David Fifield personal blog
A better zip bomb
This article shows how to construct a non-recursive zip bomb that achieves a high compression ratio by overlapping files inside the zip container. "Non-recursive" means that it does not rely on a decompressor's recursively unpacking zip files nested within zip files: it expands fully after a single round of…
- Points
- 483
- HN comments
- 187
- Submissions
- 2
- Cited by
- 8 commenters
Security & PrivacySoftware Engineering2019
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| Jul 4, 2019 | A better zip bomb by masklinn | 483 | 131 |
| Dec 19, 2025 | A better zip bomb (2019) by kekqqq | 191 | 56 |
Cited in comments
Linked from 8 Hacker News comments by 8 different people, from May 2020 to Jul 2025.
Most recent:
