Exploit for Insufficient Verification of Data Authenticity in Rarlab Winrar CVE-2023-38831

## https://sploitus.com/exploit?id=0A4EA09D-F11A-56F5-8FCB-CF7D78748997
# VolleyballSquid-----CVE-2023-38831-and-Bypass-UAC

This is my malware.

I use the CVE 2023-38831, a kind of exploit on WinRAR, to do this malware.

I also use BypassUAC to get Administrator authority.

This is the OVA file of it: [https://ttuedutw-my.sharepoint.com/:u:/g/personal/410806228_o365_ttu_edu_tw/EW7BTI5OBylGjfoxQEkpA6YBrAzL1tMiGkcDzo5EYQxHjw](https://ttuedutw-my.sharepoint.com/:u:/g/personal/410806228_o365_ttu_edu_tw/Ea5fsrEHgBxBsYl40m0QfJ4BJWWFfqXGJB3vQBtqsH86gA?e=tktgkz)


# Disclaimer
I make this malware just want to show the CVE 2023-38831 and bypass-UAC. Please don't use this to do something illegal.

If you do it, I'm not responsible for this. Thank you.

# Reference

https://github.com/HDCE-inc/CVE-2023-38831

https://blog.csdn.net/qq_17550379/article/details/79006718