830 matches found
CVE-2025-8088
CVE-2025-8088 : WinRAR Path Traversal via NTFS ADS Abuse 📌 Executive Summary CVE-2025-8088 is a critical path traversal vulnerability in WinRAR versions 7.12 and prior. The flaw exists in the way the application processes archive entry filenames that utilize NTFS Alternate Data Streams ADS. By...
-CVE-2025-8088
-CVE-2025-8088 POWERSHEL script to check if your device is affected or no 🚨 CVE-2025-8088: WinRAR Zero-Day Alert! 🚨 A critical WinRAR vulnerability CVE-2025-8088 is making headlines – attackers can exploit this flaw in versions 7.13 to execute malicious code just by tricking users into opening a...
CVE-2025-8088
CVE-2025-8088 – WinRAR Exploit This repository contains a malicious RAR file generator that abuses the CVE-2025-8088 vulnerability in WinRAR, allowing a seemingly legitimate file to execute a payload when the victim extracts it. Recommended command python3 exploit7.12.py \ -p payload.exe \ -o...
Winrar-Exploit-CVE-2023-38831
WinRAR Exploit Builder WinForms / .NET Framework WinRAR Version Below 6.23 Overview This repository contains a small Windows desktop/console utility written in C .NET Framework 4.8 that demonstrates an archive-structure technique commonly discussed in security research contexts. About...
CVE-2025-8088
Security Analysis: Path Traversal Exploitation in WinRAR CVE-2025-8088 Note: Repository under development. This project will receive future updates with additional analyses, analysis scripts non-exploit, and presentation material. New versions will be published as soon as they are available. This...
CVE-2023-38831
Detection Logic for CVE-2023-38831 WinRAR Exploit This repository contains a detection logic for CVE-2023-38831 WinRAR ZIP file spoofing / double-extension exploit with raw queries / code blocks and ETW-specific provider names + Event IDs. A vulnerable version of WinRAR 6.23 on the target system...
CVE-2025-8088-Exploit
CVE-2025-8088 WinRAR Exploit 🔓 A proof-of-concept exploit for WinRAR vulnerability CVE-2025-8088 affecting versions 7.12 and lower. This tool creates a malicious RAR archive that embeds payloads in Alternate Data Streams ADS with path traversal, potentially leading to arbitrary code execution. Th...
WinRAR-CVE-2025-8088-Path-Traversal-PoC
PoC for CVE-2025-8088: Path Traversal in WinRAR Vulnerability Description ☢️ CVE-2025-8088 CVSS 8.4 is a path traversal vulnerability in WinRAR ≤7.12 that allows files to be placed outside the unpacking directory via alternate data streams ADS in a RAR archive. It is exploited to deliver malware t...
cve-2025-8088
CVE-2025-8088: WinRAR Path Traversal Detection Overview This repository documents research and detection strategies for CVE-2025-8088, a path traversal vulnerability in WinRAR. Exploitation of this vulnerability can allow attackers to extract files outside the intended directory, leading to...
CVE-2025-8088-WinRAR-PathTraversal-PoC
CVE-2025-8088 WinRAR Path Traversal Exploit PoC A Proof-of-Concept exploit demonstrating the WinRAR path traversal vulnerability CVE-2025-8088 affecting versions ≤ 7.12. Vulnerability Details CVE ID : CVE-2025-8088 CVSS Score : 8.4 High Affected Versions : WinRAR ≤ 7.12 Patch Version : Fixed in...
CVE-2023-38831
CVE-2023-38831 winrar exploit 6.22 = Quick poc git clone https://github.com/nhman-python/CVE-2023-38831.git cd cd CVE-2023-38831 python3 poc.py poc example usage python3 simplefile.txt script.bat output.zip example usage https://www.youtube.com/watch?v=-mN4tTKaMhQ...
Scan_WinRAR
ScanWinRAR Scan for WinRAR files affected to CVE-2023-40477 PowerShell is self elevating. You can run it directely via context menu...
winrar_CVE-2023-38831_lazy_poc
winrarCVE-2023-38831lazypoc lazy way to create CVE-2023-38831 winrar file for testing Article that mentioned this vuln and the sample: https://www.group-ib.com/blog/cve-2023-38831-winrar-zero-day/ version of winrar i was using is winrar 5.91.0 I took a malicious winrar file...
CVE-2025-8088-Winrar-Tool-Gui
🚨 CVE-2025-8088 WinRAR Exploit Tool ⚠️ FOR EDUCATIONAL AND RESEARCH PURPOSES ONLY ⚠️ 🌐 Language / Dil 🇺🇸 English 🇹🇷 Türkçe English 📋 Table of Contents Overview Features Requirements Installation Usage Technical Details Screenshots Disclaimer Contributing 🎯 Overview CVE-2025-8088 is a fictional...
CVE-2023-38831
CVE-2023-38831 Vulnerable: WinRAR = 6.22 https://www.win-rar.com/...
Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks
The threat actor known as Silent Lynx has been attributed to a fresh set of attacks targeting government organizations across the Commonwealth of Independent States CIS. The activity, observed from June 2025 through August 2026, involves four different infection chains that make use of...
cve_2023_38831_scanner
CVE-2023-38831 Scanner Overview The CVE-2023-38831 Scanner is an advanced cybersecurity tool designed to detect and analyze the presence of the CVE-2023-38831 vulnerability in WinRAR installations. This project implements a multi-layered approach to vulnerability detection, incorporating file...
trojanizer
TROJANIZER Version release : v1.1 Stable Author : pedro ubuntu r00t-3xp10it Codename: TroiaRevisited Distros Supported : Ubuntu, Kali, Mint, Parrot OS Suspicious-Shell-Activity SSA RedTeam desarrollado @2017 DESCRIPCIÓN DEL FRAMEWORK La herramienta Trojanizer usa WinRAR SFX para comprimir los dos...
WinRAR Path Traversal (CVE-2025-8088)
Generates a malicious RAR archive exploiting CVE-2025-8088 path traversal in WinRAR = 7.11. When extracted, payload is written to the Windows Startup folder for code execution on next login. User interaction required. !/usr/bin/env python3 -- coding: utf-8 -- """WinRAR path traversal code executi...
