
Security News
Follow-up and Clarification on Recent Malicious Ruby Gems Campaign
A clarification on our recent research investigating 60 malicious Ruby gems.
a dsl for proxying http traffic
gem install minion_rb
minion_rb
is built on top of evil-proxy so you
must install the CA cert in your browser as described here
to function properly with HTTPS.
Once you've done that you'll need to write a driver script for the proxy.
Below is an example where I replace fast.wistia.com/assets/app/stats-<SHA>.js
with
a local file by querying webpack-dev-server:
# proxy.rb
require 'minion'
Minion.proxy do
host "fast.wistia.com" do
get /stats-[a-z0-9]*\.js$/ do |req, res|
require 'json'
manifest = JSON.parse(`curl 0.0.0.0:3001/assets/manifest.json`)
asset = manifest["assetsByChunkName"]["app/stats"]
res.body = `curl https://example2.wistia.dev/assets/#{asset}`
end
end
end.start
Then run it with Ruby and hit your endpoint:
ruby proxy.rb
FAQs
Unknown package
We found that minion_rb demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A clarification on our recent research investigating 60 malicious Ruby gems.
Security News
ESLint now supports parallel linting with a new --concurrency flag, delivering major speed gains and closing a 10-year-old feature request.
Research
/Security News
A malicious Go module posing as an SSH brute forcer exfiltrates stolen credentials to a Telegram bot controlled by a Russian-speaking threat actor.