Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
WinRAR-CVE-2025-8088-Exploitation-Toolkit — GUI tool for creating malicious RAR archives exploiting CVE-2025-8088 path traversal. Uses NTFS ADS stealth and RAR5 header injection for payload delivery and Windows Startup persistence. | Kitploit
Tools/GitHubGitHub/xi0onamdev/winrar-cve-2025-8088-exploitation-toolkit
Privilege EscalationPayload GenerationPersistence MechanismsVulnerability AnalysisExploitationLateral MovementPenetration TestingLearning & EducationRed Teaming

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
Binary Exploitation
GitHubxi0onamdev/winrar-cve-2025-8088-exploitation-toolkit

WinRAR-CVE-2025-8088-Exploitation-Toolkit

GUI tool for creating malicious RAR archives exploiting CVE-2025-8088 path traversal. Uses NTFS ADS stealth and RAR5 header injection for payload delivery and Windows Startup persistence.

View Repository
129 months agoNot yet reviewed

☠️ CVE-2025-8088 WinRAR Exploit Tool ☠️

[ SYSTEM ACCESS: GRANTED ] [ TARGET: WINRAR VULNERABILITY ]

A sophisticated, military-grade GUI tool designed for creating malicious RAR archives that exploit the WinRAR path traversal vulnerability (CVE-2025-8088). This tool leverages advanced NTFS Alternate Data Streams (ADS) and RAR5 header manipulation to bypass security controls.

⚡ System Capabilities

  • [+] ADS Stealth Technology: Utilizes NTFS Alternate Data Streams to cloak payloads.
  • [+] Header Injection: Direct RAR5 header manipulation for precise path traversal.
  • [+] Auto-Persistence: Automatically targets Windows Startup for persistence.
  • [+] Decoy Ops: Supports custom decoy files to maintain stealth.

🛠️ System Requirements

  • Python 3.8+
  • WinRAR CLI (must be in system PATH or default location)
  • PyQt6

🚀 Initialization

root@kitploit:~
# 1. Install required modules
pip install PyQt6

# 2. Launch the exploit console
python gui.py

💀 Operation Manual

  1. PAYLOAD: Select your executable payload (.exe, .bat).
  2. DECOY: (Optional) Choose a decoy file to distract the target.
  3. TARGET: Set the fallback username (default: Administrator).
  4. OUTPUT: Define the name of the malicious archive.
  5. EXECUTE: Click INITIATE EXPLOIT BUILD to generate the artifact.

⚙️ Technical Intel

The tool operates in five phases:

  1. Stream Injection: Hides payload in ADS.
  2. Archive Construction: Builds base RAR.
  3. Header Patching: Modifies headers for traversal (..\..\).
  4. Integrity Check: Recalculates CRC32.
  5. Deployment: Finalizes the weaponized RAR.

Target Path: ..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\Users\%USERNAME%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

⚠️ Disclaimer

WARNING: AUTHORIZED PERSONNEL ONLY

This tool is for EDUCATIONAL PURPOSES and AUTHORIZED SECURITY TESTING only. The author is not responsible for any misuse or damage caused by this program.

👨‍💻 Developer

Developed by @XiaoNamdev

Knowledge is power. Use it wisely.

Download Tool