The Zip Bomb **Mk II** !!Downloadable!!

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Thu Aug 27, 2009 4:03 pm

The subject of sending scanned ID images keeps on cropping up. The ususal tactic is to copy & rename a large .dll file, maybe zip it and rename it.

Well, if anyone is interested, I have a zip file you can have that sits in the lads inbox, taking up a mere 320kb of space. However, when he unzips it, it explodes into 22 seperate files totalling 111MB. Each seperate file is a pdf that cannot be opened by Adobe. However, it'll take him forever to find this out.

The files are binary files and cause no damage, contain no viruses, and are wholly benign. They actually contain no data other than strings of zeroes.

If anyone wants a copy of this file please pm me with an email address. If someone wants to upload the file to a download service and link to it I'd be delighted.

Posted: Thu Aug 27, 2009 4:15 pm

Is that exploding zip, we have been talking about? Smile

Posted: Thu Aug 27, 2009 4:31 pm

PM sent.

Seems like a great job! I was stuck to creating a huge text file full of the same letter, renaming and compressing. My 33mb "picture" comes in a nice 33kb zip file. Wink

Posted: Thu Aug 27, 2009 5:42 pm

that sounds fun Smile

Posted: Thu Aug 27, 2009 5:57 pm

PM sent

Posted: Thu Aug 27, 2009 6:29 pm

So simple, yet so brilliant!
clapping

Posted: Thu Aug 27, 2009 6:43 pm

PM sent! Thank you for sharing!

Posted: Thu Aug 27, 2009 7:39 pm

Wow - lots of requests for a copy of what is now being called a Zip Bomb. I'll send the file sometime tomorrow when I'm back in the office.

Posted: Thu Aug 27, 2009 7:53 pm

My bet is that the vast majority of Lads won't even bother to open it if you are telling them it is a scan of your passport or other ID .... but when it comes to the payment stage, and it's a scan of a Western Onion Payment it could be interesting.......

Posted: Thu Aug 27, 2009 8:02 pm

You can use it for what you like - rename any and all of the 22 seperate parts, change the file extensions....I guarantee it'll still be a useless bunch of junk no matter how much the lads try and open it.

I'm off to try and find some even bigger files. I wonder what would happen to the lad sat in his cybercafe if he crashed the PC because the file expanded so much it filled the c drive?

Posted: Thu Aug 27, 2009 8:05 pm

^^ We are figthing against this criminals, not against ciber cafes owners...

I want this tool! Im gonna PM you Very Happy

Posted: Thu Aug 27, 2009 8:07 pm

^ In that case the crashed computers would involve ITP's as they wouldn't be able to use the computer anymore either and the cafe owner (ITP as well) might have to make costs for fixing the pc.

Why 'try' to find bigger files? You can make 'm yourself, there has to be some program that can produce files with a set amount of zero's...

Posted: Thu Aug 27, 2009 8:11 pm

Master of Puppets wrote:

there has to be some program that can produce files with a set amount of zero's...

Yeah, it's called Notepad.

Posted: Thu Aug 27, 2009 8:14 pm

^^^ OK, bigger files = bad idea.

I'm sure there are tools available that can generate very large binary files containing nothing but zeroes. However, my business laptop might very well have some very large files sat on it right now. Whereas I definitely do not have a copy of the assumed file-creation programme.

Posted: Thu Aug 27, 2009 8:36 pm

But the point is that random large files won't work. They'll just be zipped into big files.

ZIP-files work with a huffman tree (if i'm not mistaken): http://en.wikipedia.org/wiki/Huffman_tree

That means that it can replace sets of characters by a single character depending on how often it occurs in the text. It's not that easy to explain, but creating a file with anything else than zero's (or 1's or a's for that matter) will result in a larger zip-file.

