Sploitus

Exploit for CVE-2013-0156

kitploit · 2026-08-25

Exploit Code

MARKDOWN16 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-7S26SIMON-CVE-2013-0156
# Rails YAML反序列化RCE (CVE-2013-0156) - 兼容PentesterLab

# 移除Ronin依赖,兼容Ruby 3.x的版本,源自 https://gist.github.com/postmodern/4499206

# 

# 用法: ruby rails_rce.rb http://target/ "system('/usr/local/bin/score UUID')"

# 

# ⚠️ 法律声明 ⚠️

# 

# 此脚本仅供教育目的和授权安全测试使用。