# mpgn/Rails-doubletap-RCE

<https://repo.masters-masters.com/en/repos/mpgn/Rails-doubletap-RCE>

[Home](https://repo.masters-masters.com/en) › [mpgn](https://repo.masters-masters.com/en/owners/mpgn) › [Rails-doubletap-RCE](https://repo.masters-masters.com/en/repos/mpgn/Rails-doubletap-RCE)

mpgn/Rails-doubletap-RCE has 132 stars on GitHub. Its RepoMasters card: Prototype tier. RCE on Rails 5.2.2 using a path traversal (CVE-2019-5418) and a…

| Field | Value |
| --- | --- |
| Owner | [mpgn](https://repo.masters-masters.com/en/owners/mpgn) |
| Stars | 132 |
| Forks | 25 |
| Language | [Ruby](https://repo.masters-masters.com/en/languages/ruby) |
| License | None |
| Created | 2019 |
| Topics | rails |
| Tier | [Prototype (100 to 249 ★)](https://repo.masters-masters.com/en/ranks/rush) |
| View on GitHub | [mpgn/Rails-doubletap-RCE](https://github.com/mpgn/Rails-doubletap-RCE) |

## Repository

RCE on Rails 5.2.2 using a path traversal (CVE-2019-5418) and a deserialization of Ruby objects (CVE-2019-5420)

The tier for repos with 100 to 249 ★. Published odds per card pulled: 70%. Rarity: Common.

## More repos by mpgn

- [mpgn/BackupOperatorToDA · ★ 451 · C++ · Alpha](https://repo.masters-masters.com/en/repos/mpgn/BackupOperatorToDA)
- [mpgn/Padding-oracle-attack · ★ 331 · Python · Alpha](https://repo.masters-masters.com/en/repos/mpgn/Padding-oracle-attack)
- [mpgn/Spring-Boot-Actuator-Exploit · ★ 328 · Java · Alpha](https://repo.masters-masters.com/en/repos/mpgn/Spring-Boot-Actuator-Exploit)
- [mpgn/poodle-PoC · ★ 268 · Python · Alpha](https://repo.masters-masters.com/en/repos/mpgn/poodle-PoC)
- [mpgn/CVE-2019-0192 · ★ 208 · Python · Prototype](https://repo.masters-masters.com/en/repos/mpgn/CVE-2019-0192)
- [mpgn/ByP-SOP · ★ 203 · HTML · Prototype](https://repo.masters-masters.com/en/repos/mpgn/ByP-SOP)

## Nearby in Ruby

- [AndyObtiva/glimmer-dsl-swt · ★ 132 · Ruby · Prototype](https://repo.masters-masters.com/en/repos/AndyObtiva/glimmer-dsl-swt)
- [bullet-train-co/showcase · ★ 132 · Ruby · Prototype](https://repo.masters-masters.com/en/repos/bullet-train-co/showcase)
- [activerabbit-ai/activerabbit · ★ 132 · Ruby · Prototype](https://repo.masters-masters.com/en/repos/activerabbit-ai/activerabbit)
- [evanphx/gx · ★ 132 · Ruby · Prototype](https://repo.masters-masters.com/en/repos/evanphx/gx)
- [jnunemaker/twitter-app · ★ 132 · Ruby · Prototype](https://repo.masters-masters.com/en/repos/jnunemaker/twitter-app)
- [jqr/php-serialize · ★ 132 · Ruby · Prototype](https://repo.masters-masters.com/en/repos/jqr/php-serialize)

---
Data: GitHub · Illustration drawn by RepoMasters from the repo’s ID and its language color.