Collaborate Disseminate
Every once in a while, this job helps you to discover something new and completely fascinating that has little to do with hacking but is worth sharing nonetheless. Turning a single brass bolt into a beautiful Cupid’s bow is certainly one of those times.
Watching [Pablo Cimadevila] work in the …read more
I am trying to create a metasploit module with a gem that is not installed base.
I followed the procedure here:
https://github.com/rapid7/metasploit-framework/wiki/How-to-add-and-update-gems-in-metasploit-framework
I would like to use thi… Continue reading How to create a metasploit module with an external gem
I am performing White Box testing on Rails application with static code analyzing tools like brakeman, I came across an instance where the developer is loading images using file.open.
file = File.open(“#{Rails.root}/app/asse… Continue reading Rails File.open(#{Rails.root}) is vulnerable to LFI?
I am writing a metasploit module, I would like to use another module from mine (set its datastore from inside my exploit method, and run it, without user interaction), is that possible? if yes, how?
For example, I would like… Continue reading Use metasploit modules one from another
An anonymous reader quotes a report from ZDNet: A software engineer pulled a personal project down after he found out that one of the companies using it had recently signed a contract with the U.S. Immigrations and Customs Enforcement (ICE). The engine… Continue reading Developer Takes Down Ruby Library After He Finds Out ICE Was Using It
I have script to exploit a group of hosts as seen on
and the con_cmd_file is like this
I run msfconsole -r iter_rc but it returns
[] Processing iter_rc for ERB directives.
[] resource (iter_rc)> Ruby Code (384 bytes)… Continue reading metasploit multiple targets [on hold]
Maintainers of the RubyGems package repository have yanked 18 malicious versions of 11 Ruby libraries that contained a backdoor mechanism and were caught inserting code that launched hidden cryptocurrency mining operations inside other people’s Ruby pr… Continue reading Backdoor Code Found In 11 Ruby Libraries
The compromise of several older versions of a popular Ruby software package (aka a Ruby “gem”) has led to the discovery of a more widespread effort to inject malware and mining software through Trojanized gems. What happened? Two days ago, … Continue reading Backdoored Ruby gems stole credentials, injected cryptomining code
An eagle-eyed developer has discovered a backdoor recently sneaked into a library (or ‘gem’) used by Ruby on Rails (RoR) web apps to check password strength. Continue reading Backdoor discovered in Ruby strong_password library
I have a project that requires users to submit a photo of a driver’s license as proof of identity. This image just needs to be seen once by an administrator, and has no use after their id is verified.
This project uses AWS … Continue reading is there any need to encrypt sensitive images in a database?