ZIP Slip (Path Traversal)

Creates a ZIP archive containing entries with path traversal in the filename. When extracted without sanitization, files are written outside the target directory.

Target file path after traversal (relative, without leading ../).

Number of ../ levels to prepend to the target path.

Content of the malicious file that will be written via path traversal.

A normal file to include alongside the traversal entry, making the archive look legitimate.

Content for the benign file.

About this tool

Creates a ZIP archive containing entries with path traversal in the filename. When extracted without sanitization, files are written outside the target directory.

Read documentation →