ptoomey3/evilarc

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1055 stars · 188 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

evilarc is a Python CLI tool that creates tar and zip archives containing files with directory traversal characters in their embedded paths. It is used to generate malicious archives that exploit vulnerable extraction libraries to write files to arbitrary locations on a target system.

Use cases

• create zip files that exploit directory traversal on extraction
• test whether an application is vulnerable to zip slip
• generate malicious tar archives for penetration testing
• demonstrate archive extraction vulnerabilities in Java or PHP libraries
• craft archives that write files outside the extraction directory

When to choose

• you are penetration testing or security researching archive extraction flaws
• you need to test whether your own code safely handles malicious zip/tar paths
• you want a simple Python tool to craft traversal archives

When to avoid

• you need a general-purpose archive creation tool
• you require a maintained project with an explicit license and active releases
• you need protection against zip slip rather than a way to demonstrate it

Facets

cli-tool · maturity maintenance

security cli compression security penetration-testing developer-tools python cli cross-platform zip-slip directory-traversal archive-exploitation penetration-testing-tool

Member repositories

For agents

markdown · JSON · MCP: product_card(name="ptoomey3/evilarc")