Locked WinRaR SFX - Remote Code Execution

[D4rkn3S]

1-10-2015

 

[HIDE-THANKS]

 

Vulnerability operates with the support of html tags to create winrar sfx archives.

 

 

To work enough start, did not even need to install now away.

 

Let's create an archive that will open us to the desired site (this can be any file):

Create archive in winrar.

Select Create sfx archives.

Next, go to the tab Advanced-> Options sfx-> Text and Graphics

In the area of text in the window insert your code.

 

This is the hidden content, please

• Sign In
• or
• Sign Up

 

Where in the content = "" 0 - the number of seconds to open links, URL = reference itself

 

Hit OK

 

substituting a reference to the exe will be released next

 

This is the hidden content, please

• Sign In
• or
• Sign Up

[/HIDE-THANKS]

Edited October 14, 2015 by D4rkn3S