zip

Creator
Creator
Seonglae ChoSeonglae Cho
Created
Created
2023 Oct 24 2:26
Editor
Edited
Edited
2025 Jul 7 22:8
Refs
Refs
7z
zipfile

Password

 
 
 
 
 
Introduction to the 'Multiple Personality ZIP' technique which exploits duplicate information (Offset vs Size) in the ZIP file format to display different file lists from the same archive depending on the parser. By setting different values for the "central directory start offset" and "size" fields in the End of Central Directory Record (EoCDR), some tools will display hidden files based on offset while others based on size. This demonstrates how duplicate metadata can be exploited.
 
 

Recommendations