Developed by security researcher Luigi Auriemma, Offzip works by brute-forcing its way through a file. It searches for valid signatures of compressed data blocks. When it identifies a potential stream, it attempts to decompress it. This makes it an invaluable tool for "carving" data out of proprietary or obfuscated formats, such as video game archives, firmware images, and network packets. The utility is highly versatile, offering features like:
Scanning entire directories or massive multi-gigabyte files to find every hidden compressed segment. Use Cases in Digital Forensics and Reverse Engineering Offzip
The primary audience for Offzip includes reverse engineers and digital forensic analysts. In the context of , many developers use custom archive formats ( .dat , .bin , .pak ) to store assets like textures and sounds. Offzip allows modders to bypass these custom headers and pull the raw assets directly from the compressed blocks. This makes it an invaluable tool for "carving"