | yeswehack.com | Original ↗ | .md | #bug-bounty | #ruby | #ctf
12.New Dojo sandbox environment for creating Ruby CTF challengesblog | 2025-04-28 14:30 | yeswehack.com | Original ↗ | .md | #bug-bounty | #ruby-on-rails | #ruby
13.LiquidFiles Vulnerabilities: From Discovery to Disclosureresearch | 2025-02-12 21:00 | projectblack.io | Original ↗ | .md | #vulnerability-research | #ruby | #semgrep
14.Auditing the Ruby ecosystem's central package repositoryblog | 2024-12-11 14:00 | blog.trailofbits.com | Original ↗ | .md | #supply-chain | #ruby | #open-source
15.35 more Semgrep rules: infrastructure, supply chain, and Rubyblog | 2024-12-09 14:00 | blog.trailofbits.com | Original ↗ | .md | #supply-chain | #ruby | #infrastructure-as-code
16.Flexible Data Retrieval at Scale with HAQLblog | 2024-11-15 18:12 | hackerone.com | Original ↗ | .md | #ruby | #hackerone | #engineering
17.Introducing Ruzzy, a coverage-guided Ruby fuzzerblog | 2024-03-29 13:30 | blog.trailofbits.com | Original ↗ | .md | #ruby | #fuzzing | #application-security
18.Mitigating CWE-352: Cross-Site Request Forgery in Ruby Applicationsvulnerability | 2024-01-23 06:38 | hackerone.com | Original ↗ | .md | #ruby | #web-security | #csrf
19.Pre-Auth RCE in Aspera Faspex: Case Guide for Auditing Ruby on Railsresearch | 2023-02-02 00:00 | slcyber.io | Original ↗ | .md | #rce | #vulnerability-research | #ruby
20.Ruby Vulnerabilities: Exploiting Dangerous Open, Send and Deserialization Operationsvulnerability | 2022-05-17 00:00 | bishopfox.com | Original ↗ | .md | #rce | #ruby-on-rails | #ruby
21.Python "Gotchas" Ruby Developers Should Knowblog | 2021-05-27 01:00 | hackerone.com | Original ↗ | .md | #ruby | #code-review | #python
22.Code Reviewer Spotlight: Tristan Dunnblog | 2018-11-26 07:00 | hackerone.com | Original ↗ | .md | #ruby | #code-review | #interview
23.Code Reviewer Spotlight: Dylan Dropblog | 2018-11-05 07:05 | hackerone.com | Original ↗ | .md | #ruby | #code-review | #interview
24.How To: Command Injectionsvulnerability | 2017-07-07 14:00 | hackerone.com | Original ↗ | .md | #rce | #ruby | #web-security
25.How To: Server-Side Request Forgery (SSRF)vulnerability | 2017-06-14 18:00 | hackerone.com | Original ↗ | .md | #ruby | #web-security | #tutorial
26.Introducing the RubySec Field Guideblog | 2015-06-08 11:50 | blog.trailofbits.com | Original ↗ | .md | #ruby | #fuzzing | #secure-coding
27.Free Ruby Security Workshopblog | 2013-06-03 16:15 | blog.trailofbits.com | Original ↗ | .md | #ruby-on-rails | #ruby | #deserialization