Skip to content

A rails 4.1 app demonstrating impersonating a user with a leaked secret_key_base

Notifications You must be signed in to change notification settings

mnipper/sessiongoat

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

7 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Demonstrates impersonating a user with Rails 4.1 and devise when you have the secret_key_base and the hashed password of a user.

To run:

rails runner lib/impersonate.rb

Run rake db:setup before running the app. It creates a few users for your convenience.

About

A rails 4.1 app demonstrating impersonating a user with a leaked secret_key_base

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published