CVE-2016-0752

This Metasploit module exploits CVE-2016-0752, a remote code execution vulnerability in Ruby on Rails' dynamic render method. It uploads a malicious file via a POST request and triggers execution by manipulating the render path.

This repository contains a functional Rails application demonstrating CVE-2016-0752, a dynamic render vulnerability leading to RCE. The vulnerable endpoint in `UserController` allows arbitrary file rendering, which can be exploited to execute code via crafted requests.

This repository contains a functional Rails application demonstrating CVE-2016-0752, a dynamic render vulnerability leading to RCE. The vulnerable code is in `UserController#show`, which directly renders user-supplied input without validation.

This Metasploit module exploits CVE-2016-0752, a remote code execution vulnerability in Ruby on Rails' dynamic render method. It uploads a malicious file via a POST request and triggers execution by leveraging user parameters in the render function.