title: PHP - Is it possible to implement a gzip bomb in PHP for malware scanners
body: <p>I'm currently developing a PHP class as sort-of-IDS for webapps that can detect bruteforce and SQLi attacks and one thing I came to realize is that most attacks on my systems are being done from unconfigured malware scanners like nikto or sqlmap. Let's disregard for a moment that this should be done by the server and not the web app.</p>
  
  <p>Since they are all built to analyze answers from webservers I thought it could be possible to bomb them with a <a href="https://en.wikipedia.org/wiki/Zip_bomb" rel="nofollow">ZIP bomb</a>.</p>
  
  <p>The idea is that my PHP script sends a gzip header with small (compressed) gzip data that the client will unzip - causing it to exhaust its memory.</p>
  
  <p>Can anyone tell me some pointers on how to achieve that or is gzip only done by the webserver and it can't be done via PHP</p>