So that’s why it’s free..

Low Level
Aug 15, 2025

WinRAR is a GREAT piece of software, but every piece of software can have bugs. In this video we're talking about WinRAR exploits seen in the wild.

[00:00:00] Introduction to the cyberattacks exploiting WinRAR.

[00:00:14] Details about the threat from the "Romcom" hacking group.

[00:00:27] Explanation of WinRAR's file compression functionality.

[00:00:44] How WinRAR's RAR file format is processed.

[00:02:27] Discussion of the CVE 20258088 vulnerability related to Alternative Data Streams (ADS).

[00:04:50] How hackers use "directory traversal" to place malicious files.

[00:06:33] Explanation of the CVE 2023 38831 vulnerability.

[00:07:20] Why these logic-based bugs are particularly dangerous and easy to exploit.

[00:08:16] How legitimate applications can be tricked into loading malicious code.

[00:08:35] Clarification on why languages like Rust wouldn't necessarily prevent these specific types of flaws.

I MISS THE JUKEBOX SECTION NOW

Found 7-Zip years ago and never looked back. Got sick of WinRar begging me to pay for the full version.

I MISS THE JUKEBOX SECTION NOW

I MISS THE JUKEBOX SECTION NOW

I MISS THE JUKEBOX SECTION NOW

I MISS THE JUKEBOX SECTION NOW

I MISS THE JUKEBOX SECTION NOW

Been using Winrar since the early 2000s

Zshare days

I MISS THE JUKEBOX SECTION NOW

I MISS THE JUKEBOX SECTION NOW

Bring it bacKK-KK-k