OpenTools
Security

Archive Explorer

Safely look inside ZIP, JAR, RAR, 7z and TAR archives without extracting them, and flag disguised executables before you open anything.

🔒 Everything runs in your browser — the archive is never uploaded, and previews are rendered locally without opening files on your computer.

Drop an archive here, or choose a file

ZIP, JAR, RAR, 7z, TAR & GZ — all read locally in your browser

About this tool

Inspect the contents of an archive entirely in your browser before you trust it. Archive Explorer lists every file inside a ZIP, JAR, RAR, 7z, TAR or GZ without extracting or running anything, and automatically flags risky entries: executables and scripts (.exe, .scr, .bat, .js and more), files disguised with a double extension (like tutorial.avi.exe), macro-enabled Office documents, and unsafe "zip-slip" paths that try to write outside the destination folder. Extract individual files only once you know they are safe. Your archive is never uploaded. Everything happens locally, which makes it ideal for vetting attachments from untrusted sources.

How to use the Archive Explorer

  1. Drop an archive onto the page or click Choose archive (ZIP, JAR, RAR, 7z, TAR or GZ).
  2. Review the file list; risky entries are marked Dangerous or Caution with the reason shown.
  3. Click Scan all contents to check each file's real type (archives with 40 files or fewer are scanned automatically).
  4. Preview or download single files, or tick several and download them as one ZIP.

Give us your feedback

Help us improve Archive Explorer!

Frequently asked questions

What is a zip-slip attack?

Zip-slip is a trick where an archive entry is named with a path like ../../startup/evil.exe, so a careless extractor writes it outside the folder you chose. Archive Explorer marks these entries as dangerous, and when you download selected files as a ZIP it cleans the paths so they stay inside.

Why are some files flagged as dangerous?

Executables and scripts such as .exe, .scr, .bat and .js can run code when opened, so they are flagged, as are names like holiday.jpg.exe that hide a program behind a fake extension. Macro-enabled Office files and unsafe paths are flagged too, and scanning the contents checks each file's real type.

Is my archive uploaded?

No. The archive is read entirely in your browser, using JavaScript and a WebAssembly library served from OpenTools itself for RAR, 7z and TAR. Your files never leave your device, which makes it a good fit for vetting email attachments.

Can it open password-protected archives?

Not currently. Encrypted or corrupt archives show an error saying the file could not be read. Unencrypted ZIP, JAR, RAR, 7z, TAR and GZ archives are supported.

Does a clean result mean the archive is safe?

No. Archive Explorer catches common disguises and file types that can run code, but it has no malware signatures and cannot spot harmful content hidden inside ordinary-looking documents. Only open files you were expecting, and scan anything important with antivirus.

Related tools