CVE-2025-50328 B1 Free Archiver MotW绕过漏洞

# Proof of Concept: Check for missing MotW after extraction # This script demonstrates how to check if a file has the Zone.Identifier stream. # In a real scenario, an attacker would craft a zip file, the victim extracts it using B1, # and then runs this check on the extracted file to see if the protection is gone. import os def check_motw(filepath): """Check if a file has a Zone.Identifier stream.""" stream_path = filepath + ":Zone.Identifier" if os.path.exists(stream_path): print(f"[+] MotW found on {filepath}") with open(stream_path, 'r') as f: print(f.read()) else: print(f"[-] MotW MISSING on {filepath} - Vulnerability Confirmed if extracted from internet!") # Example usage: # malicious_file = "extracted_malware.exe" # check_motw(malicious_file)