Local File Autopsy / bounded archives

Open the archive. Keep the files off our server.

Inventory ZIP, TAR, and TAR.GZ files, review unsafe paths and expansion warnings, extract only approved entries, create new archives, or convert safe contents—entirely in this browser tab.

Choose or drop one archiveZIP, TAR, TAR.GZ, or TGZ; 50 MB compressed maximum.

No archive loaded.

What “safe extraction” means here

Archive Desk normalizes names, rejects absolute and parent-directory paths, blocks Unix links and Windows-special names, detects normalized collisions, and validates ZIP/GZIP CRC-32 checksums. It then creates a new browser download; it does not silently unpack into a folder.

Deliberately bounded

All work is synchronous and local in this first release, so caps protect both memory and responsiveness. ZIP64, multi-disk ZIP, encrypted entries, PAX/GNU path extensions, links, and unsupported compression methods remain visible as findings but cannot be extracted. TAR cannot authenticate file data because the format has no per-file data checksum.

Third-party engine

ZIP and GZIP compression use the vendored, MIT-licensed fflate browser module. Vader owns the policy, inventory checks, extraction gates, interface, and adversarial tests; it does not invent a compression algorithm.