Ruby ERB Template Injection

This blog-style walkthrough demonstrates a server-side template injection vulnerability in Ruby/ERB. The authors show how to confirm injection, enumerate objects and methods via introspection, and craft payloads that access the server's SSL context to recover the private key—highlighting how unsafe server-side template processing can lead to severe data exposure and potential remote code execution.