joydragon/detect-cve-2018-20250Herramienta para revisar si es que un payload tiene componente malicioso de acuerdo a CVE-2018-20250
This script detects whether a .rar file may have the configuration to exploit CVE-2018-20250.
For this detection, the file command and the strings command, which are available in most Linux distributions, are used.
./detect_winrar_exploit.sh <archive_name>
To extract the malicious payload, the acefile-unace application is needed, which is available at the following link: https://github.com/droe/acefile
It is simply installed with pip3
pip3 install acefile
