CVE Series: WinRar Vulnerability (CVE-2023-38831)
Course Content
Course Description
WinRAR, a popular 1990s file archiver still used by 500 millions users worldwide, suffers from a high severity Remote Code Execution (RCE) vulnerability that was reported in August of 2023. CVE-2023-38831 affects WinRAR versions below 6.23 and is an RCE vulnerability that allows attackers to execute arbitrary code when a victim clicks what they think is a benign file, like a PDF or text file, within a ZIP archive. Attackers began exploiting this vulnerability in the wild in April 2023 through various cryptocurrency trading forums to install malware on victim systems. In this course you’ll be putting on your Red Team hat to create your own malicious file and gain control of the victim’s computer by leveraging this CVE!Target Audience
This course is for seasoned red teamers, penetration testers, security and vulnerability assessment analysts, and system administrators who want to know how to exploit and protect against the latest vulnerabilities impacting enterprise systems.Course Level
IntermediatePrerequisites
Linux command line basics and familiarity with Powershell Empire.Helpful Links
Instructed by
Clint is a technical manager for a financial services company’s Responsible Disclosure Team, where he interacts with ethical hackers who find vulnerabilities in the company’s infrastructure. Clint is a former Special Agent with the Department of Justice where he specialized in internet investigations and conducted numerous cases on cyber threat actors on the surface, deep, and dark web, resulting in Clint earning the Attorney General’s Distinguished Service Award. Clint has trained over 1,000 law enforcement officers, prosecutors, and civilians on the dark web and dark market websites. Clint has a master’s degree in intelligence studies from American Military University where he graduated with honors and also has a master’s degree in Information Technology from Carnegie Mellon University where he graduated with highest distinction. As a former Navy Reserve Officer, Clint served in many roles, such as a division officer and department head for commands in the information warfare community.
