{"repo":"The-Robin-Hood/ZipBomb","free":true,"listed":false,"github":"https://github.com/The-Robin-Hood/ZipBomb","clone":"git clone https://github.com/The-Robin-Hood/ZipBomb.git","description":"Teaching bots to respect limits","language":"TypeScript","stars":13,"topics":["automation","bots","security","server","zip"],"license":null,"category":"security-tools","readme_excerpt":"💣 Zip Bomb Trap Demo This project demonstrates a way to defend against malicious bots and crawlers by serving a compressed file (zip bomb) that decompresses into a massive payload, overwhelming memory-limited or poorly coded bots. Read this blog post for more details. --- ⚙️ What It Does - Runs a Express server (written in TypeScript). - Serves a regular homepage at / . - Serves a maliciously crafted gzip file at /trap . - Appears small (e.g., 10MB). - Decompresses into a massive file (e.g., 10GB). - Can break naive crawlers, scrapers, or vulnerability scanners. Includes a simulated bot client that: - Sends Accept-Encoding: gzip header. - Downloads and attempts to decompress the trap. - Simulates a crash if memory exceeds a threshold (e.g., 500MB). --- 🧱 Project Structure --- 🛠 Setup Instructions ----","default_branch":null,"files":null,"tree":[],"storefront":"/r/The-Robin-Hood","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/The-Robin-Hood/ZipBomb/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}