2017 © Pedro Peláez
 

library laravel-zipbomb

Enable zip bomb defense of your app

image

adrianmejias/laravel-zipbomb

Enable zip bomb defense of your app

  • Friday, August 11, 2017
  • by adrianmejias
  • Repository
  • 1 Watchers
  • 3 Stars
  • 76 Installations
  • PHP
  • 0 Dependents
  • 0 Suggesters
  • 0 Forks
  • 0 Open issues
  • 16 Versions
  • 1 % Grown

The README.md

Latest Version Software License Latest Version on Packagist Build Status StyleCI Total Downloads, (*1)

Enable zip bomb defense of your app, (*2)

!!Experimental Code!!

Not for use in production environment., (*3)

Installation

You can install the package via composer:, (*4)

``` bash $ composer require adrianmejias/laravel-zipbomb, (*5)


Start by registering the package's the service provider: ```php // config/app.php (L5) 'providers' => [ // ... 'AdrianMejias\ZipBomb\ZipBombServiceProvider', ],

Next, publish the config file., (*6)

``` bash $ php artisan vendor:publish --provider="AdrianMejias\ZipBomb\ZipBombServiceProvider", (*7)


A file named `10G.gzip` should be generated in the `storage/app/zipbomb` folder. If this file does not exist after installation. Use the following command at `storage/app/zipbomb` ``` bash $ dd if=/dev/zero bs=1M count=10240 | gzip > 10G.gzip

The following config file will be published in config/zipbomb.php, (*8)

``` php /** * Laravel Zip Bomb Configuration. * * Check for nikto, sql map or "bad" subfolders which only exist on * WordPress. */, (*9)

return [, (*10)

/*
 * User-Agents to check against.
 */
'agents' => [
    'nikto',
    'sqlmap',
],

/*
 * Paths to check against.
 */
'paths' => [
    'wp-',
    'wordpress',
    'wp/*',
],

/*
 * Path to the zip bomb file.
 */
'zip_bomb_file' => storage_path('app/zipbomb/10G.gzip'),

];, (*11)


Finally, register the middleware: ``` php // app/Http/Kernel.php protected $middleware = [ // ... \AdrianMejias\ZipBomb\Middleware\ZipBomb::class, ];

This package also comes with a facade, which provides an easy way to call the the class for whatever reason., (*12)

``` php // config/app.php, (*13)

'aliases' => [ // ... 'ZipBomb' => AdrianMejias\ZipBomb\ZipBombFacade::class, ];, (*14)


## Changelog Please see [CHANGELOG](CHANGELOG.md) for more information what has changed recently. ## Testing ``` bash $ composer test

Contributing

Please see CONTRIBUTING for details. Due to nature of this package, there's a fair chance features won't be accepted to keep it light and opinionated., (*15)

Security

If you discover any security related issues, please email adrianmejias@gmail.com instead of using the issue tracker., (*16)

Credits

License

The MIT License (MIT). Please see License File for more information., (*17)

The Versions

11/08 2017

dev-master

9999999-dev https://github.com/adrianmejias/laravel-zipbomb

Enable zip bomb defense of your app

  Sources   Download

MIT

The Requires

 

The Development Requires

laravel zip zipbomb defense adrianmejias bomb defend

09/07 2017

v1.0.14

1.0.14.0 https://github.com/adrianmejias/laravel-zipbomb

Enable zip bomb defense of your app

  Sources   Download

MIT

The Requires

 

The Development Requires

laravel zip zipbomb defense adrianmejias bomb defend

09/07 2017

v1.0.13

1.0.13.0 https://github.com/adrianmejias/laravel-zipbomb

Enable zip bomb defense of your app

  Sources   Download

MIT

The Requires

 

The Development Requires

laravel zip zipbomb defense adrianmejias bomb defend

09/07 2017

v1.0.12

1.0.12.0 https://github.com/adrianmejias/laravel-zipbomb

Enable zip bomb defense of your app

  Sources   Download

MIT

The Requires

 

The Development Requires

laravel zip zipbomb defense adrianmejias bomb defend

09/07 2017

v1.0.11

1.0.11.0 https://github.com/adrianmejias/laravel-zipbomb

Enable zip bomb defense of your app

  Sources   Download

MIT

The Requires

 

The Development Requires

laravel zip zipbomb defense adrianmejias bomb defend

09/07 2017

v1.0.10

1.0.10.0 https://github.com/adrianmejias/laravel-zipbomb

Enable zip bomb defense of your app

  Sources   Download

MIT

The Requires

 

The Development Requires

laravel zip zipbomb defense adrianmejias bomb defend

09/07 2017

v1.0.9

1.0.9.0 https://github.com/adrianmejias/laravel-zipbomb

Enable zip bomb defense of your app

  Sources   Download

MIT

The Requires

 

The Development Requires

laravel zip zipbomb defense adrianmejias bomb defend

09/07 2017

v1.0.8

1.0.8.0 https://github.com/adrianmejias/laravel-zipbomb

Enable zip bomb defense of your app

  Sources   Download

MIT

The Requires

 

The Development Requires

laravel zip zipbomb defense adrianmejias bomb defend

09/07 2017

v1.0.7

1.0.7.0 https://github.com/adrianmejias/laravel-zipbomb

Enable zip bomb defense of your app

  Sources   Download

MIT

The Requires

 

The Development Requires

laravel zip zipbomb defense adrianmejias bomb defend

09/07 2017

v1.0.6

1.0.6.0 https://github.com/adrianmejias/laravel-zipbomb

Enable zip bomb defense of your app

  Sources   Download

MIT

The Requires

 

The Development Requires

laravel zip zipbomb defense adrianmejias bomb defend

09/07 2017

v1.0.5

1.0.5.0 https://github.com/adrianmejias/laravel-zipbomb

Enable zip bomb defense of your app

  Sources   Download

MIT

The Requires

 

The Development Requires

laravel zip zipbomb defense adrianmejias bomb defend

09/07 2017

v1.0.4

1.0.4.0 https://github.com/adrianmejias/laravel-zipbomb

Enable zip bomb defense of your app

  Sources   Download

MIT

The Requires

 

The Development Requires

laravel zip zipbomb defense adrianmejias bomb defend

09/07 2017

v1.0.3

1.0.3.0 https://github.com/adrianmejias/laravel-zipbomb

Enable zip bomb defense of your app

  Sources   Download

MIT

The Requires

 

The Development Requires

laravel zip zipbomb defense adrianmejias bomb defend

09/07 2017

v1.0.2

1.0.2.0 https://github.com/adrianmejias/laravel-zipbomb

Enable zip bomb defense of your app

  Sources   Download

MIT

The Requires

 

The Development Requires

laravel zip zipbomb defense adrianmejias bomb defend

09/07 2017

v1.0.1

1.0.1.0 https://github.com/adrianmejias/laravel-zipbomb

Enable zip bomb defense of your app

  Sources   Download

MIT

The Requires

 

The Development Requires

laravel zip zipbomb defense adrianmejias bomb defend

09/07 2017

v1.0.0

1.0.0.0 https://github.com/adrianmejias/laravel-zipbomb

Enable zip bomb defense of your app

  Sources   Download

MIT

The Requires

 

The Development Requires

laravel zip zipbomb defense adrianmejias bomb defend