Rails-doubletap-RCE

RCE on Rails 5.2.2 using a path traversal (CVE-2019-5418) and a deserialization of Ruby objects (CVE-2019-5420). Maintained by mpgn on GitHub, where it has earned 133 stars from the community.

It's actively developed around rails, and is a solid reference for anyone building with these tools.