hub · compare

/zip

well-formed STORED ZIP — single entry, CRC32 matches body, declared sizes match actual, central directory entries agree with local file headers, EOCD present

chaos chaos.catastrophic.io

GET /zip

ZIP archive responses with a deliberate structural flaw — wrong CRC32, central-directory-vs-local-header disagreement, ZIP64 size lie, or truncated central directory. Tests how archive extractors, package managers, and scanners handle metadata-vs-bytes contradictions. Zip-slip and zip-bomb are deliberately not served — see the note below.

modes: bad-crc central-dir-mismatch zip64-lie truncated

full chaos docs →

control not.catastrophic.io

GET /zip

well-formed STORED ZIP — single entry, CRC32 matches body, declared sizes match actual, central directory entries agree with local file headers, EOCD present

full control docs →

Build against not.catastrophic.io/zip, then flip the hostname to chaos.catastrophic.io to exercise the chaos.