Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-8088-Winrar-Tool — A sophisticated GUI tool for creating malicious RAR archives that exploit the WinRAR path traversal vulnerability (CVE-2025-8088) using ADS and RAR5 header manipulation. | Kitploit
Tools/GitHubGitHub/hexsecteam/cve-2025-8088-winrar-tool
Payload GenerationVulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingLearning & EducationRed TeamingLabs & Practice

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
GitHub
hexsecteam/cve-2025-8088-winrar-tool

CVE-2025-8088-Winrar-Tool

A sophisticated GUI tool for creating malicious RAR archives that exploit the WinRAR path traversal vulnerability (CVE-2025-8088) using ADS and RAR5 header manipulation.

View RepositoryWebsite
471711 months agoReviewed by Kitploit

CVE-2025-8088 WinRAR Exploit

root@kitploit:~
  _  _ _____  _____ ___ ___ 
 | || | __\ \/ / __| __/ __|
 | __ | _| >  <\__ \ _| (__ 
 |_||_|___/_/\_\___/___\___|

Advanced WinRAR Path Traversal Exploit Tool

A sophisticated GUI tool for creating malicious RAR archives that exploit the WinRAR path traversal vulnerability (CVE-2025-8088) using ADS and RAR5 header manipulation.

Features

  • ADS Exploitation - NTFS Alternate Data Streams for payload hiding
  • RAR5 Header Manipulation - Direct header patching for path injection
  • GUI Interface - Clean, modern user interface
  • Startup Targeting - Automatic payload placement in Windows startup
  • Custom Decoy Support - Use your own decoy files or default

Requirements

  • Python 3.6+
  • WinRAR CLI
  • customtkinter

Quick Start

root@kitploit:~
# Install dependencies
pip install -r requirements.txt

# Run the tool
python gui.py

Usage

  1. Select Payload - Choose your executable file (.exe, .bat, etc.)
  2. Choose Decoy - Select a decoy file or leave empty for default
  3. Name Archive - Enter output RAR filename
  4. Build - Generate the exploit archive

🖼️ UI Preview

Add here a screenshot of the tool running in Window 11:

exploit GUI

🖼️ POC Exploit

exploit POC

How It Works

The tool creates RAR archives with path traversal using:

  1. ADS Creation - Hides payload in NTFS alternate data streams
  2. RAR Building - Creates base RAR with ADS using WinRAR CLI
  3. Header Patching - Injects traversal path into RAR5 headers
  4. CRC Recalculation - Ensures archive integrity
  5. Output - Delivers malicious RAR ready for extraction

Path Example: ..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\payload.exe

Disclaimer

This tool is for educational and authorized testing purposes only. Use only in controlled environments with proper consent.

👤 Author

Made with ❤️ by Hexec
For educational & research purposes.

🔗 HexSec Social Media

🛠️ Join our tools, tutorials & exploit community

  • 📦 Telegram Group: https://t.me/hexsectools
  • 📬 Contact (Direct Message): https://t.me/Hexsecteam

Follow us on social media

  • 📸 Instagram: https://instagram.com/hex.sec
  • ▶️ YouTube: https://youtube.com/@hex_sec
  • 💻 GitHub: https://github.com/hexsecteam
  • 🎞️ Vimeo: https://vimeo.com/hexsec
  • 📹 Dailymotion: https://www.dailymotion.com/hexsectools/videos

Advanced red team tool for CVE-2025-8088 exploitation

Download Tool