Details on how to drop a “zip bomb” on skiddies attacking your website – https://blog.haschek.at/post/f2fda
You can compress 4.5 PETABYTEs of (null) data down to 42 kilobytes, and let your attackers fill their disks as they try to decipher it! (The lulz alone are worth it!)
Here’s how you can make a 10 MB (gzip) version that will expand to 10 GB –
dd if=/dev/zero bs=1M count=10240 | gzip > 10G.gzip
Push that to your webserver, serve it up via PHP, and – voila! Download a squirrel to your site’s would-be abusers!