Which archiver is the safest? See the benchmark
Every archiver opens files; few check them. Pullzip runs a public benchmark of 34 crafted archives — the tricks real attackers use — and shows, case by case, whether each one is caught and contained. The same corpus can be run against 7-Zip, Bandizip, WinRAR and others on your own PC.
- 34 attack cases, all detected and contained before extraction
- Mark-of-the-Web is kept on extracted files, so Windows still warns
- The corpus and the comparison script are open — run them yourself
- Results update with every release
Questions
What does the benchmark test?
Path traversal, symbolic and hard links, absolute and network paths, zip bombs and overlapping entries, disguised and hidden programs, macro documents, secret files, personal data, prompt injection aimed at AI, legacy code-page names and the Mark-of-the-Web.
Can I compare other archivers?
Yes. The repository ships the sample archives and a PowerShell script that extracts each one with every archiver installed on your PC and records what escaped, what was refused and what was kept safe.
Other languages: 한국어 · 日本語 · 简体中文 · Deutsch · Français · Español · Português (Brasil) · Italiano · Русский · Türkçe · Bahasa Indonesia · Pullzip home