Rails PoC exploits for CVE-2013-0156 and CVE-2013-0155

Ronin - Rails PoC exploits for CVE-2013-0156 and CVE-2013-0155

Rails PoC exploits for CVE-2013-0156 and CVE-2013-0155

Next, [ActionDispatch::Http::Parameters] takes the parsed request parameters and merges them with the path parameters. Note that the path parameters are first merged into the request parameters, to ensure that the request parameters cannot override the path parameters. Also note that when a Hash is merged into a HashWithIndifferentAccess , all keys are converted to Strings and all sub-Hashes converted to Indifferent ones. This ensures that params contains no Symbol keys and cannot be passed to find_by_* methods; despite what [CVE-2012-5664] claims.

Full article: http://ronin-ruby.github.com/blog/2013/01/09/rails-pocs.html

Tweets

@_shyam » 04 Feb '13, 4am
Rails security [link]
@sec_prof » 30 Jan '13, 9pm
This is great info on the Rails PoC for recent vulnerabilities [link]
@postmodern_mod3 » 29 Jan '13, 5am
@OSVDB @jjarmoc also if you want more technical details how the vuln is triggered: https://t.co/Cvya37t5 [link]
@thibaut_barrere » 15 Jan '13, 4pm
@raganwald Metasploit on OS X on Rails; see [link] (and others in the git repo). Also, I like ronin [link]
@skeuomorf » 15 Jan '13, 9am
RT @dragosr: Don't forget the RubyOnRails bug. It's probably a way bigger deal than the Java issues. [link]
@dragosr » 15 Jan '13, 9am
Don't forget the RubyOnRails bug. It's probably a way bigger deal than the Java issues. [link]
@rails_rt_ja » 15 Jan '13, 1am
RT @ra_moo_t: ほむほむ・・・ / “Ronin - Rails PoC exploits for CVE-2013-0156 and CVE-2013-0155” [link]
@ra_moo_t » 15 Jan '13, 12am
ほむほむ・・・ / “Ronin - Rails PoC exploits for CVE-2013-0156 and CVE-2013-0155” [link]
@mikewadhera » 14 Jan '13, 6pm
Good explanation & proof of concept of recent Ruby on Rails remote code execution security vunerability [link]
@sr_valeriano » 14 Jan '13, 11am
Ronin - Rails PoC exploits for CVE-2013-0156 and CVE-2013-0155 [link] (via Instapaper)
@matias_baruch » 12 Jan '13, 6pm
Los bugs en Rails: [link]
@neverett » 11 Jan '13, 9pm
Ruby on Rails developers, please read: [link]
@geovedi » 11 Jan '13, 1pm
RT @joernchen: Nice writeup on the recent RoR vulns [link]
@joernchen » 11 Jan '13, 1pm
Nice writeup on the recent RoR vulns [link]
@naneau » 11 Jan '13, 1pm
On the recent Ruby on Rails vulnerabilities: [link]
@rails_rt_ja » 11 Jan '13, 12pm
RT @suffer_Yukimori: ちなみに、原理はこちら。 [link] 説明みても僕には良く分からない…
@suffer_Yukimori » 11 Jan '13, 11am
ちなみに、原理はこちら。 [link] 説明みても僕には良く分からない…
@roidrage » 11 Jan '13, 9am
[link] and [link] it is! Thanks @badboy_ and @benediktdeicke!
@badboy_ » 11 Jan '13, 9am
@roidrage One of these? [link]
@netebe » 11 Jan '13, 9am
Взгляд с другой стороны - эпичные рельсы [link]
@caseyjohnellis » 11 Jan '13, 9am
RT @h0meless: And the Rails exploits start flying in... [link]
@g4l4drim » 11 Jan '13, 8am
RT @unixfreaxjp: #Threat Info - Ruby on Rails Vulnerability Leads to Servers Remote Command Execution (Sucuri) [link] PoC: [link]
