CVE-2025-8088-Winrar-Tool-Gui

🚨 CVE-2025-8088 WinRAR Exploit Tool ⚠️ FOR EDUCATIONAL AND RESEARCH PURPOSES ONLY ⚠️ 🌐 Language / Dil 🇺🇸 English 🇹🇷 Türkçe English 📋 Table of Contents Overview Features Requirements Installation Usage Technical Details Screenshots Disclaimer Contributing 🎯 Overview CVE-2025-8088 is a fictional...

CVE-2023-38831_Exploit

CVE-2023-38831 Exploit Proof-of-Concept Overview This repository contains a Python script that demonstrates a proof-of-concept PoC exploit for CVE-2023-38831. This exploit leverages a vulnerability in specific file-processing mechanisms to execute a reverse shell payload through a malicious RAR...

Detect-CVE-2018-20250

Detect-CVE-2018-20250 This script detects whether a .rar file may have the configuration to exploit CVE-2018-20250. For this detection, the file command and the strings command, which are available in most Linux distributions, are used. Usage ./detectwinrarexploit.sh Payload extraction To extract...

CVE-2025-8088

CVE-2025-8088 Python tool for safe archive handling, path traversal awareness, and secure extraction. Inspired by CVE-2025-8088. Safe Archive Handling PoC Educational blue-team tool inspired by path traversal issues such as CVE-2025-8088. This script helps detect and safely handle dangerous archi...

CVE-2023-38831-WinRAR-Exploit

CVE-2023-38831-WinRAR-Exploit Proof of concept PoC exploit for WinRAR vulnerability CVE-2023-38831 vulnerability Usage: python poc.py Example: python poc.py cutepicture.jpg exploit.bat output.rar PoC Video: https://youtu.be/TRe0eGIsB5k...

Zimbra-CVE-2022-30333

Zimbra-CVE-2022-30333 Zimbra unrar vulnerability. Now there are already POC available, it is safe to release our POC. CVE-2022-30333 Zimbra UNRAR vulnerability. Unrar till V 6.11 vulnerable. Make sure your .jsp shell is undetected. This exploit will work on zimbra installed on default path. Place...

CVE-2025-24071

CVE-2025-24071 Windows File Explorer Spoofing Vulnerability - CVE-2025-24071 Leak the NTLM hash of Windows through the extraction of a manipulated ZIP or RAR file, and by exploiting a vulnerability in the handling of .library-ms files a type of file used by Windows to specify libraries and networ...

droidlysis

DroidLysis DroidLysis is a pre-analysis tool for Android apps : it performs repetitive and boring tasks we'd typically do at the beginning of any reverse engineering. It disassembles the Android sample, organizes output in directories, and searches for suspicious spots in the code to look at. The...

best-CVE-2025-8088

CVE-2025-8088 WinRAR Exploit 🔓 A proof-of-concept exploit for WinRAR vulnerability CVE-2025-8088 affecting versions 7.12 and lower. This tool creates a malicious RAR archive that embeds payloads in Alternate Data Streams ADS with path traversal, potentially leading to arbitrary code execution. Th...

CVE-2025-8088-BUILDER-Winrar-Tool

CVE-2025-8088 WinRAR path traversal tool ⚠ This tool is created solely for educational use only. Unauthorized use outside of controlled environments is strictly prohibited. A Python script that exploits CVE-2025-8088, a path traversal vulnerability in WinRAR, by generating a malicious archive tha...

WinRAR-CVE-2025-8088-Path-Traversal-PoC

PoC for CVE-2025-8088: Path Traversal in WinRAR Vulnerability Description ☢️ CVE-2025-8088 CVSS 8.4 is a path traversal vulnerability in WinRAR ≤7.12 that allows files to be placed outside the unpacking directory via alternate data streams ADS in a RAR archive. It is exploited to deliver malware t...

CVE-2022-30333-PoC

CVE-2022-30333-POC Sample file to test CVE-2022-30333 Sample.rar : if you want to test on Linux. When you extract, it create trav in ../../tmp/traversed. Please be sure that directory ../../tmp/traversed exists before extracting Sample.rar exp.rar : if you want to test on Zimbra Mail server. When...

CVE-2024-55504

CVE-2024-55504 An issue in RAR Extractor - Unarchiver Free and Pro v.6.4.0 allows local attackers to inject arbitrary code potentially leading to remote control and unauthorized access to sensitive user data via the exploitcombined.dylib component on MacOS Reproduce From Terminal root@kitploit:...

WinRAR-CVE-2023-38831

WinRAR-CVE-2023-38831 This Metasploit module exploits a vulnerability in WinRAR 6.22 CVE-2023-38831. When a user opens a crafted RAR file and its embedded document, the decoy document is executed, leading to code execution. It is not pretty, but works. 🤷🏻 Alexander Hagenah @xaitax References...

CVE-2018-20250

exp 用于 从 WinRAR 中提取代码执行 poc 由 Ridter 提供 如何使用？ 你只需要安装 Python 3.7，并准备一个你想要运行的恶意文件，设置好你想要的参数，这个 exp 脚本会自动生成恶意归档文件 ！ 1. 设置你想要的参数 root@kitploit: ... ... 你想要的归档文件名 rarfilename = "test.rar" 你想要运行的恶意文件 evilfilename = "calc.exe" 你想要的解压路径，如下所示 targetfilename =...

winrar_CVE-2023-38831_lazy_poc

winrarCVE-2023-38831lazypoc CVE-2023-38831 の WinRAR ファイルをテスト用に簡単に作成する方法 この脆弱性とサンプルについて言及した記事: https://www.group-ib.com/blog/cve-2023-38831-winrar-zero-day/ 使用していた WinRAR のバージョンは WinRAR 5.91.0 です。 悪意のある WinRAR ファイル 049af32f678da5e344315ce46787e8fc...

CVE-2023-38831-winrar-exploit

CVE-2023-38831 winrar exploit generator Quick poc test Generate the default poc for test root@kitploit: python cve-2023-38831-exp-gen.py poc or python cve-2023-38831-exp-gen.py CLASSIFIEDDOCUMENTS.pdf script.bat poc.rar Custom 1. Place the bait file and evil script file in the current directory,...

Winrar-CVE-2023-40477-POC

CVE-2023-4047 PoC By Wild Pointer Read Research: https://wildptr.io/winrar-cve-2023-40477-poc-new-vulnerability-winrar-security-research/ Recvol3.cpp Vulnerability: https://www.rarlab.com/vulnrev3names.html, https://www.win-rar.com/ Vulnerable: WinRAR = 6.22 How to Test? You can generate your own...

CVE-2025-24071_PoC

CVE-2025-24071PoC CVE-2025-24071: RAR/ZIP展開と.library-msファイルによるNTLMハッシュ漏洩 Windows Explorerは、.rarアーカイブから.library-msファイルが抽出されると、自動的にSMB認証要求を開始し、NTLMハッシュが漏洩します。ユーザーはファイルを開いたり実行したりする必要はなく、抽出するだけで漏洩が発生します。 ブログ記事: https://cti.monster/blog/2025/03/18/CVE-2025-24071.html 使用方法 root@kitploit: python poc.py...

CVE-2025-8088-Multi-Document

WinRAR Path Traversal Exploit CVE-2025-8088 - Multi-Depth Payload Deployment This Python script exploits a path traversal vulnerability CVE-2025-8088 in WinRAR to deploy payloads to the Windows startup folder using multiple relative path depths. The exploit creates a malicious RAR archive that,...