Skip to content
littlekit.app

ZIP extractor

Browse ZIP entries, choose files and extract verified contents locally with bounded expansion and CRC checks.

Choose a file

Choose a file to get started, or drag and drop it here.

Up to 16 MiB

Browse archive entries and select what to extract. Selected contents are checked before downloads appear.

How it works & useful details

Browse archive entries and select what to extract. Selected contents are checked before downloads appear.

Everything runs locally. Files are never uploaded. Maximum 16 MiB per input file, 32 MiB combined, and 1 file. Processing can be cancelled.

ZIP support covers stored and DEFLATE entries, up to 128 entries and 32 MiB declared expansion. ZIP64, encrypted, multi-disk, symbolic-link and unsafe-path archives are rejected. Names must be ASCII or UTF-8; legacy encodings and Unicode path extra fields are unsupported. Extracted downloads use unique flat names. Only selected extracted entries have their contents verified.

About this tool

ZIP extractor lists the entries in a ZIP archive so you can select only the files you need, then extracts them with verified contents. It is the safe way to open an archive without dumping every file at once.

Extraction happens locally with bounded expansion: the archive cannot inflate beyond the stated limits, and each extracted entry is checked before it is offered as a download. Unsafe paths, encryption, and unsupported compression methods are rejected.

How to use it

  1. Choose the ZIP archive.
  2. Browse the entry list and declared sizes.
  3. Select the entries you want and extract them.
  4. Download the verified files individually or together.

How extraction stays safe

  • Entries are listed first, so you choose what to extract instead of unpacking everything.
  • Each extracted file's CRC-32 checksum is verified against the archive, so corrupted entries are reported rather than downloaded.
  • Total expansion is limited, which protects against "zip bombs" whose small archives expand to gigabytes.
  • Entry names like ../../etc/passwd (the "Zip Slip" attack) or absolute paths are rejected, and files are offered as downloads rather than written into folders on your disk.

Nothing inside the archive is opened or executed during extraction.

When it helps

Use it to pull one document out of a large archive, to check an attachment's contents without saving the whole thing, or on a locked-down computer where you cannot install an archive program. Office files (DOCX, XLSX, PPTX) are ZIP archives too. Rename a copy to .zip to extract the images embedded in a document.

Password-protected archives and compression methods other than stored and Deflate, such as the LZMA or BZIP2 options in 7-Zip, are rejected with an explanation. Standard ZIP files from Windows, macOS, and most other tools use Deflate.

Frequently asked questions

Are all entries verified?

Only the entries you select are fully read and verified during extraction; the inspector lets you review declared metadata first.

Which archives are rejected?

ZIP64, encrypted, multi-disk, symbolic-link, and unsafe-path archives, along with compression methods outside the supported set.

What are the limits?

One archive up to 16 MiB with at most 128 entries and 32 MiB of declared expansion.

Does it support RAR or 7z files?

No. Only ZIP archives are supported. RAR and 7z use different formats that need their own tools.