This application creates ZIP bombs. Security researchers use these files to test how antivirus software and archive programs handle extreme compression.
This tool creates files that cause disk space exhaustion or system crashes if you open them. Use this software on a computer that is not connected to a network or on a virtual machine. Do not use these files on a computer that contains important personal data. Only use this software for authorized security research or professional antivirus performance testing.
The application runs on any modern Windows computer. Ensure you have the following before you begin:
- Windows 10 or Windows 11.
- At least 500 megabytes of free disk space for the program installation.
- An active browser like Chrome, Firefox, or Edge.
- Administrative rights on your computer to install the software.
Visit the official releases page to access the latest version.
- Open the release page in your web browser.
- Find the section labeled Assets at the bottom of the newest release.
- Click the file that ends with .exe to start the download.
- Save the file to your Downloads folder.
Windows may display a warning because this tool interacts with system files.
- Locate the downloaded file in your browser's history or your Downloads folder.
- Double-click the installer icon.
- If a window appears that says Windows protected your PC, click More info, then click Run anyway.
- Follow the setup prompts on your screen.
- Choose a folder where you want to keep the program files.
- Click Install to finish the process.
The software interface allows you to define the compression levels and the final size of the output file.
- Open the zipbomb application from your Start menu or desktop shortcut.
- Enter the size of the ZIP file you want to create. You can choose sizes ranging from megabytes to petabytes.
- Select the compression ratio. Higher ratios produce files that require more resources to decompress.
- Click the Generate button.
- Choose a location to save your new file.
- The software will process the request and save the output.
The program uses the DEFLATE algorithm. This method finds patterns in data and replaces them with shorter codes. A ZIP bomb repeats these patterns millions of times. When a computer tries to unzip the file, the software attempts to write the uncompressed data to your hard drive. This process overwhelms the available storage and memory of the system.
To test your antivirus program, keep the software window open and active. Use your antivirus scanner to examine the file you just created. Look for the following behaviors:
- The antivirus software identifies the file as a threat or a compressed bomb.
- The scanner stops the extraction process automatically.
- The software issues a report or a log entry regarding the event.
- The system remains responsive and does not freeze.
If the system freezes, your antivirus software failed to detect the bomb before extraction. Restart your computer if the system becomes unresponsive.
If the application fails to open, verify your settings:
- Confirm the download finished completely. A partial file will not run.
- Disable other security software temporarily to check if it blocks the installation.
- Verify you have enough space on your hard drive.
- Ensure you are running the latest version of the installer from the release page.
If you encounter errors during file generation, try selecting a smaller file size. Large files require significant memory and processor speed to create.
The goal of this tool is to teach users about the risks of archive decompression. Many systems lack safeguards against these types of files. You can study the output logs generated by the software to see how the compression operates. Compare results when using different archive formats or compression algorithms. Note how different antivirus programs react to the same file. Record your findings to improve your understanding of software security boundaries.
This tool serves the security research community. The source code is available for review on GitHub. You may modify the code for educational purposes or internal lab testing. Always follow ethical guidelines when using these files in a computing environment. Do not distribute the generated files to others without their explicit knowledge and permission. Proper research relies on controlled environments and clear documentation of your testing methods.