shinkirou789/cve-2025-8088-winrar-vulnerabilityPython tool that crafts malicious RAR archives to exploit CVE-2025-8088 in WinRAR, enabling path traversal and arbitrary file overwrite via NTFS ADS. For research and educational use only.
Python tool that creates a malicious RAR file to exploit the CVE-2025-8088 vulnerability in WinRAR. The CVE-2025-8088 vulnerability allows exploitation of manipulated RAR files to cause path traversal and overwrite arbitrary files on the victim's system. This project is for research and educational purposes only. It should not be used in production environments or for malicious purposes.
Clone the repository in cmd:
git clone https://github.com/Shinkirou789/Cve-2025-8088-WinRar-vulnerability && cd Cve-2025-8088-WinRar-vulnerability
Clone the repository in powershell:
git clone https://github.com/Shinkirou789/Cve-2025-8088-WinRar-vulnerability ; Set-Location Cve-2025-8088-WinRar-vulnerability
Run the script: You must provide the payload path with the -p/--payload parameter, the output RAR filename with -o/--output, and optionally you can select a decoy file or use the one that will be created by default
Example:
python3 cli.py -p "payload.exe" -o "Prueba.rar"
