News for hackers. Stuff that matters.

A comment on A better zip bomb. Parent comment

Re:A better zip bomb by nolok on Thursday July 04, 2019 @09:16AM (#20354301)
It probably flags it as unsafe and triggers smart screen. Meaning you have to go out of your way to use the file.

As for malware that would be unzipped when using an external zip file; first you would need to trigger the zip bomb on defender but not the external tool, and second defender will still scan the individual files getting unziped by that tool.

[ Parent | on HN ]
Re:A better zip bomb by keanebean86 on Thursday July 04, 2019 @10:50AM (#20355081)
Maybe do a self extractor that's specially crafted to ignore the zip-bomb part and only extract the malware part? Then the self extractor can execute the malicious code after extracting to memory.
[ Parent | on HN ]