@h0meless » 11 Jan '13, 7am
And the Rails exploits start flying in... [link]
@gautamrege » 11 Jan '13, 6am
Excellent post about Rails exploits [link]
@unixfreaxjp » 11 Jan '13, 4am
#Threat Info - Ruby on Rails Vulnerability Leads to Servers Remote Command Execution (Sucuri) [link] PoC: [link]
@KarlRanseier » 10 Jan '13, 11pm
RT @Hfuhs: Rails PoC exploits for CVE-2013-0156 and CVE-2013-0155 - [link]
@JadedAidan » 10 Jan '13, 9pm
Glad I patched up all my servers.... [link]
@practicingruby » 10 Jan '13, 9pm
@peeja It has been exploitable in very version of Rails for years. But it's an obscure bug that was found indirectly: [link]
@x0rz » 10 Jan '13, 7pm
RoR webapp vulns [link]
@mdranta » 10 Jan '13, 7pm
@indigirl that was mainly aimed at you, also see: [link]
@Noxbru » 10 Jan '13, 7pm
explicación de las recientes vulnerabilidades de Ruby on Rails [link]
@Rinaldi2pt0 » 10 Jan '13, 7pm
If you don't want your Rails apps to get a colonoscopy, patch them (CVE-2013-0156 and CVE-2013-0155 via Ronin) [link]
@realytcracker » 10 Jan '13, 7pm
ruby on rails is super Oh exploitable! [link] thank you based god
@Glesec » 10 Jan '13, 7pm
Rails PoC #exploits for CVE-2013-0156 and CVE-2013-0155 | Ronin [link] #RoR #ZeroDay #0day
@danielmsantana » 10 Jan '13, 6pm
RT @RSnake: Yup, Rails vuln in full effect: [link]
@RSnake » 10 Jan '13, 6pm
Yup, Rails vuln in full effect: [link]
@gabemarshall » 10 Jan '13, 6pm
Update your Rails apps, POC exploits are out. [link] #websec #webdev #rubyonrails
@ermouth » 10 Jan '13, 6pm
Рельсы дырявые совсем [link] Я в своё время на них смотрел – и "невзял"из-за кастрюли с макаронами вместо API.
@juanger_ » 10 Jan '13, 5pm
"Rails PoC exploits for CVE-2013-0156 and CVE-2013-0155" [link] - recommended via @Prismatic
@neliojrr » 10 Jan '13, 4pm
RT @fnando: Ronin - Rails PoC exploits for CVE-2013-0156 and CVE-2013-0155 ~ [link]
@ericness » 10 Jan '13, 4pm
detailed explination of how the ruby on rails exploit works - [link]
@bogotaconf » 10 Jan '13, 3pm
Salieron los exploits para las vulnerabilidades encontradas en Rails [link]
@kcqon » 10 Jan '13, 3pm
Latest Rails vulnerabilities are now exploitable with Metasploit ( [link] ) and Ronin ( [link] ) too
@airizon » 10 Jan '13, 3pm
RT @ChrisJohnRiley: [SuggestedReading] Rails PoC exploits for CVE-2013-0156 and CVE-2013-0155 [link]
@jjarmoc » 10 Jan '13, 3pm
RT @miscsecurity: Rails PoC exploits for CVE-2013-0156 and CVE-2013-0155 [link]
@superninjarobot » 10 Jan '13, 3pm
Here's a detailed PoC for the Rails CVE issue. (Notice this is a Rails bug, not YAML bug, unlike some claims.) [link]
@dobacco » 10 Jan '13, 3pm
Mmm pocs are out [link]
@kritikal » 10 Jan '13, 2pm
Rails Parameter Parsing Exploit Explained - [link]
@MelGallagherNYC » 10 Jan '13, 2pm
RT @tek_news: HNews: Rails PoC exploits for CVE-2013-0156 and CVE-2013-0155 [link] #ror
@tek_news » 10 Jan '13, 2pm
HNews: Rails PoC exploits for CVE-2013-0156 and CVE-2013-0155 [link] #ror