Rails Doubletap RCE

screenshot of Rails Doubletap RCE
rails

RCE on Rails 5.2.2 using a path traversal (CVE-2019-5418) and a deserialization of Ruby objects (CVE-2019-5420)

## Overview
The Rails double-tap exploit presents a significant security concern for applications running on Rails 5.2.2. This exploit leverages two primary vulnerabilities, CVE-2019-5418 and CVE-2019-5420, which involve path traversal and deserialization of Ruby objects. Understanding these vulnerabilities is crucial for developers and security professionals alike, as they can lead to unauthorized access to sensitive information and potential code execution on the server.

Identifying and mitigating these vulnerabilities is essential to safeguard Rails applications. The exploit itself is methodical, first checking for vulnerability in the application, then maneuvering to decrypt and access sensitive configuration files. By crafting specific requests to certain resources, it can execute harmful code, making awareness and proactive measures imperative for anyone involved in maintaining Rails-based systems.

## Features
- **Vulnerability Checks**: The exploit initially verifies if the Rails application is vulnerable to CVE-2019-5418, ensuring the attack is targeted and effective.
- **Credential Access**: It retrieves the content of sensitive files such as `credentials.yml.enc` and `master.key`, posing a serious risk to application security.
- **Code Execution**: Once the exploit is successful, it can execute arbitrary code on the targeted server, leading to complete system compromise.
- **Race Condition Exploitation**: The method uses race conditions to access the two files without relying solely on the cache, enhancing the exploit’s effectiveness.
- **Detailed Technical Analysis**: Comprehensive documentation and technical breakdowns are available for each vulnerability, aiding in understanding and defense strategies.
- **Mitigation Awareness**: Clear guidelines for fixing the identified vulnerabilities are provided, allowing developers to take action post-exploitation.
rails
Ruby on Rails

Ruby on Rails, often referred to as Rails, is an open-source web application framework written in Ruby. Known for its convention over configuration and don't repeat yourself (DRY) principles, Rails simplifies and accelerates the development of database-backed web applications.