I Use Zip Bombs to Protect My Server

Re:I Use Zip Bombs to Protect My Server by Ugohcet on Wednesday April 30, 2025 @05:38AM (#43842956)

Why use squashfs when you can do the same OP did and serve a compressed version, so that the client is overwhelmed by both the uncompression and the DOM depth:

yes "<div>"|dd bs=1M count=10240 iflag=fullblock|gzip | pv > zipdiv.gz

Resulting file is about 15 mib long and uncompresses into a 10 gib monstrosity containing 1789569706 unclosed nested divs

[ Parent | on HN ]

Re:I Use Zip Bombs to Protect My Server by M95D on Wednesday April 30, 2025 @08:04AM (#43844017)

I like it. :)

[ Parent | on HN ]

Re:I Use Zip Bombs to Protect My Server by sroussey on Wednesday April 30, 2025 @11:45AM (#43846847)

You can also just use code to endlessly serve up something.

Also you can reverse many DoD vectors depending on how you are setup and costs. For example reverse Slowloris attack and use up their connections.

[ Parent | on HN ]

Re:I Use Zip Bombs to Protect My Server by imron on Thursday May 01, 2025 @06:44AM (#43855954)

This is beautiful

[ Parent | on HN ]