Do you provide zip bombs or malicious archives?

No. Every archive here is safe to extract. For hostile inputs, build them yourself in an isolated environment.

Archive sample files

ZIP, TAR and GZ archives in exact sizes for testing extraction, limits and bulk uploads.

Formats in this category

Format	What it is	Sizes
ZIP sample files.zip application/zip	The most common archive format: many files compressed individually in one container.	1 KB to 10 MB
TAR sample files.tar application/x-tar	The Unix archive format: files concatenated with headers, without compression.	10 KB to 10 MB
GZ sample files.gz application/gzip	A single compressed file. The compression used for web responses and Unix tools.	1 KB to 10 MB

About these files

Archives are a risky kind of upload. One small file can unpack into thousands of entries, write outside its target folder or expand to exhaust a disk. Testing with well-behaved archives first establishes that the normal path works before you test the hostile ones.

These samples are deliberately tame: a few readable text files and one payload of random bytes that sets the size.

Ready-made samples

Hand-designed files with realistic content or a specific edge case.

Curated sample files: Archives
File	Format	Size	Contents	Download
Sample .tar.gz archive (double extension)sample-archive.tar.gz	GZ	1.02 KB1,040 bytes	Entries: 3 files in 1 folder	Download GZ

Popular downloads by size

Jump straight to a file. Every size is exact to the byte.

ZIP

TAR

GZ

Or browse every format at one size: 1 KB, 5 KB, 10 KB, 25 KB, 50 KB, 100 KB, 500 KB, 1 MB, 5 MB, 10 MB.

What to test

File upload testing
Test an upload form or endpoint with files of every size and type it should accept, and several it should refuse.
CI/CD pipelines
Fixtures for build, test and deployment pipelines, with checksums for verification.
File parser testing
Well-formed files and deliberate edge cases for testing code that reads CSV, JSON, XML, PDF and more.

Related categories

Archive files: questions

Do you provide zip bombs or malicious archives?: No. Every archive here is safe to extract. For hostile inputs, build them yourself in an isolated environment.