
7-Zip Mark-of-the-Web绕过漏洞PoC(CVE-2025-0411)
更多PoCs at:
https://pc.fenchuan8.com/#/index?forum=101158&yqm=DGR4X
Compile with MinGW-w64
x86_64-w64-mingw32-g++ loader.cpp -o loader.exe -s -static

After compilation, compress the exe with 7z and execute twice.
Since this vulnerability requires user interaction, the generated compressed file needs to be manually clicked. Because versions before 24.09 lack the MotW mechanism, this issue can be exploited to trick the victim into executing it.
