This article delves into an innovative zip bomb technique that achieves non-recursive extraction by overlapping files within the zip container, reaching compression ratios up to 28 million (10MB to 281TB). The core of the technology leverages the uncompressed block feature of the DEFLATE algorithm, referencing highly compressed kernel data to avoid recursive extraction. The author provides detailed analysis of construction methods, optimization strategies such as efficient CRC-32 calculation and filename management, and compares different algorithms (like bzip2) and extensions (such as Zip64). This research offers deep technical insights, demonstrates the boundaries of compression technology, and provides practical recommendations for defending against resource exhaustion attacks, holding significant value for the cybersecurity field. The source code and test data have been open-sourced, making it suitable for reference by security researchers and developers.
