241 matches found
Amaranth-Project
Amaranth Project CVE-2025-8088 （WinRAR パストラバーサル脆弱性、≤ 7.11）を利用したマルチステージバックドア感染チェーン。 root@kitploit: 誘導文書 → 悪意RAR → CVEトリガー → ADS書き込み → Stager実行 → ファイルロード → C2接続 プロジェクト構造 ディレクトリ| 内容 ---|--- Stage01Stage07/| 各歴史的段階の攻撃チェーンソースコードとテストスクリプト loader/| 自製 PE メモリローダー（C言語） rat-client/| 自製軽量 RAT クライアント（C）...
WinRAR-CVE-2025-8088-PoC-RAR
WinRAR-CVE-2025-8088-PoC-RAR WinRAR 0day CVE-2025-8088 PoC RAR Archive Place the MyResumefinal.rar in the Downloads Directory and extract using "Extract to MyResumefinal" or from the UI using the Vulnerable WinRAR for now to run the exploit! : you'll see a VBScript named:...
WinRAR-Exploit-Tool---Rust-Edition
WinRAR Exploit Tool - Rust Edition Advanced WinRAR Path Traversal Exploit Tool - Written in Rust A high-performance, memory-safe implementation of the WinRAR CVE-2025-8088 exploit tool, rewritten in Rust for better reliability and performance. Features ADS Exploitation - NTFS Alternate Data...
CVE-2025-8088-Winrar
CVE-2025-8088 WinRAR エクスプロイト WinRAR のパストラバーサルを悪用するための高度なツール ADS および RAR5 ヘッダーを操作することで、WinRAR のパストラバーサル脆弱性 CVE-2025-8088 を悪用する悪意のある RAR ファイルを作成するための、洗練された GUI ツールです。 特徴 ADS エクスプロイト - ペイロードを隠すための NTFS 代替データストリーム RAR5 ヘッダー操作 - パス注入のための直接ヘッダーパッチ GUI インターフェース - クリーンでモダンなユーザーインターフェース スタートアップ配置 -...
CVE-2018-7422
CVE-2018-7422 nuclei -u http://target:8088 -t cve-2018-7422.yaml...
CVE-2025-8088-Exploit
CVE-2025-8088 WinRAR Exploit 🔓 A proof-of-concept exploit for WinRAR vulnerability CVE-2025-8088 affecting versions 7.12 and lower. This tool creates a malicious RAR archive that embeds payloads in Alternate Data Streams ADS with path traversal, potentially leading to arbitrary code execution. Th...
CVE-2015-8088
CVE-2015-8088 Source of PoC code. Detail of the CVE: https://vulners.com/cve/CVE-2015-8088 Detail of the Vulnerability: http://kernfunny.org/blog/cve-2015-8088-heap-based-buffer-overflow-in-the-hifi-driver-of-huawei-smart-phone.html...
RAR-Anomaly-Inspector
RAR 异常检查器 RAR Anomaly Inspector 是一个只读的 PowerShell 工具 ，用于静态检查 RAR 存档 ，旨在检测与 CVE-2025-8088 WinRAR RAR5 路径遍历 相关的路径遍历异常 。 该工具不会提取或执行 存档内容。 功能特点 静态、只读分析（无提取、无执行） 检测原始路径遍历模式（..\） 识别提取目录外的写入操作 检测 NTFS 备用数据流 ADS 指示器 干净、仅目录的输出（适合复制粘贴） 基于启发式的风险分类 系统要求 Windows PowerShell 5.1+ 可选：7z.exe（用于列出用户可见的文件） 使用方法...
winrar-exploit
Description This is my implementation of the CVE-2025-8088 Winrar exploit. It uses Alternate Data Streams ADS and path patching within the archive. When a victim extracts the infected archive, the patched ADS payload e.g., executable, powershell script, or some funny png is redirected into the...
CVE-2025-8088-EXP
This repository does not have a README...
Cve-2025-8088-WinRar-vulnerability
Cve-2025-8088 WinRAR Python tool that creates a malicious RAR file to exploit the CVE-2025-8088 vulnerability in WinRAR. The CVE-2025-8088 vulnerability allows exploitation of manipulated RAR files to cause path traversal and overwrite arbitrary files on the victim's system. This project is for...
winrar-exploit
Descrizione Questa è la mia implementazione dell'exploit CVE-2025-8088 per Winrar. Utilizza Alternate Data Streams ADS e il path patching all'interno dell'archivio. Quando una vittima estrae l'archivio infetto, il payload ADS patchato ad es., eseguibile, script powershell o qualche png divertente...
CLEANSTART-2026-VQ66672 Security fixes in python3 3.12.3-r2
Package python3 version 3.12.3-r2 fixes 1 vulnerabilities: CVE-2024-8088...
CVE-2026-8088 vulnerabilities
Vulnerabilities for packages: gdal...
Old WinRAR Flaw Fuels Attacks on Ukraine: How Unmanaged Software Keeps the Door Open
Two separate Russia-aligned campaigns are still exploiting the WinRAR flaw CVE-2025-8088 against Ukrainian organizations nearly a year after it was patched, showing how unmanaged software keeps an exploited entry point open long after the fix ships...
CVE-2026-8088
creationtimestamp| type| source ---|---|--- 2026-05-07 21:25:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlc5pti6tr2p...
CVE-2026-8088 OSGeo gdal GDapi.c GDfieldinfo out-of-bounds
A weakness has been identified in OSGeo gdal up to 3.13.0dev-4. The affected element is the function GDfieldinfo of the file frmts/hdf4/hdf-eos/GDapi.c. Executing a manipulation can lead to out-of-bounds read. The attack needs to be launched locally. The exploit has been made available to the...
CVE-2026-8088
A weakness has been identified in OSGeo gdal up to 3.13.0dev-4. The affected element is the function GDfieldinfo of the file frmts/hdf4/hdf-eos/GDapi.c. Executing a manipulation can lead to out-of-bounds read. The attack needs to be launched locally. The exploit has been made available to the...
