Viewing profile — postmodern_mod3

Title got a little cut off. Should mention the new recon engine (ronin-recon) and the new local Web UI (ronin-app).

"but the ecosystem is the biggest problem by promoting magic." This argument isn't entirely true anymore. The Ruby ecosystem has mostly moved away from meta-programming, and embrac…

There is a significant anti-Ruby sentiment in the tech industry right now, especially in certain fields like InfoSec, that is being pushed by a very vocal subset of the community. …

Even Haskell has exceptions. Even with Strong Typing and Functional Programming, things can go wrong, like network issues or your hard drive fills up.

Recently there was a news story about how a typo in a US military address (.mil) caused top secret emails to accidentally be sent to a similar Mali address (.ml). This blog post sh…

There is not a Python equivalent to Ronin as a whole, to my knowledge. There are however Python libraries that provide some of the features of Ronin. For example, pwntools can be u…

It might still be. The original metasploit developers had a habit of vendoring all of their dependencies to create a mono-repo that "just worked" (tm), even after Bundler was creat…

One minor note: Crystal achieved basic Windows support as of 2021/11/18. https://github.com/crystal-lang/crystal/issues/5430 As of Crystal 1.5.0, Windows support is basically there…

How so? Go does not prevent you from writing a monolith. Furthermore, Go does not actually require that you check the err return value of functions.

You can write "complected" monoliths in any language. You can also write SOAs in any language. If you need native performance, Crystal is a better option, as it provides much of th…

- tooling: there is a VS Code plugin for Crystal ( https://marketplace.visualstudio.com/items?itemName=crystal-... ). There is also syntax highlighting for most popular editors, if…

If you are looking for a minimal alternative to RVM, you should also checkout chruby ( https://github.com/postmodern/chruby#readme ). It's only ~90 LoC, supports bash/zsh, optional…

Took a while to write a new blog post. Still, CVE-2013-0333 relies on the same YAML deserialization technique as CVE-2013-0156, so all the previous information is still relevant.

and write-up for those who are interested in the technical details: http://ronin-ruby.github.com/blog/2013/01/28/new-rails-poc.h...

Not unless nginx/apache routes the request directly to public/. There will definitely be more code-paths to YAML.load, but so far ActionDispatch::Http::Parameters has been the entr…

@benmmurphy seems to be the only one who knows how to get RCE via Syck (1.8.x YAML parser). https://twitter.com/benmmurphy/status/296025302986014720

Bonus points if you exfiltrate config/initializers/secret_token.rb.

Maybe graph the rate of vulnerabilities discovered vs. LoC/files added? It's safer to only use vulnerability counts as a metric for how interesting software is to security research…

YAML does not allow execution of arbitrary Ruby code. Some YAML types allow specifying a custom class, which the Psych YAML parser (default in Ruby 1.9) will call the initialize or…

What if I told you that there is a new web framework similar to Rails, called Fortran on Fails. It has zero vulnerabilities reported against it, ergo it must be 100% secure.

> Similar projects with a similar user base, like Django, don't have vulnerabilities of this severity with this frequency. Not all Django vulnerabilities have been discovered or re…

Here you go: https://gist.github.com/4660248

Vulnerability counts are misleading metric for security. They do not include the vulnerabilities which have not yet been discovered or created.