Username: 
Password: 
Restrict session to IP 
Questions  |  score: 2  |  2.44 3.25 5.12 |  Solved By 63 People  |  11255 views  |  since Dec 09, 2017 - 19:45:43

Railsbin (Exploit)

Railsbin
The years are passing by, and it´s christmas vacation time again.
I was playing a lot with ruby the past years, and i was in need of a pastebin service with an API for my bot.
So… i simply created one myself, within a few hours, using good old RubyOnRails.

The project named "railsbin" is open source, but has a few security problems.
Can you exploit the demo site?
The solution is the password hash of user solution.

Happy Challenging!
gizmore
Your solution for Railsbin
Answer
© 2017, 2018 and 2019 by Gizmore