Scripta

$A fractured, hollow effigy reassembled from shards and suspended on marionette strings, exhaling fire from its chest, an allegory for an object rebuilt by Marshal.load without ever being initialized.$

11 June 2026
Another Ruby Marshal Chain:RCE in Rails

A novel Ruby on Rails deserialisation gadget chain: two native ActiveSupport gadgets run code via Marshal.load on a patched framework — no ERB.

ruby · deserialization · gadget-chain