CVE-2026-27884

This PoC sets up a malicious SMB server to exploit CVE-2026-27884, an arbitrary file write vulnerability in spider_plus. It patches Impacket's SMB server to bypass file jail checks and creates a traversal payload to demonstrate the vulnerability.

This repository contains a functional exploit PoC for CVE-2026-27884, which leverages a malicious SMB server to exploit an arbitrary file write vulnerability in the spider_plus module. The exploit bypasses file traversal restrictions by patching the `isInFileJail` function and demonstrates the vulnerability by writing a payload to a target file.