Skip to content

Commit

Permalink
automatic module_metadata_base.json update
Browse files Browse the repository at this point in the history
  • Loading branch information
msjenkins-r7 committed Sep 7, 2023
1 parent 946794c commit 4b5335e
Showing 1 changed file with 52 additions and 0 deletions.
52 changes: 52 additions & 0 deletions db/modules_metadata_base.json
Original file line number Diff line number Diff line change
Expand Up @@ -142347,6 +142347,58 @@
"session_types": false,
"needs_cleanup": null
},
"exploit_windows/fileformat/winrar_cve_2023_38831": {
"name": "WinRAR CVE-2023-38831 Exploit",
"fullname": "exploit/windows/fileformat/winrar_cve_2023_38831",
"aliases": [

],
"rank": 600,
"disclosure_date": "2023-08-23",
"type": "exploit",
"author": [
"Alexander \"xaitax\" Hagenah"
],
"description": "This module exploits a vulnerability in WinRAR (CVE-2023-38831). When a user opens a crafted RAR file and its\n embedded document, the decoy document is executed, leading to code execution.",
"references": [
"CVE-2023-38831",
"URL-https://www.group-ib.com/blog/cve-2023-38831-winrar-zero-day/",
"URL-https://b1tg.github.io/post/cve-2023-38831-winrar-analysis/"
],
"platform": "Windows",
"arch": "x64, x86",
"rport": null,
"autofilter_ports": [

],
"autofilter_services": [

],
"targets": [
"Windows"
],
"mod_time": "2023-09-07 22:01:49 +0000",
"path": "/modules/exploits/windows/fileformat/winrar_cve_2023_38831.rb",
"is_install_path": true,
"ref_name": "windows/fileformat/winrar_cve_2023_38831",
"check": false,
"post_auth": false,
"default_credential": false,
"notes": {
"Stability": [
"crash-safe"
],
"Reliability": [
"repeatable-session"
],
"SideEffects": [
"ioc-in-logs",
"artifacts-on-disk"
]
},
"session_types": false,
"needs_cleanup": null
},
"exploit_windows/fileformat/winrar_name_spoofing": {
"name": "WinRAR Filename Spoofing",
"fullname": "exploit/windows/fileformat/winrar_name_spoofing",
Expand Down

0 comments on commit 4b5335e

Please sign in to comment.