ZIP file viewer and extractor
List a ZIP archive locally, inspect paths and sizes, then extract only the file you choose.
- SECURE
- NO UPLOADS
- NO SIGNUP
- BROWSER BASED
- FREE
- FOREVER.
Support us with a link or a share
Use the ZIP file viewer before expanding the archive
A ZIP file keeps its authoritative contents list in a central directory near the end of the archive. This viewer reads that directory first and shows every recorded path, compression method, compressed size, declared expanded size, and expansion ratio. Listing does not decompress the files, so you can understand an unfamiliar archive before choosing an entry.
Use the path filter for a large archive. The visible list is bounded to keep the page responsive, while the archive summary still counts the complete directory. ZIP64 sizes and offsets are accepted when they fit JavaScript safe integers. Stored and Deflate entries are the extractable V1 formats; unknown methods remain visible with an unsupported label.
Unsafe paths are quarantined, not repaired silently
An archive entry can be named ../../secret.txt, begin at a filesystem root, or use a Windows drive path. Native extraction software that joins such a name to a destination without checking it can write outside the selected folder. This browser tool never creates that directory tree. It quarantines absolute and parent-traversal paths and gives every safe download only the final filename.
Encrypted entries are listed but not offered for extraction. Extremely large declared output and high-ratio expansion bombs are also blocked before allocation. During Deflate extraction, the decompressor may not exceed the exact declared uncompressed size, and the finished bytes must match both that size and the central-directory CRC. A damaged archive therefore cannot produce a successful download receipt.
Extract one deliberate file
Select Extract file beside a regular safe entry. The browser decompresses only that entry and offers it as a download; it does not unpack unrelated neighbors. This is useful for checking a package, retrieving one document, or examining an archive sent by someone else without first scattering files across a folder.
The archive stays on this device. No path, filename, directory listing, compressed byte, or extracted content is uploaded. Extracted database scripts can be opened in the SQL file viewer, while document packages can be handled by the dedicated converters rather than treated as arbitrary folders.
Questions
Is the ZIP uploaded?
No. The central directory is parsed and selected entries are decompressed in this browser tab.
Why can some entries not be extracted?
Absolute and parent-traversal paths, encrypted entries, unknown compression methods, and declared expansion bombs are quarantined instead of being renamed or expanded silently.
Does it extract the whole archive?
No. The route lists the whole archive and extracts one selected regular file at a time. That keeps the destination explicit and avoids writing an untrusted directory tree.
Does it support ZIP64?
The listing reader supports ZIP64 central-directory sizes and offsets when they fit JavaScript safe integers. Stored and Deflate entries can be extracted.