The Zip Bomb **Mk II** !!Downloadable!!

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Fri Aug 28, 2009 2:15 pm

rootuser has already offerd such self-extracting files, on a link to his baiting tools site which was in his siggy line then. I think that was last year.

Posted: Fri Aug 28, 2009 2:58 pm

If anyone wants it, I now have the MK II version available. Only 2 files in the zip, it blossoms from under ½MB to almost 200MB. Yours if you want it.

Posted: Fri Aug 28, 2009 3:50 pm

Downloadable from:

ZipBomb_1:
DivShare File - ZipBomb_1.zip

ZipBomb_2:
DivShare File - ZipBomb_2.zip

ZipBomb 1 is 320KB in size, contains 20 files and balloons to 100MB in total when unzipped.

ZipBomb 2 is 2 files, under ½ MB zipped, almost 200MB unzipped.

The files are large binary files consisting of a solid mass of zeroes. No malware, totally benign.

Posted: Fri Aug 28, 2009 3:58 pm

These should work very nicely for all those courier services that want $125 or so to deliver your package. No mugu setup effort at all. Evil or Very Mad

Posted: Sat Aug 29, 2009 8:48 am

Really great job!
Thanks clapping

Posted: Sat Aug 29, 2009 9:13 am

Got them. Thanks a lot Alan!

Posted: Sat Aug 29, 2009 10:16 am

Ca this be combined with the write junk program to produce a stack of rubbish for the lads?

Or file destructor program?

Posted: Sat Aug 29, 2009 11:43 am

An ethical question?

A combination of the zip bomb and the write junk programs look set to become an important part of my arsenal. We know that the contents of the files we are sending are totally benign, but can we name the files inside the zip archive things like tojan.exe and rootkit.bat etc... I thought it might be good to create some lad paranoia when you've had enough and want to burn a particular lad.

Posted: Sat Aug 29, 2009 2:26 pm

@ Ophelia Dikki

Quote:

create some lad paranoia when you've had enough and want to burn a particular lad.

Does that come with fries?

Posted: Sat Aug 29, 2009 2:44 pm

I tried this on my XP. What am I meant to do. I right clicked and extrated zipbomb 2. it took about 5seconds, then i had 2 PDF's that dont open.

200mb is not enough is it? or am I doing it wrong. something like 20GB would be better! takes about 30minutes Very Happy

Posted: Sat Aug 29, 2009 2:59 pm

NickTheCop wrote:

^^ I figured he meant binary 0's. What I'm only learning now, though, is that ASCII is 7 bit. I don't mean to take this off topic, but would a txt file, for example, be a string of 7-bit characters, or are the 8th bits actually used for something?

Actually they're probably padded to ANSI/8-bit by notepad these days, fair do's. But Notepad still won't be able to conveniently write NUL (binary (0)0000000's in ASCII(ANSI)). Just sayin Wink

Those extra MSB's extend the ASCII space to include other non-Latin characters.

Here's a nice off-topic yet related fact - the binary, zip (or any other 8 or multiple thereof bit) files when emailed are encoded back to an ascii subset (as SMTP is a 7-bit protocol) then transmitted over email, then re-assembled back to 8-bit.

Edit: I agree, we need the 1 gig version that takes a few minutes Wink

Posted: Sat Aug 29, 2009 7:07 pm

Moose Head wrote:

I tried this on my XP. What am I meant to do. I right clicked and extrated zipbomb 2. it took about 5seconds, then i had 2 PDF's that dont open.

200mb is not enough is it? or am I doing it wrong. something like 20GB would be better! takes about 30minutes Very Happy

If you want a massive hard drive hit, copy, paste & rename the files multiple times, then combine them into one zip file.

The files can be renamed, file extensions changed, whatever you like. The fact remains these are files full of useless junk. The files are currently pdf's because I find that Acrobat Reader is slow to open and will therefore eat up time as the lad tries to open each file. But you can call them what you want.

Because they are around 100MB of zeroes, Winzip can zip (and unzip) very quickly. To slow the unzip process down will require files that contain values other than zero. However, that will result in a larger zipped file.

