p pentestercrab Joined 11 years ago Karma 2,279 Submissions 285 Member since Aug 11 View on Hacker News
Ruby 4.0 Universal RCE Deserialization Gadget Chain e elttam.com 78 pentestercrab 2 months ago 22 comments
Cruising for Shells in Flowise – 6 RCEs That Rode Flowise Low and Slow e elttam.com 1 pentestercrab 3 months ago 0 comments
When Dawkins met Claude – Could this AI be conscious? u unherd.com 64 pentestercrab 6 months ago 434 comments
Ruby Array Pack Bleed – Impacts Ruby 1.6.7 to 4.0.0 n nastystereo.com 9 pentestercrab 10 months ago 0 comments
Inline Style Exfiltration: leaking data with chained CSS conditionals p portswigger.net 1 pentestercrab 1 year ago 0 comments
Marshal madness: A brief history of Ruby deserialization exploits b blog.trailofbits.com 25 pentestercrab 1 year ago 4 comments
Breaking the Sorting Barrier for Directed Single-Source Shortest Paths a arxiv.org 99 pentestercrab 1 year ago 3 comments
New Method to Leverage Unsafe Reflection and Deserialisation to RCE on Rails e elttam.com 1 pentestercrab 1 year ago 0 comments