See how it work

In this article, we tell the story of how we found a logical bug using the WinAFL fuzzer and exploited it in WinRAR to gain full control over a victim’s computer. The exploit works by just extracting an archive, and puts over 500 million users at risk.
One of the crashes produced by the fuzzer led us to an old, dated dynamic link library (dll) that was compiled back in 2006 without a protection mechanism (like ASLR, DEP, etc.) and is used by WinRAR.
We turned our focus and fuzzer to this “low hanging fruit” dll, and looked for a memory corruption bug that would hopefully lead to Remote Code Execution.
However, the fuzzer produced a test case with “weird” behavior. After researching this behavior, we found a logical bug: Absolute Path Traversal. From this point on it was simple to leverage this vulnerability to a remote code execution.
Perhaps it’s also worth mentioning that a substantial amount of money in various bug bounty programs is offered for these types of vulnerabilities.

Visit the following channels and sites for more training and tools:

Name		Name	Last commit message	Last commit date
Latest commit History 10 Commits
1 (1).py		1 (1).py
1 (2).py		1 (2).py
1 (3).py		1 (3).py
1 (4).py		1 (4).py
1 (5).py		1 (5).py
1 (6).py		1 (6).py
1 (7).py		1 (7).py
1 (8).py		1 (8).py
Config.txt		Config.txt
README.md		README.md
WinRAR_64bit.exe		WinRAR_64bit.exe
WinRAR_86bit.exe		WinRAR_86bit.exe
putty.exe		putty.exe