CVE-2025-24071 PoC — Microsoft Windows File Explorer Spoofing Vulnerability

Source

https://github.com/shacojx/CVE-2025-24071-Exploit

Associated Vulnerability

Title: Microsoft Windows File Explorer Spoofing Vulnerability (CVE-2025-24071)
Description:Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.

Description

Exploit CVE-2025-24071

Readme

# CVE-2025-24071-Exploit

   - Đây chỉ là tài liệu mang tính chất học tập. Chỉ xem tham khảo và đừng làm phiền chính quyền.
   - This content is for educational purposes only. Use for reference only and do not contact the police.

## Vulnerability Details

- **CVE ID**: CVE-2025-24071
- **Vulnerable System**: NTLM Hash Leak via RAR/ZIP Extraction and .library-ms File

## Env

- **JDK**: 22
  
## Attack
- **Attacker**: run poc with ip attacker to gen file exploit.zip
- **Attacker**: sudo responder -I eth0 -v
- **Victim**: Extraction file exploit.zip

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →