CVE-2023-38831 PoC — WinRAR 安全漏洞

Source

https://github.com/an040702/CVE-2023-38831

Associated Vulnerability

Title:WinRAR 安全漏洞 (CVE-2023-38831)
Description:WinRAR是一款文件压缩器。该产品支持RAR、ZIP等格式文件的压缩和解压等。 RARLabs WinRAR 6.23之前版本存在安全漏洞。攻击者利用该漏洞可以执行任意代码。

Readme

1. Place the bait file and (evil) script file in the current directory, the bait file is recommended to be an image (.png, jpg) or a document (.pdf)
2. Run `python gen-CVE2023-38831.py CLASSIFIED_DOCUMENTS.pdf script.bat poc.rar` to generate your exploit

File Snapshot


 [4.0K]  /data/pocs/a6f067b5dd391584c219a75979056765a98a5008
├── [180K]  CLASSIFIED_DOCUMENTS.pdf
├── [ 889]  Client_sendfiletoserver.py
├── [1.5K]  gen-CVE2023-38831.py
├── [ 301]  keylog.py
├── [7.0M]  poc.exe
├── [ 255]  README.md
├── [  35]  script.bat
└── [1.3K]  Server_listening.py

0 directories, 8 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.