EIP-2026-103113

This Metasploit module exploits a hard-coded session secret and unsafe deserialization in GitHub Enterprise to achieve remote code execution. It signs a malicious serialized Ruby object and sends it via a tampered cookie to trigger payload execution.