SQL injection is one of the most common and dangerous vulnerabilities in web applications. It occurs when an attacker manipulates an SQL…

Ruby on Rails comes with built-in security features, but developers must follow best practices to prevent vulnerabilities such as SQL…

Hey there, this is my first blog post here about a recent interesting finding I came accross on a private bug bounty target.

Building a resume can be worse than you think: Exploiting vulnerabilities in Ruby on Rails, LimeSurvey and Consul UI

HackTheBox Heal begins with reconnaissance revealing two main subdomains: a Ruby on Rails-based API and a PHP-based LimeSurvey application…

Dalam proses pengembangan aplikasi web menggunakan Ruby on Rails, fitur debug mode sering kali menjadi alat bantu penting bagi developer…

Ruby on Rails is a dream for developers who love to build and iterate quickly. But let’s be honest — moving fast can sometimes mean…

As a senior Ruby on Rails developer, you’re sometimes asked to assess an existing application — one you didn’t build. Whether you’re…

Ruby on Rails has your back when it comes to cross-site scripting (XSS) — by default, it escapes all strings in your views so malicious…

Ruby on Rails, often lauded for its developer-friendliness and convention-over-configuration philosophy, provides a robust foundation for…

The untold story of how Ruby’s package registry fights supply chain attacks daily — and what it means for your next project

JetBrains has made its RubyMine IDE free for non-commercial use. The move is designed to lower the barrier for new developers and content creators.

A while back, while working at a company that handled one of our biggest enterprise clients, I ran into one of those production nightmares…

Preventing SQL Injection Through Understanding, Not Fear

Rate limiting is a fundamental aspect of API security and stability. Without it, endpoints are vulnerable to brute force attacks…