CVE-2025-8088-Winrar-Tool-Gui

🚨 CVE-2025-8088 WinRAR Exploit Tool ⚠️ FOR EDUCATIONAL AND RESEARCH PURPOSES ONLY ⚠️ 🌐 Language / Dil 🇺🇸 English 🇹🇷 Türkçe English 📋 Table of Contents Overview Features Requirements Installation Usage Technical Details Screenshots Disclaimer Contributing 🎯 Overview CVE-2025-8088 is a fictional...

CVE-2025-8088-WinRAR-Proof-of-Concept-PoC-Exploit-

CVE-2025-8088 WinRAR Proof of Concept PoC-Exploit This repository contains a Proof of Concept PoC script for CVE-2025-8088 , a path traversal vulnerability in WinRAR versions up to 7.12. This PoC demonstrates how attackers could exploit the vulnerability to place malicious files outside the...

scan-for-webcams

scan-for-webcams 📷 中文文档 Note I switched to a new method of installing this program for a better developer experience and better modifiability. As a result, the PYPI package scan-for-webcams is not maintained anymore, and should be considered deprecated. btw: we have a discord channel ! join Table...

CVE-2025-8671

CVE-2025-8671 - PoC DoS lighttpd HTTP/2 Author : @abiyeenzo ⚠️ Warning This project is provided for educational purposes only. Running the PoC against third-party servers may constitute an illegal cyberattack and lead to criminal prosecution. Only use this script on your test environments or local...

WinRAR-CVE-2025-8088-Path-Traversal-PoC

PoC for CVE-2025-8088: Path Traversal in WinRAR Vulnerability Description ☢️ CVE-2025-8088 CVSS 8.4 is a path traversal vulnerability in WinRAR ≤7.12 that allows files to be placed outside the unpacking directory via alternate data streams ADS in a RAR archive. It is exploited to deliver malware t...

CVE-2025-8088-Exploit

CVE-2025-8088 Exploit de WinRAR 🔓 Un exploit de prueba de concepto para la vulnerabilidad de WinRAR CVE-2025-8088 que afecta a las versiones 7.12 y anteriores. Esta herramienta crea un archivo RAR malicioso que incrusta cargas útiles en flujos de datos alternativos ADS con path traversal, lo que...

CVE-2025-8088-Multi-Document

WinRAR Path Traversal Exploit CVE-2025-8088 - Multi-Depth Payload Deployment This Python script exploits a path traversal vulnerability CVE-2025-8088 in WinRAR to deploy payloads to the Windows startup folder using multiple relative path depths. The exploit creates a malicious RAR archive that,...

best-CVE-2025-8088

CVE-2025-8088 WinRAR Exploit 🔓 A proof-of-concept exploit for WinRAR vulnerability CVE-2025-8088 affecting versions 7.12 and lower. This tool creates a malicious RAR archive that embeds payloads in Alternate Data Streams ADS with path traversal, potentially leading to arbitrary code execution. Th...

CVE-2025-8088-WinRAR-PathTraversal-PoC

CVE-2025-8088 WinRAR Path Traversal Exploit PoC A Proof-of-Concept exploit demonstrating the WinRAR path traversal vulnerability CVE-2025-8088 affecting versions ≤ 7.12. Vulnerability Details CVE ID : CVE-2025-8088 CVSS Score : 8.4 High Affected Versions : WinRAR ≤ 7.12 Patch Version : Fixed in...

avml

AVML Acquire Volatile Memory for Linux Summary A portable volatile memory acquisition tool for Linux. AVML is an X8664 userland volatile memory acquisition tool written in Rust, intended to be deployed as a static binary. AVML can be used to acquire memory without knowing the target OS distributi...

XM_ONVIF_auth_bypass

CVE-2025-65856 - ONVIF-Authentifizierungsumgehung auf XM 530 IP-Kameras Proof-of-Concept-Code Bash und Python für CVE-2025-65856, bei dem die ONVIF-Implementierung in in Xiongmai XM530 IP-Kameras unauthentifizierten Zugriff auf sensible Geräteinformationen und Live-Videostreams ermöglicht:...

CVE-2023-44487

Ataque de Reset Rápido HTTP2: CVE-2023-44487 Exploit rápido para testar o ataque de reset rápido CVE-2023-44487. Nota: Apenas para fins educacionais Índice Instalação Uso Instalação Clone o repositório para sua máquina local usando Git, instale o poetry e execute o programa: root@kitploit: git...

winrar-exploit

Descrizione Questa è la mia implementazione dell'exploit CVE-2025-8088 per Winrar. Utilizza Alternate Data Streams ADS e il path patching all'interno dell'archivio. Quando una vittima estrae l'archivio infetto, il payload ADS patchato ad es., eseguibile, script powershell o qualche png divertente...

http2-rst-stream-attacker

CVE-2023-44487 e http2-rst-stream-attacker CVE-2023-44487 CVE-2023-44487 è un exploit contro il protocollo HTTP2 stesso. In HTTP2, le richieste di dati vengono avviate inviando un frame HEADERS. Dopo aver ricevuto questo frame, il server inizierà a elaborare la richiesta, inviano successivamente...

winrar-exploit

Descrição Esta é a minha implementação do exploit CVE-2025-8088 do Winrar. Ele usa Fluxos de Dados Alternativos ADS e correção de caminho dentro do arquivo. Quando uma vítima extrai o arquivo infectado, o payload ADS corrigido ex.: executável, script powershell ou algum png engraçado é...

CVE-2025-8088-WinRAR-builder

CVE-2025-8088-WinRAR-builder Un POC exploit per la vulnerabilità di WinRAR CVE-2025-8088 che interessa le versioni 7.12 e precedenti 🚀 Come Funziona 1. Crea un archivio RAR incorporato con altri payload 2. Utilizza più flussi ADS 🔄 - Aggiunge flussi di payload con diverse profondità di path...

AV-Chaos-Monkey

AV Chaos Monkey Piattaforma distribuita di chaos engineering per il test di carico di sistemi di videoconferenza. Simula oltre 1500 partecipanti WebRTC con flussi H.264/Opus e inietta picchi di caos di rete per convalidare la resilienza del sistema in condizioni degradate. Architettura 1. Pipelin...

CVE-2025-8088-BUILDER-Winrar-Tool

CVE-2025-8088 WinRAR Path-Traversal-Tool ⚠ Dieses Tool dient ausschließlich zu Bildungszwecken. Die unbefugte Nutzung außerhalb kontrollierter Umgebungen ist strengstens untersagt. Ein Python-Skript, das CVE-2025-8088 ausnutzt, eine Path-Traversal-Schwachstelle in WinRAR, indem es ein bösartiges...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2026-104786)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104786 advisory. FFmpeg before commit 9d786e4 contains a stack buffer overflow in the MPEG-PS muxer libavformat/mpegenc.c. When muxing input with more streams than the muxer's...

Astra Linux – Vulnerability in gdcm

There is an out-of-bounds write vulnerability in the JPEG2000Codec::DecodeByStreamsCommon functionality of Mathieu Malaterre Grassroot DICOM 3.0.23. A specially crafted DICOM file can lead to a heap buffer overflow. An attacker can provide a malicious file to exploit this vulnerability...