lotp icon indicating copy to clipboard operation
lotp copied to clipboard

[LOTP] Add unzip

Open fproulx-boostsecurity opened this issue 7 months ago • 0 comments

Description of the LOTP tool

unzip is a common UNIX utility to decompression *.zip files

zipslip

When used with certain flags it can lead to zip slip (https://security.snyk.io/research/zip-slip-vulnerability)

As documented in man page (https://linux.die.net/man/1/unzip), the -: flag disables security feature added since the early 2000s that would disallow extracting ../ relative paths

fproulx-boostsecurity avatar Jul 17 '24 15:07 fproulx-boostsecurity