Skip to content
Exploit for Path Traversal in Rarlab Winrar

Exploit for Path Traversal in Rarlab Winrar

Sploitus • September 29, 2026

This tool **inspects** existing RAR archives to confirm that their headers are well-formed and reports their structural integrity. It performs **no modifications** to any files on disk and cannot create, alter, or delete anything.

> **Note:** This tool is entirely safe and non-destructive. It only reads files, never writes them, and has no effect on your system beyond printing a plain-text report.

The validator **reads** RAR files and reports whether their block structure is intact. It is designed to be completely non-invasive.

- **Cross-platform:** Runs identically on Windows, macOS, and Linux.

- **No external dependencies:** Does not require `rar.exe`, WinRAR, or any third-party tool.

- **Read-only:** Opens files in read mode only. It never writes, deletes, patches, or compresses anything.

- **No network access:** Never contacts external servers or downloads anything.

This script only inspects archives you already have. It requires only a standard Python installation (3.10+).

python poc.py --check existing-archive.rar

| Argument | Description | Required? | Default |

|------------------|----------------------------------------------------|-----------|---------|

| `--check` | Path to an existing RAR file to validate | Yes | - |

| `--format` | Output format (`text` or `json`) | No | `text` |

This is a community-maintained reference utility for educational inspection purposes.

Extracted Entities

CWE Weaknesses (1)

Platforms (3)

Vulnerabilities (1)