Module: Msf::Exploit::Remote::HTTP::RailsActiveStorageVips::RailsSecrets

Included in:

Msf::Exploit::Remote::HTTP::RailsActiveStorageVips

Defined in:

lib/msf/core/exploit/remote/http/rails_active_storage_vips/rails_secrets.rb

Overview

Helpers for recovering and decrypting Rails secret-key sources.

Constant Summary

ENVIRONMENT_PATHS =

['/proc/self/environ', '/proc/1/environ'].freeze

LOCAL_SECRET_PATHS =

[
  '/proc/self/cwd/tmp/local_secret.txt',
  '/proc/self/cwd/tmp/development_secret.txt'
].freeze

CREDENTIAL_ENVIRONMENTS =

%w[production staging development test].freeze

MAX_YAML_DEPTH =

100