POC详情： 48be31956935d1bcf7e2853e496c4a96fad3ec4e

来源
https://github.com/xaitax/WinRAR-CVE-2023-38831
关联漏洞
标题： WinRAR 安全漏洞 (CVE-2023-38831)
描述：WinRAR是一款文件压缩器。该产品支持RAR、ZIP等格式文件的压缩和解压等。 RARLabs WinRAR 6.23之前版本存在安全漏洞。攻击者利用该漏洞可以执行任意代码。
描述
This module exploits a vulnerability in WinRAR (CVE-2023-38831). When a user opens a crafted RAR file and its embedded document, a script is executed, leading to code execution.
介绍
# WinRAR-CVE-2023-38831
This Metasploit module exploits a vulnerability in WinRAR 6.22 (CVE-2023-38831). When a user opens a crafted RAR file and its embedded document, the decoy document is executed, leading to code execution.

It is not pretty, but works. 🤷🏻

Alexander Hagenah [@xaitax](https://twitter.com/xaitax)

![](https://github.com/xaitax/WinRAR-CVE-2023-38831/blob/main/winrar_cve-2023-38831.gif?raw=true)

## References

- https://www.group-ib.com/blog/cve-2023-38831-winrar-zero-day/
- https://b1tg.github.io/post/cve-2023-38831-winrar-analysis/
文件快照

 [4.0K]  /data/pocs/48be31956935d1bcf7e2853e496c4a96fad3ec4e
├── [ 565]  README.md
├── [9.1M]  winrar_cve-2023-38831.gif
├── [1.3K]  winrar_cve_2023_38831.md
├── [ 95M]  winrar_cve-2023-38831.mp4
├── [3.2K]  winrar_cve_2023_38831.rb
└── [ 78K]  winrar_exploit.pdf

0 directories, 6 files
神龙机器人已为您缓存
备注
    1. 建议优先通过来源进行访问。
    2. 如果因为来源失效或无法访问，请发送邮箱到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。
    3. 神龙已为您对POC代码进行快照，为了长期维护，请考虑为本地POC付费，感谢您的支持。