Got Hackers? Zipbomb ’em!

Details on how to drop a “zip bomb” on skiddies attacking your website – https://blog.haschek.at/post/f2fda

You can compress 4.5 PETABYTEs of (null) data down to 42 kilobytes, and let your attackers fill their disks as they try to decipher it!  (The lulz alone are worth it!)

Here’s how you can make a 10 MB (gzip) version that will expand to 10 GB –

dd if=/dev/zero bs=1M count=10240 | gzip > 10G.gzip

Push that to your webserver, serve it up via PHP, and – voila!  Download a squirrel to your site’s would-be abusers!

(You’re welcome…)

– Squirrel01