By language
Security testing for Ruby and Rails applications.
Ruby on Rails favors convention and secure defaults, but mass assignment, unsafe deserialization, and injection still appear - especially where developers step outside the framework's guardrails.
Common Ruby/Rails pitfalls
Mass assignment (strong-parameters bypass), unsafe YAML/Marshal deserialization, SQL injection via raw queries, and SSRF are the recurring risks.
Framework focus
Rails defaults help, but authorization logic and any raw SQL or metaprogramming paths need explicit testing.
Key risks to test
FAQ
What are common Rails security issues?
Mass assignment, unsafe deserialization (YAML/Marshal), SQL injection via raw queries, and authorization gaps are the recurring Rails risks, typically where code steps outside framework conventions.
Impactr finds and proves whether flaws like this are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.