CVE-2025-0411-MoTW-PoC

CVE-2025-0411：7-Zip MoTW 绕过漏洞 简介 CVE-2025-0411 是 7-Zip 中的一个缺陷，可绕过 Windows 的“网络标记”MoTW，使来自特制存档的恶意文件能够在无警告的情况下执行。该漏洞已在 SmokeLoader 攻击活动中被利用，由于 7-Zip 缺乏自动更新机制，因此存在风险。 什么是 MoTW？ MoTW 通过备用数据流 ADS 将互联网下载的文件标记为不安全，从而触发警告或受保护视图。只有在文件处理过程中保留该标记时才有效。 技术细节 7-Zip 未能将 MoTW 的 Zone.Identifier ADS...

CVE-2025-50328

A vulnerability in B1 Free Archiver v1.5.86 allows files extracted from downloaded archives to bypass Windows Mark of the Web MotW protections. When an archive is downloaded from the internet and extracted using B1 Free Archiver, the software fails to propagate the 'Zone.Identifier' alternate dat...

Win32 XP SP3 ShellExecuteA shellcode

Win32 XP SP3 ShellExecuteA shellcode. Shellcode exploit for win32 platform ; Author: sinn3r x90.sinner a.t gmail.c0m ; Tested on Windows XP SP3 ; Description: ; This shellcode will attempt to delete the Zone.Identifier ADS it's a ; trick Microsoft uses to warn you about an exe when you try to run...

win32/xp sp3 ShellExecuteA shellcode

Exploit for win32 platform in category shellcode ==================================== win32/xp sp3 ShellExecuteA shellcode ==================================== ; Author: sinn3r ; Tested on Windows XP SP3 ; Description: ; This shellcode will attempt to delete the Zone.Identifier ADS it's a ; trick...