Skip to content

Commit 1d27be2

Browse files
committed
Final code for CVE-2025-33053 exploit module
1 parent ec5ba0b commit 1d27be2

File tree

1 file changed

+3
-2
lines changed

1 file changed

+3
-2
lines changed

modules/exploits/windows/fileformat/cve_2025_33053.rb

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -9,13 +9,14 @@ def initialize(info = {})
99
update_info(
1010
info,
1111
'Name' => 'CVE-2025-33053 Exploit via Malicious .URL File and WebDAV',
12-
'Description' => '
12+
'Description' => %q{
1313
This module exploits CVE-2025-33053 by generating a malicious .URL file pointing
1414
to a trusted LOLBAS binary with parameters designed to trigger unintended behavior.
1515
Optionally, a payload is generated and hosted on a specified WebDAV directory.
1616
When the victim opens the shortcut, it will attempt to access the WebDAV path,
1717
potentially resulting in remote code execution via a trusted binary.
18-
',
18+
},
19+
1920
'Author' => ['Dev Bui Hieu'],
2021
'License' => MSF_LICENSE,
2122
'DisclosureDate' => '2025-06-11',

0 commit comments

Comments
 (0)