Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-11001---7-Zip — CVE-2025-11001 (CVSS 7.0) – 7-Zip < 25.00 Directory Traversal → RCE via crafted ZIP with symlink. Allows arbitrary file write when extracted as Administrator. Fixed in 7-Zip 25.00 (July 2025). | Kitploit
Tools/GitHubGitHub/mbanyamer/cve-2025-11001---7-zip
Payload GenerationVulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingBinary Exploitation
GitHubmbanyamer/cve-2025-11001---7-zip

CVE-2025-11001---7-Zip

CVE-2025-11001 (CVSS 7.0) – 7-Zip < 25.00 Directory Traversal → RCE via crafted ZIP with symlink. Allows arbitrary file write when extracted as Administrator. Fixed in 7-Zip 25.00 (July 2025).

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
View Repository
739 months agoNot yet reviewed
Share

CVE-2025-11001 - 7-Zip < 25.00 Directory Traversal to RCE PoC

High-severity symlink traversal in 7-Zip allowing arbitrary file write / RCE
Patched in 7-Zip 25.00 (July 2025) – Public exploit available
FOR AUTHORIZED SECURITY TESTING AND RESEARCH ONLY

7-Zip CVE CVSS

Vulnerability Summary

  • CVE: CVE-2025-11001
  • CVSS v3.1: 7.0 (High) – AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
  • Affected: All 7-Zip versions < 25.00 (Windows)
  • Fixed in: 7-Zip 25.00 and later
  • Discovery: Ryota Shiga (Flatt Security) via ZDI (ZDI-25-949)
  • Exploit Type: ZIP symlink directory traversal → arbitrary file placement
  • Impact: Remote Code Execution when victim extracts malicious archive
as Administrator

PoC Author

Mohammed Idrees Banyamer
Jordan | Security Researcher
Instagram: @banyamer_security
GitHub: https://github.com/mbanyamer

Usage

root@kitploit:~
python3 cve-2025-11001_poc.py \
  -t "C:\Windows\System32" \
  -p payload/malicious.exe \
  -o CVE-2025-11001-exploit.zip
Download Tool