Posted: Thu Aug 27, 2009 8:57 pm

MoP is right - the fact that they're all binary zeroes is the reason they zip small. Notepad won't work, those would be ascii 'character 0's. Ascii is 7-bit, so that would be binary 0110000's, which whilst it will zip small, not as small as binary 0000000 (NUL's)

Posted: Thu Aug 27, 2009 9:11 pm

^^ I figured he meant binary 0's. What I'm only learning now, though, is that ASCII is 7 bit. I don't mean to take this off topic, but would a txt file, for example, be a string of 7-bit characters, or are the 8th bits actually used for something?

In any event, if anyone still wants bigger files, it won't take me longer than 10 minutes to write a program which makes them. (Yes, this may come as a surprise to everyone considering my shameful ineptitude in regard to all things computer-related, but I have dabbled in programming before)

Posted: Fri Aug 28, 2009 12:47 am

Master of Puppets wrote:

^ In that case the crashed computers would involve ITP's as they wouldn't be able to use the computer anymore either and the cafe owner (ITP as well) might have to make costs for fixing the pc.

I disagree.

The computer will crash, and then the lad has to waste valuable time rebooting. This is the extent of the "damage" - if a mugu paid for an hour of time, and has to wait 5 minutes to reboot, that's 55 minutes left. The mugu will pay the cost, not the owner of the computer.

This is not a virus, but it will waste a lot of time.

Posted: Fri Aug 28, 2009 2:16 am

Quote:

The mugu will pay the cost, not the owner of the computer

If it were me, I'd argue with the cafe owner that I shouldn't pay time because his computers are teh suck. But I'm Miss Cheapo. Oh, and who knows maybe cafe owners get fed up with bitchy lads who crash their computers, and kick them out!

Trophy Videos · Posted: Fri Aug 28, 2009 3:09 am

Well, I agree with bohigal, too. And if you can find out if the lad is using his own computer, then bombs away! But no viruses!! We are too nice and refined for childish and illegal activities like that. Plus, the lad would not be unable to contact us, or drop us, and your well-planned "Bait of Massive Pain And Anguish" would be blown. You wouldn't want the lad to get off easy, would you? Smile

Hello I'm New here! Joined: 28 Aug 2009 Posts: 6

Clean super Zipbomb

I thought I'd give you guys a hand. Here's a file I recommend you don't open on your own PC. But having some scammer open it will provide quite some entertainment. I doubt they'll be emailing you back anytime soon. But hey, it might keep the scammer down for a while.

Smile

***Link removed...Cherrie

Posted: Fri Aug 28, 2009 6:05 am

^^ What can happen to my Pc if i open it?

I think is a bad idea... because if i see a link here, i think is a safe one.. sometimes people dont care about the post content... and just click the link. Or maybe you can open a new topic... maybe im paranoid lol but you have to be careful

Posted: Fri Aug 28, 2009 7:49 am

@blackkats - we don't encourage and do not allow posting of sending lads any type of malware. This would violate the ITP rule since lads use computers in cybercafes. You won't be damaging his PC but the cafe's owner and all the lad would do is move over the the next PC.

Posted: Fri Aug 28, 2009 8:01 am

BobCat wrote:

The computer will crash, and then the lad has to waste valuable time rebooting. This is the extent of the "damage" - if a mugu paid for an hour of time, and has to wait 5 minutes to reboot, that's 55 minutes left. The mugu will pay the cost, not the owner of the computer.

I agree with you. I don't know how windows works, but on my Ubuntu Desktop, unzipping a very large .txt file full of the same letter freezes the program, but no crash. I have to juggle to close the text editor, but no system-wide freeze or crash. (and we're talking about a 100kb that expands to 150mb of text)

So if Window$ acts the same, it'll slow the computer down like hell, but no crash. I say a brave user tries it and tells us exactly what it does to the system, so we can decide for ourselves what we send your lads. Aint it?

Posted: Fri Aug 28, 2009 2:10 pm

To all of you have PM'd me asking for a copy of the Zip Bomb, I have sent a copy a few minutes ago.

If anyone wants to link to a downloadable version I'll be delighted.

The Zip Bomb Mk II !!Downloadable!!	View next topic View previous topic