Ruby on Rails for Pentesters

Ruby on Rails makes it easy to spin up a web application in minutes, but has proven to be reliable enough to run large company product offerings as well. Web Pentesters don’t technically need to know the platform behind the websites they’re testing, but when we do, we can sometimes find more interesting bugs more quickly. At this meeting we’ll start with the fundamentals by spinning up a trivial Rails app and then take a look at some vulnerabilities that often arise within Rails’s “sensible defaults”. Bring a laptop you’re willing to install Rails on to play along.