Create tar/zip archives that can exploit directory traversal vulnerabilities

Create tar/zip archives that can exploit directory traversal vulnerabilities

evilarc可以让你创建一个包含内嵌路径中有目录穿越字符的文件的压缩文件。大多数商业压缩程序（winzip等）会阻止提取其内嵌文件含有目录穿越字符的路径的压缩文件。然而，许多软件开发库不包括这些相同的保护机制（例如，Java，PHP等）。如果一个程序和/或库没有防止目录穿越字符，那么evilarc可以用来生成压缩文件，一旦提取，将把文件放在目标系统上的任意位置。

Create tar/zip/tgz/bz2 archives that can exploit directory traversal and symlink vulnerabilities

Create tar/zip archives that can exploit directory traversal vulnerabilities

Python script to create archive containing a file with directory traversal

文件上传漏洞-制作目录遍历压缩包-优化版

Modded version of tarfile.py for testing arbitrary file (over)write via path traversal in Tar archives.

Evil Gang ...

No description available

No description available

No description available

No description available

github pages thingy

Scripts to set up my Archlinux Laptop

A Python3 porting of evilArc, an historic tool to create ZIP which contains a file that could be able to exploit a zip slip vulnerability.