Tools Archive Alchemist - extraction vulnerabilities

[dEEpEst]

Archive Alchemist is a tool for creating specially crafted archives to test extraction vulnerabilities.

Features​

• Create ZIP and TAR archives with malicious patterns
• Support for path traversal attacks
• Support for symlinks and hardlinks
• Ability to set special permission bits (setuid, setgid, sticky bit)
• Fine-grained control over file attributes (mode, uid, gid, mtime)
• Multiple manipulation commands: add, replace, append, modify
• Multiple helper commands: extract, list, read
• Create polyglot files (prepend archive with data + adjust headers)

Installation​

To see this hidden content, you must like this content.