Exploiting Ruby deserialization using a documented gadget chain