Web-based "Zip bomb" which eats up all the memory and kills web browsers, scanners and bots.
-
Updated
Feb 7, 2023 - Go
#
zip-bomb
Here are 20 public repositories matching this topic...
用于测试解压缩软件容错性与防病毒引擎扫描深度的 Zip 压缩包炸弹（ZIP Bomb）验证项目。 A ZIP bomb proof-of-concept project for testing decompression utility tolerance and antivirus engine resilience.
-
Updated
Aug 9, 2026 - TeX
Archive bomb scanner
php security png zip-bomb archive-bomb-scanner rar-bomb-scanner rar-bomb zip-bomb-scanner png-bombs png-bomb-scanner
-
Updated
Jun 2, 2026 - PHP
ZIP 💣 httpd. Just a gift for scanners and bots.
-
Updated
Jul 13, 2017 - Go
A Python tool to detect and prevent PDF‑based DoS and Embedded JavaScript attacks.
python pdf security chromium cybersecurity software defender pdf-document cyber-security chromium-browser security-tools contributions-welcome zip-bomb pdfium infinite-loop pdfiumviewer pdf-attack pdf-security dos-attacks
-
Updated
Apr 22, 2025 - Tcl
Secure archive library: TAR/ZIP/7z extraction & creation with CVE protection. Type-safe Rust core, Python/Node.js bindings, zero unsafe code.
nodejs python rust cli security library compression zip tar extraction archive 7z zip-bomb pyo3 path-traversal memory-safe napi-rs cve-protection
-
Updated
Sep 7, 2026 - Rust
A tool to generate "zip bombs"
-
Updated
Sep 23, 2021 - C++
ZIP Bomb Creator is a tool used to create a ZIP file that is small in size but drastically expands when extracted.
-
Updated
May 30, 2026 - Python
Secure zip extraction for Rust & Python. Prevents Zip Slip, Zip Bombs, and symlink attacks.
-
Updated
Jan 6, 2026 - Rust
💣 Browser-based ZIP bomb generator — create DEFLATE-compressed decompression bombs up to petabytes. For security research & AV testing only.
javascript compression static-site ctf deflate zip-bomb security-research zipbomb antivirus-testing decompression-bomb browser-tool
-
Updated
May 26, 2026 - HTML
Bomb vulnerability scanners or IE11 with gzip https://blog.haschek.at/post/f2fda
-
Updated
Jul 10, 2018 - C#
A very simple zip-bomb
-
Updated
Mar 27, 2023 - Go
zipdu is a webservice implementation vulnerable to zip bombs and directory traversals. Written in multiple different languages
-
Updated
Jan 6, 2023 - C++
An educational ZIP-Bomb generator
-
Updated
Feb 26, 2021 - Python
Agent-grade ZIP CLI on the zipnative engine — create deterministic, reproducible archives, list and inspect without extracting, extract with zip-slip / zip-bomb / symlink guards, verify, stream, modify without recompression. Stable --json contract for AI agents, ISO/IEC 21320-1 validated in CI. Node ≥22, zero extra dependencies.
nodejs cli automation streaming typescript compression zip unzip ci-cd archive zero-dependency command-line-tool zip64 deterministic reproducible-builds ai-agents zip-bomb json-output zip-slip security-by-default
-
Updated
Sep 5, 2026 - TypeScript
Digital forensic investigation using Kali Linux on Raspberry Pi to analyze malicious USB payloads (ZIP bombs).
raspberry-pi cybersecurity malware-analysis digital-forensics kali-linux zip-bomb tailscale forensics-tools usb-analysis
-
Updated
Jun 28, 2025
MCP server on the zipnative ZIP engine — 13 tools for AI agents: inspect, list and verify without extracting, extract with zip-slip / zip-bomb / symlink guards, create deterministic reproducible archives, modify without recompression. MCP 2026-07-28 + legacy, stdio & HTTP, sandboxed, no network path, ISO/IEC 21320-1 validated in CI. Node ≥22.
nodejs typescript compression mcp zip unzip archive zero-dependency zip64 deterministic reproducible-builds ai-agents zip-bomb claude zip-slip llm-tools model-context-protocol mcp-server security-by-default zipnative
-
Updated
Sep 10, 2026 - TypeScript
Add this topic to your repo
To associate your repository with the zip-bomb topic, visit your repo's landing page and select "manage topics."