/Bamby

In memory zip bomb

Primary LanguagePython

Bamby

In memory ZIP bomb Creator

"A zip bomb, also known as a zip of death or decompression bomb,
is a malicious archive file designed to crash or render
useless the program or system reading it."
Read more at Wikipedia

Usage

git clone https://github.com/thewh1teagle/bamby
cd bamby
python3 main.py

Sample output

Before de-compression: 3.072KB
After de-compression: 10000000000GB
  • 1000GB = 1TB, 1000TB = 1PB

How to protect against zip bomb?

Have a look under safe_unzip.py
The idea is simple,
Limit the possible resources of the process,
no matter what, it will not hurt your system 😃