marshalsea parses Ruby Marshal streams without deserializing them, discovers gadget sinks by runtime reflection, and ships the defenses that stop them. Built as a teaching artifact for the deserialization vulnerability class.

Required Ruby Version

>= 3.4

Authors

Carter Perez

Versions

  1. 0.1.1

    1. source

      1. 0.1.1 source August 03, 2026 (38 KB)
  2. 0.1.0

    1. source

      1. 0.1.0 source July 31, 2026 (37.5 KB)

Pushed by

GitHub

SHA 256 checksum

← Previous version