lightningspeed221/winrar-exploit-cve-2023-38831C# utility demonstrating CVE-2023-38831 archive-structure exploitation technique for WinRAR versions below 6.23. Builds proof-of-concept binaries for controlled lab environments and defensive research.
This repository contains a small Windows desktop/console utility written in C# (.NET Framework 4.8) that demonstrates an archive-structure technique commonly discussed in security research contexts.
This project is commonly associated online with CVE-2023-38831, a WinRAR issue where a specially crafted archive can cause a user to run unexpected content when interacting with what appears to be a benign file.
For details, prefer vendor advisories / official references (search for CVE-2023-38831 WinRAR advisory).
This code can be misused. Do not use it to harm systems or people.
WinRAR Exploit/ — C# project (targets .NET Framework 4.8)
Program.cs — main entry point and logicWinRAR Exploit.csproj — project fileOne of:
If you have the dotnet CLI installed, you can build the project from the command line (see below).
From the repository root:
dotnet build ".\WinRAR Exploit\WinRAR Exploit.csproj" -c Release
Output binary:
WinRAR Exploit\bin\Release\exploit.exeOpenFileDialog) and requires an STA thread at startup.