CVE-2025-8088

CVE-2025-8088 Python tool for safe archive handling, path traversal awareness, and secure extraction. Inspired by CVE-2025-8088. Safe Archive Handling PoC Educational blue-team tool inspired by path traversal issues such as CVE-2025-8088. This script helps detect and safely handle dangerous archi...

CVE-2023-38831-winrar-exploit

CVE-2023-38831 winrar exploit generator Quick poc test Generate the default poc for test python cve-2023-38831-exp-gen.py poc or python cve-2023-38831-exp-gen.py CLASSIFIEDDOCUMENTS.pdf script.bat poc.rar Custom 1. Place the bait file and evil script file in the current directory, the bait file i...

RAR-Anomaly-Inspector

RAR Anomaly Inspector RAR Anomaly Inspector is a read-only PowerShell tool for static inspection of RAR archives , designed to detect path traversal anomalies related to CVE-2025-8088 WinRAR RAR5 Path Traversal. The tool does not extract or execute archive contents. Features Static, read-only...

Zimbra-CVE-2022-30333

Zimbra-CVE-2022-30333 Zimbra unrar vulnerability. Now there are already POC available, it is safe to release our POC. CVE-2022-30333 Zimbra UNRAR vulnerability. Unrar till V 6.11 vulnerable. Make sure your .jsp shell is undetected. This exploit will work on zimbra installed on default path. Place...

CVE-2018-20250

exp for Extracting Code Execution From Winrar poc by Ridter how to use ? you just need to install python 3.7, and prepare a evil file you want to run, set the values you want, this exp script will generate the evil archive file automatically! 1. set the values you want ... ... The archive filenam...

Cve-2025-8088-WinRar-vulnerability

Cve-2025-8088 WinRAR Python tool that creates a malicious RAR file to exploit the CVE-2025-8088 vulnerability in WinRAR. The CVE-2025-8088 vulnerability allows exploitation of manipulated RAR files to cause path traversal and overwrite arbitrary files on the victim's system. This project is for...

CVE-2022-30333-PoC

CVE-2022-30333-POC Sample file to test CVE-2022-30333 Sample.rar : if you want to test on Linux. When you extract, it create trav in ../../tmp/traversed. Please be sure that directory ../../tmp/traversed exists before extracting Sample.rar exp.rar : if you want to test on Zimbra Mail server. When...

CVE-2025-6218_WinRAR

🧪 CVE-2025-6218: Path Traversal in WinRAR 📌 Description This lab demonstrates how to exploit the CVE-2025-6218 vulnerability in vulnerable versions of WinRAR for Windows. This vulnerability allows a malicious .rar file to overwrite files outside the extraction directory using relative paths ....,...

unrar-cve-2022-30333-poc

A proof of concept for CVE-2022-30333 - a path traversal vulnerability in unRAR versions prior to 6.11. I created this as a demonstration of the exploit for an AttackerKB writeup, and hope to incorporate it in a Metasploit Module soon! Basically, you provide a target including path traversal and...

WinRAR-CVE-2023-38831

WinRAR-CVE-2023-38831 This Metasploit module exploits a vulnerability in WinRAR 6.22 CVE-2023-38831. When a user opens a crafted RAR file and its embedded document, the decoy document is executed, leading to code execution. It is not pretty, but works. 🤷🏻 Alexander Hagenah @xaitax References...

ZipRarHunter

ZipRarHunter ZipRarHunter is a powerful command-line ethical hacking tool designed to crack passwords of ZIP and RAR archive files using a wordlist.It automates the process of password recovery from encrypted archives Features Cracking ZIP files encrypted with both ZipCrypto and AES-256 encryptio...

Winrar-CVE-2023-40477-POC

CVE-2023-4047 PoC By Wild Pointer Read Research: https://wildptr.io/winrar-cve-2023-40477-poc-new-vulnerability-winrar-security-research/ Recvol3.cpp Vulnerability: https://www.rarlab.com/vulnrev3names.html, https://www.win-rar.com/ Vulnerable: WinRAR = 6.22 How to Test? You can generate your own...

best-CVE-2025-8088

CVE-2025-8088 WinRAR Exploit 🔓 A proof-of-concept exploit for WinRAR vulnerability CVE-2025-8088 affecting versions 7.12 and lower. This tool creates a malicious RAR archive that embeds payloads in Alternate Data Streams ADS with path traversal, potentially leading to arbitrary code execution. Th...

CVE-2025-8088-Multi-Document

WinRAR Path Traversal Exploit CVE-2025-8088 - Multi-Depth Payload Deployment This Python script exploits a path traversal vulnerability CVE-2025-8088 in WinRAR to deploy payloads to the Windows startup folder using multiple relative path depths. The exploit creates a malicious RAR archive that,...

CVE-2025-24071

Security Vulnerability Report: CVE-2025-24071 - Windows File Explorer Spoofing Vulnerability Overview NSFOCUS CERT has detected that Microsoft recently released a security update to address a critical spoofing vulnerability in Windows File Explorer, identified as CVE-2025-24071. This vulnerabilit...

WinRAR-CVE-2025-8088-PoC-RAR

WinRAR-CVE-2025-8088-PoC-RAR WinRAR 0day CVE-2025-8088 PoC RAR Archive Place the MyResumefinal.rar in the Downloads Directory and extract using "Extract to MyResumefinal" or from the UI using the Vulnerable WinRAR for now to run the exploit! : you'll see a VBScript named:...

CVE-2018-20250-WinRAR-ACE

CVE-2018-20250-WinRAR-ACE Proof of concept code in C to exploit the WinRAR ACE file extraction path CVE-2018-20250. Resources https://research.checkpoint.com/extracting-code-execution-from-winrar/ https://github.com/droe/acefile https://apidoc.roe.ch/acefile/latest/ Dependencies InvertedTomato.Cr...

CVE-2025-8088

CVE-2025-8088 – WinRAR Exploit This repository contains a malicious RAR file generator that abuses the CVE-2025-8088 vulnerability in WinRAR, allowing a seemingly legitimate file to execute a payload when the victim extracts it. Recommended command python3 exploit7.12.py \ -p payload.exe \ -o...

CVE-2025-8088

Security Analysis: Path Traversal Exploitation in WinRAR CVE-2025-8088 Note: Repository under development. This project will receive future updates with additional analyses, analysis scripts non-exploit, and presentation material. New versions will be published as soon as they are available. This...

cve-2025-5915

CVE-2025-5915 — libarchive RAR v4 heap over-read with on-device iOS 18.5 proof A controlled heap over-read / memory-disclosure in libarchive's RAR v4 filter path copyfromlzsswindow. This repo reproduces it end to end: local ASan, a from-scratch RAR v4 encoder that dials the leak size, and an...