Tags: ruby deserialization type-juggling
Rating:
Type confusion to get a file write, get deserialization RCE from that file. [original writeup](https://flagbot.ch/posts/r0bynotes/)
I don't remember