20GB of zeroe's should still extract at the same rate as 20MB of zeroes, so it'll still not take 30 minutes - more like 3. I do wonder if the file buffer or windows\temp file will cause the PC to freeze and need a reboot if a really massive file tried to unzip, though.

Posted: Sat Aug 29, 2009 7:54 pm

That was a bit confusing^ but I will give it a go

A few hi res pics of some cow shit might bulk up the folders a bit Laughing

Posted: Sat Aug 29, 2009 8:36 pm

Throw one or both of these into the mix too

This one's for Lad's who like to sit and watch a timer Laughing

and this one's for Lads who like a shock Twisted Evil

Posted: Sat Aug 29, 2009 9:08 pm

Quote:

but can we name the files inside the zip archive things like tojan.exe and rootkit.bat etc

Whilst we don't send viruses etc I can't see anything against sending a file that looks like a virus, after all, it is only a file name. You could send a jpg that states that the Lad's todger is now subject to a voodoo curse and will fall off if he goes to sleep.
Not actually harmful in its own right. But you can only hope it worries him a bit.
Would it do any good? if you feel like burning the lad then maybe it could be used, the bait then might descend into a slanging match and result in you getting a few siggy line entries.

Posted: Sat Aug 29, 2009 9:24 pm

I can write a little script, that'll cycle through all the files on system and put the words delete before each file.. It does no harm, but it'll scare the shit outta the lads Twisted Evil

V

Posted: Sat Aug 29, 2009 11:51 pm

^ That probably borders on harmfull... and in any case, it might break file-paths and therefore make stuff stop working.

Maybe someone with a really big memory (like 8 gig's) or so can make 1 huge file containing only NULL's. It'll zip small but hopefully will freeze any pc with not enough memory. (or at least fill the memory and the swap-partition (or swap-file))

Posted: Sun Aug 30, 2009 5:54 am

@ Mr B'Stard

Thanks for that. I've been renaming .dll files for ages and it's become a bit of an issue with my lad. Let's see what happens when my ditzy housewife sends him your zipbomb Twisted Evil

Posted: Sun Aug 30, 2009 6:01 am

Gomer do those come gift wrapped?

Posted: Sun Aug 30, 2009 10:17 am

Inspector gadget thks I thought that my idea would likely be o.k. Another one would be to name the file as the latest virus listed on the Symnatec or other detection sites. If the lad's internet cafe actually uses some virus protection likely the file will be stopped.

On another project I'm involved with the software we use gives people all sorts of trouble setting off virus detectors, due to the language it is written in. We tell people to create an exception in their virus detection program, but often this has little effect. In one instance after the projectexecutive contacted one major anti-virus vendor and got them to do someting at their end. Despite this we still continued to have trouble.

I'm sure most of the cafes must have some sort of virus protection now as the lads are probably always surfing to questionable sites.

So this could be another way to create some lad pain.

Posted: Sun Aug 30, 2009 3:46 pm

Just sent the Mark II model to the lad... err... barrister. I hope it gives his laptop a moderate case of binary indigestion...

Posted: Sun Aug 30, 2009 5:51 pm

Zip bomb sent to my cheque lad, he wasn't too pleased but did send me a second bank account, so another tick in the 'win' column.

Posted: Sun Aug 30, 2009 7:17 pm

I just experimented with building an even bigger ZipBomb. A 3.2MB zip file expands to almost 1GB. The unzip time was 45 seconds.

You could build your own bigger ZipBomb, and if you wanted to keep below GMail's attacment limit of 'around 10MB' that would give you an unzipped set of files of just under 3GB. That might cause some lower-spec machines to creak and groan a bit.

Posted: Sun Aug 30, 2009 9:03 pm

i'm buildin a zip bomb maker, it asks how big you want it. Then it'll fill a file of your choice and location with a specially selected binary string. Pm me if you'd like to become a tester. I must warn ye now, its build using VB.Net, so you'll need the .Net framework

V

Posted: Mon Aug 31, 2009 12:38 am

writejunk has a feature that will create a junk file of all (binary) zeros. Simply invoke writejunk with the -z flag as in

Code:

C:\419>writejunk.exe -z

You will then be prompted for the file name and the desired file size. So, you can easily create huge files that will compress to teeny zip files.

The Zip Bomb Mk II !!Downloadable!!	View next topic View previous topic