Pentest Book
Search…
/home/six2dez/.pentest-book
Contribute/Donate
Recon
Public info gathering
Root domains
Subdomain Enum
Webs recon
Network Scanning
Host Scanning
Packet Scanning
Enumeration
Files
SSL/TLS
Ports
Web Attacks
Web Technologies
APIs
JS
ASP.NET
JWT
GitHub
GitLab
WAFs
Firebird
Wordpress
WebDav
Joomla
Jenkins
IIS
VHosts
Firebase
OWA
OAuth
Flask
Symfony && Twig
Drupal
NoSQL (MongoDB, CouchDB)
PHP
RoR (Ruby on Rails)
JBoss - Java Deserialization
OneLogin - SAML Login
Flash SWF
Nginx
Python
Tomcat
Adobe AEM
Magento
SAP
MFA
GWT
Jira
OIDC (Open ID Connect)
ELK
Sharepoint
Others
Cloud
Exploitation
Payloads
Reverse Shells
File transfer
Post Exploitation
Linux
Pivoting
Windows
Mobile
General
Android
iOS
Others
Burp Suite
Password cracking
VirtualBox
Code review
Pentesting Web checklist
Internal Pentest
Web fuzzers review
Recon suites review
Subdomain tools review
Random
Master assessment mindmaps
BugBounty
Exploiting
tools everywhere
Powered By
GitBook
RoR (Ruby on Rails)
**Tools**
# https://github.com/presidentbeef/brakeman
gem install brakeman
brakeman /path/to/rails/application
​
# RoR RCE's
# https://bishopfox.com/blog/ruby-vulnerabilities-exploits
Previous
PHP
Next
JBoss - Java Deserialization
Last modified
1mo ago
Export as PDF
Copy link
Edit on GitHub