Complete inventory
Lists archive paths, sizes, compression ratios, resources, nested packages and embedded executables.
FILE SCANNER ZIP · JAR · NESTED ARCHIVES · PAYLOADS
Open the package without opening the payload.
Inventory every safe-to-read entry in a ZIP or JAR, detect nested archives and executable payloads, extract text resources, and inspect any compiled Java classes inside.
01 Not executed02 Archive contents03 Evidence report
Analyzing file…
Large or obfuscated archives may take longer.
Uploads are inspected in an isolated temporary workspace and are never executed. Analysis depth depends on file size, archive complexity and available recovery engines.
Archive protections
Rejects traversal paths, extreme expansion sizes, excessive entries and suspicious compression ratios.
Java-aware scanning
Automatically parses and security-checks any class files found inside the package.
JAR
plugin.jar
Minecraft server plugin
Download full report
Not executed
SCAN VERDICT
Analysis complete
0RISK
Detected package
Code recovery
Most-used external packages
JVM referencesPackage map
Classes by namespaceLocal JAR identity
Read directly from metadataPublished-file verification
Exact hash lookupCryptographic fingerprints
Use these to compare exact filesRecovered metadata
plugin.yml, mod JSON/TOML and manifestSearch recovered code
This searches decompiled source and extracted text resources, not a predefined suspicious-word list.
Choose a file from the left to inspect its recovered source or JVM bytecode.Verified JVM method invocations
These calls were parsed from compiled class bytecode.
| Caller class | Caller method | Invoked owner | Invoked method |
|---|
Recovered runtime strings
Strings loaded by compiled methods, with their originating class and method.
URLs
Domains
Complete archive inventory
Every readable archive entry, including classes, resources, nested JARs and embedded binaries.
| Path | Type | Size | Compressed | View |
|---|
Security findings
Findings require verified capabilities or behavior chains; loose words in metadata do not create critical verdicts.