More Efficient Zip Bomb Techniques: Achieving Ultra-High Compression Ratios

This article delves into an innovative zip bomb technique that achieves non-recursive extraction by overlapping files within the zip container, reaching compression ratios up to 28 million (10MB to 281TB). The core of the technology leverages the uncompressed block feature of the DEFLATE algorithm, referencing highly compressed kernel data to avoid recursive extraction. The author provides detailed analysis of construction methods, optimization strategies such as efficient CRC-32 calculation and filename management, and compares different algorithms (like bzip2) and extensions (such as Zip64). This research offers deep technical insights, demonstrates the boundaries of compression technology, and provides practical recommendations for defending against resource exhaustion attacks, holding significant value for the cybersecurity field. The source code and test data have been open-sourced, making it suitable for reference by security researchers and developers.

Original Link:Hacker News

C code80.ai · AI 编码 API 聚合 Claude / GPT 多模型统一接入,稳定不限速,按量计费,几行配置接入 Claude Code。 了解一下 ›

抢沙发

评论前必须登录!

立即登录   注册