Уровень 0 · материалов: 6
В кластер входят документы, описывающие создание и применение zip-бомб или механизмов сжатия для вызова сбоев в работе программного обеспечения, и не входят документы об иных методах защиты серверов.
Общие признаки: zip-бомбы, распаковка сжатых данных, истощение ресурсов сервера или бота, активная защита от сканеров и краулеров, отказ в обслуживании (DoS)
Группа выше: Перехват сессий и атаки на исчерпание ресурсов
Смысл: The main idea is to utilize the standard gzip compression feature of web crawlers against them by serving 'zip bombs' (decompression bombs) to malicious bots, thereby crashing the bot's resources and discouraging further attacks on the server.
The author protects their server from malicious bots by serving them highly compressed 'zip bombs' that crash the bot's system during decompression.
Смысл: The main idea is to use 'active defense' by exploiting the way clients handle compressed data to crash automated vulnerability scanners, effectively turning a common compression feature into a denial-of-service tool against attackers.
The author demonstrates how to use a GZIP bomb delivered via PHP to crash automated vulnerability scanners and browsers that target a website.
Смысл: The main idea is that the aggressive and often unethical scraping behavior of AI crawlers is driving website owners to move from passive defenses (like robots.txt) to active, destructive countermeasures like zip bombs to protect their server resources.
Website owners are increasingly using computationally expensive Proof-of-Work tasks and resource-exhausting 'zip bombs' to combat AI crawlers that ignore standard blocking protocols.
Смысл: The author describes a humorous way to deal with bots and novice hackers who scan servers for backup files. Instead of returning a 404 Not Found error, the author configures the server to provide a massive file of random data that appears to be a ZIP archive, thereby wasting the attacker's time and bandwidth.
The author shares a method to trick bots scanning for backup files by serving a 1.5GB dummy ZIP file at an extremely slow speed using Nginx.
Смысл: The main idea is to demonstrate how a resource-exhaustion attack (Zip Bomb) can be used to bypass file-type validation in PHP, allowing an attacker to leave a malicious script on a server by crashing the process before the cleanup code can run.
An attacker can use a zlib-based 'zip bomb' within a fake SWC image to crash PHP's `getimagesize()` function, bypassing file deletion and enabling Remote Code Execution.
Смысл: The main idea is to demonstrate a method for creating non-recursive zip bombs with massive compression ratios by exploiting the internal structure of the ZIP format and the DEFLATE algorithm, while analyzing the security implications for software parsers.
The author explains how to create a highly efficient, non-recursive zip bomb using overlapping files and 'quoted' headers to bypass standard compression limits and crash resource-unconstrained parsers.