zip-bomb

Web-based "Zip bomb" which eats up all the memory and kills web browsers, scanners and bots.

用于测试解压缩软件容错性与防病毒引擎扫描深度的 Zip 压缩包炸弹（ZIP Bomb）验证项目。 A ZIP bomb proof-of-concept project for testing decompression utility tolerance and antivirus engine resilience.

Archive bomb scanner

ZIP 💣 httpd. Just a gift for scanners and bots.

💣 Zip bomb for Browser and Node.js.

A Python tool to detect and prevent PDF‑based DoS and Embedded JavaScript attacks.

💥 Implementation of zip bomb, using python script.

Secure archive library: TAR/ZIP/7z extraction & creation with CVE protection. Type-safe Rust core, Python/Node.js bindings, zero unsafe code.

💣 Browser-based ZIP bomb generator — create DEFLATE-compressed decompression bombs up to petabytes. For security research & AV testing only.

Secure zip extraction for Rust & Python. Prevents Zip Slip, Zip Bombs, and symlink attacks.

A tool to generate "zip bombs"

ZIP Bomb Creator is a tool used to create a ZIP file that is small in size but drastically expands when extracted.

Bomb vulnerability scanners or IE11 with gzip https://blog.haschek.at/post/f2fda

A very simple zip-bomb

zipdu is a webservice implementation vulnerable to zip bombs and directory traversals. Written in multiple different languages

An educational ZIP-Bomb generator

Check an untrusted ZIP (including .docx/.xlsx/.pptx) against size and entry budgets without extracting it: zip bombs, path traversal, duplicates, bad CRC.

Agent-grade ZIP CLI on the zipnative engine — create deterministic, reproducible archives, list and inspect without extracting, extract with zip-slip / zip-bomb / symlink guards, verify, stream, modify without recompression. Stable --json contract for AI agents, ISO/IEC 21320-1 validated in CI. Node ≥22, zero extra dependencies.

Extract untrusted ZIP and tar archives with path containment and hard quotas.

Zero-dependency static file risk scanner and CLI: finds active content, macros, exploit building blocks and type spoofing in uploads without executing anything.