4 ms·
WinRAR’s vulnerable trialware: when free software isn’t free
- theamk 5y agoWait, isn't the first step in their exploit an installation of BURP suite, which installs custom SSL certificate? This does not seem to be much of vulnerability -- I am sure that if you can bypass SSL verification on the host, there are plenty of auto-updaters you can convince to execute your code.
- marcodiego 5y agowinrar is free as in beer. It is not free software! For anyone needing it: AFAIK, PeaZip is the only free software implementation of RAR V5 decompression algorithm. If you ever need to decompress any RAR V5 file, I think PeaZip is the only free software option available.