Skip to content

Instantly share code, notes, and snippets.

@Tony3-sec

Tony3-sec/PKZIP cheat sheet

Last active April 28, 2017 11:44
Show Gist options
  • Save Tony3-sec/7e81d1672199493091479aff65a3842e to your computer and use it in GitHub Desktop.
Save Tony3-sec/7e81d1672199493091479aff65a3842e to your computer and use it in GitHub Desktop.
Download ZIP
Raw
PKZIP cheat sheet
## reference
https://pkware.cachefly.net/webdocs/APPNOTE/APPNOTE-6.2.2.TXT
4.3.7 Local file header:
local file header signature 4 bytes (0x04034b50)
version needed to extract 2 bytes
general purpose bit flag 2 bytes
compression method 2 bytes
4.3.12 Central directory structure:
[central directory header 1]
.
.
.
[central directory header n]
[digital signature]
File header:
central file header signature 4 bytes (0x02014b50)
version made by 2 bytes
version needed to extract 2 bytes
general purpose bit flag 2 bytes
compression method 2 bytes
4.4.5 compression method: (2 bytes)
0 - The file is stored (no compression)
1 - The file is Shrunk
2 - The file is Reduced with compression factor 1
3 - The file is Reduced with compression factor 2
4 - The file is Reduced with compression factor 3
5 - The file is Reduced with compression factor 4
6 - The file is Imploded
7 - Reserved for Tokenizing compression algorithm
8 - The file is Deflated
9 - Enhanced Deflating using Deflate64(tm)
10 - PKWARE Data Compression Library Imploding (old IBM TERSE)
11 - Reserved by PKWARE
12 - File is compressed using BZIP2 algorithm
13 - Reserved by PKWARE
14 - LZMA (EFS)
15 - Reserved by PKWARE
16 - Reserved by PKWARE
17 - Reserved by PKWARE
18 - File is compressed using IBM TERSE (new)
19 - IBM LZ77 z Architecture (PFS)
97 - WavPack compressed data
98 - PPMd version I, Rev 1
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment