CVE-2018-20250

exp for Extracting Code Execution From Winrar poc by Ridter how to use ? you just need to install python 3.7, and prepare a evil file you want to run, set the values you want, this exp script will generate the evil archive file automatically! 1. set the values you want ... ... The archive filenam...

CVE-2025-8088-BUILDER-Winrar-Tool

CVE-2025-8088 WinRAR path traversal tool ⚠ This tool is created solely for educational use only. Unauthorized use outside of controlled environments is strictly prohibited. A Python script that exploits CVE-2025-8088, a path traversal vulnerability in WinRAR, by generating a malicious archive tha...

zeek-gozi-detector

Gozi Malware Detector This Zeek packages detects Gozi banking malware activity. Resources: The RAR files this package looks for were discussed in the following articles: https://unit42.paloaltonetworks.com/march-wireshark-gozi-answers/...

CVE-2025-8088

CVE-2025-8088 Python tool for safe archive handling, path traversal awareness, and secure extraction. Inspired by CVE-2025-8088. Safe Archive Handling PoC Educational blue-team tool inspired by path traversal issues such as CVE-2025-8088. This script helps detect and safely handle dangerous archi...

CVE-2025-8088-Multi-Document

WinRAR Path Traversal Exploit CVE-2025-8088 - Multi-Depth Payload Deployment This Python script exploits a path traversal vulnerability CVE-2025-8088 in WinRAR to deploy payloads to the Windows startup folder using multiple relative path depths. The exploit creates a malicious RAR archive that,...

CVE-2022-30333-PoC

CVE-2022-30333-POC Sample file to test CVE-2022-30333 Sample.rar : if you want to test on Linux. When you extract, it create trav in ../../tmp/traversed. Please be sure that directory ../../tmp/traversed exists before extracting Sample.rar exp.rar : if you want to test on Zimbra Mail server. When...

CVE-2025-24071

Security Vulnerability Report: CVE-2025-24071 - Windows File Explorer Spoofing Vulnerability Overview NSFOCUS CERT has detected that Microsoft recently released a security update to address a critical spoofing vulnerability in Windows File Explorer, identified as CVE-2025-24071. This vulnerabilit...

CVE-2023-38831-winrar-exploit

CVE-2023-38831 winrar exploit generator Quick poc test Generate the default poc for test python cve-2023-38831-exp-gen.py poc or python cve-2023-38831-exp-gen.py CLASSIFIEDDOCUMENTS.pdf script.bat poc.rar Custom 1. Place the bait file and evil script file in the current directory, the bait file i...

droidlysis

DroidLysis DroidLysis is a pre-analysis tool for Android apps : it performs repetitive and boring tasks we'd typically do at the beginning of any reverse engineering. It disassembles the Android sample, organizes output in directories, and searches for suspicious spots in the code to look at. The...

CVE-2023-38831-WinRAR-Exploit

CVE-2023-38831-WinRAR-Exploit Proof of concept PoC exploit for WinRAR vulnerability CVE-2023-38831 vulnerability Usage: python poc.py Example: python poc.py cutepicture.jpg exploit.bat output.rar PoC Video: https://youtu.be/TRe0eGIsB5k...

Zimbra-CVE-2022-30333

Zimbra-CVE-2022-30333 Zimbra unrar vulnerability. Now there are already POC available, it is safe to release our POC. CVE-2022-30333 Zimbra UNRAR vulnerability. Unrar till V 6.11 vulnerable. Make sure your .jsp shell is undetected. This exploit will work on zimbra installed on default path. Place...

CVE-2025-8088-Winrar-Tool-Gui

🚨 CVE-2025-8088 WinRAR Exploit Tool ⚠️ FOR EDUCATIONAL AND RESEARCH PURPOSES ONLY ⚠️ 🌐 Language / Dil 🇺🇸 English 🇹🇷 Türkçe English 📋 Table of Contents Overview Features Requirements Installation Usage Technical Details Screenshots Disclaimer Contributing 🎯 Overview CVE-2025-8088 is a fictional...

CVE-2018-20250-WinRAR-ACE

CVE-2018-20250-WinRAR-ACE Proof of concept code in C to exploit the WinRAR ACE file extraction path CVE-2018-20250. Resources https://research.checkpoint.com/extracting-code-execution-from-winrar/ https://github.com/droe/acefile https://apidoc.roe.ch/acefile/latest/ Dependencies InvertedTomato.Cr...

WinRAR-CVE-2025-8088-PoC-RAR

WinRAR-CVE-2025-8088-PoC-RAR WinRAR 0day CVE-2025-8088 PoC RAR Archive Place the MyResumefinal.rar in the Downloads Directory and extract using "Extract to MyResumefinal" or from the UI using the Vulnerable WinRAR for now to run the exploit! : you'll see a VBScript named:...

WinRAR-CVE-2023-38831

WinRAR-CVE-2023-38831 This Metasploit module exploits a vulnerability in WinRAR 6.22 CVE-2023-38831. When a user opens a crafted RAR file and its embedded document, the decoy document is executed, leading to code execution. It is not pretty, but works. 🤷🏻 Alexander Hagenah @xaitax References...

PoC_CVE-2025-11579

PoC CVE-2025-11579 Overview rardecode versions = 2.1.1 fail to restrict the dictionary size when reading large RAR dictionary sizes, which allows an attacker to provide a specially crafted RAR file and cause Denial of Service via an Out Of Memory Crash. Exploit We craft a RAR file with an...

CVE-2025-8088-WinRAR-builder

CVE-2025-8088-WinRAR-builder A POC exploit for WinRAR vulnerability CVE-2025-8088 affecting versions 7.12 and lower 🚀 How It Works 1. Creates a Rar embed with other payloads 2. Using Multiple ADS Streams 🔄 - Attaches payload streams with different path traversal depths 3. Manipulates RAR Headers ...

CVE-2026-30039

CVE-2026-30039 Security advisory materials for CVE-2026-30039, a symlink-based archive extraction issue in rarfile affecting versions 4.2 and earlier. English advisory | 中文版本 Overview rarfile extracts symbolic links from attacker-controlled RAR archives without validating whether the embedded...

RAR-Anomaly-Inspector

RAR Anomaly Inspector RAR Anomaly Inspector is a read-only PowerShell tool for static inspection of RAR archives , designed to detect path traversal anomalies related to CVE-2025-8088 WinRAR RAR5 Path Traversal. The tool does not extract or execute archive contents. Features Static, read-only...

CVE-2025-6218_WinRAR

🧪 CVE-2025-6218: Path Traversal in WinRAR 📌 Description This lab demonstrates how to exploit the CVE-2025-6218 vulnerability in vulnerable versions of WinRAR for Windows. This vulnerability allows a malicious .rar file to overwrite files outside the extraction directory using relative paths ....,...