003 File Manager
Current Path:
/usr/src/contrib/file/magic/Magdir
usr
/
src
/
contrib
/
file
/
magic
/
Magdir
/
📁
..
📄
acorn
(3.65 KB)
📄
adi
(425 B)
📄
adventure
(4.38 KB)
📄
algol68
(678 B)
📄
allegro
(402 B)
📄
alliant
(760 B)
📄
amanda
(385 B)
📄
amigaos
(2.95 KB)
📄
android
(6.73 KB)
📄
animation
(45.47 KB)
📄
aout
(1.69 KB)
📄
apache
(822 B)
📄
apl
(276 B)
📄
apple
(19.05 KB)
📄
application
(273 B)
📄
applix
(428 B)
📄
apt
(1.57 KB)
📄
archive
(55.73 KB)
📄
asf
(6.39 KB)
📄
assembler
(700 B)
📄
asterix
(584 B)
📄
att3b
(1.23 KB)
📄
audio
(34.93 KB)
📄
basis
(571 B)
📄
beetle
(289 B)
📄
ber
(2.34 KB)
📄
bflt
(414 B)
📄
bhl
(341 B)
📄
bioinformatics
(7.5 KB)
📄
biosig
(4.73 KB)
📄
blackberry
(282 B)
📄
blcr
(746 B)
📄
blender
(1.17 KB)
📄
blit
(884 B)
📄
bout
(349 B)
📄
bsdi
(1.13 KB)
📄
bsi
(263 B)
📄
btsnoop
(429 B)
📄
c-lang
(3.39 KB)
📄
c64
(1.67 KB)
📄
cad
(12.21 KB)
📄
cafebabe
(2.16 KB)
📄
cbor
(610 B)
📄
cddb
(386 B)
📄
chord
(577 B)
📄
cisco
(495 B)
📄
citrus
(227 B)
📄
clarion
(769 B)
📄
claris
(1.68 KB)
📄
clipper
(2.09 KB)
📄
clojure
(1.11 KB)
📄
coff
(2.86 KB)
📄
commands
(5.2 KB)
📄
communications
(853 B)
📄
compress
(13.44 KB)
📄
console
(36.72 KB)
📄
convex
(2.58 KB)
📄
coverage
(2.98 KB)
📄
cracklib
(531 B)
📄
ctags
(297 B)
📄
ctf
(823 B)
📄
cubemap
(403 B)
📄
cups
(1.75 KB)
📄
dact
(379 B)
📄
database
(22.4 KB)
📄
dataone
(1.72 KB)
📄
dbpf
(630 B)
📄
der
(3.31 KB)
📄
diamond
(509 B)
📄
dif
(1.4 KB)
📄
diff
(1.05 KB)
📄
digital
(1.8 KB)
📄
dolby
(2.32 KB)
📄
dump
(2.84 KB)
📄
dyadic
(2.49 KB)
📄
ebml
(350 B)
📄
edid
(377 B)
📄
editors
(1.01 KB)
📄
efi
(547 B)
📄
elf
(11 KB)
📄
encore
(725 B)
📄
epoc
(2.27 KB)
📄
erlang
(709 B)
📄
espressif
(1.92 KB)
📄
esri
(826 B)
📄
fcs
(516 B)
📄
filesystems
(91.93 KB)
📄
finger
(488 B)
📄
flash
(1.73 KB)
📄
flif
(1.08 KB)
📄
fonts
(13.77 KB)
📄
forth
(2.84 KB)
📄
fortran
(349 B)
📄
frame
(2.18 KB)
📄
freebsd
(4.79 KB)
📄
fsav
(4.13 KB)
📄
fusecompress
(430 B)
📄
games
(12.77 KB)
📄
gcc
(505 B)
📄
gconv
(344 B)
📄
geo
(4.04 KB)
📄
geos
(584 B)
📄
gimp
(2.7 KB)
📄
git
(321 B)
📄
glibc
(879 B)
📄
gnome
(2.44 KB)
📄
gnu
(5.98 KB)
📄
gnumeric
(411 B)
📄
gpt
(9.74 KB)
📄
gpu
(929 B)
📄
grace
(892 B)
📄
graphviz
(580 B)
📄
gringotts
(1.54 KB)
📄
guile
(471 B)
📄
hardware
(385 B)
📄
hitachi-sh
(1.09 KB)
📄
hp
(13.74 KB)
📄
human68k
(1004 B)
📄
ibm370
(1.59 KB)
📄
ibm6000
(1.22 KB)
📄
icc
(7.67 KB)
📄
iff
(2.67 KB)
📄
images
(80.45 KB)
📄
inform
(333 B)
📄
intel
(4.63 KB)
📄
interleaf
(333 B)
📄
island
(345 B)
📄
ispell
(2.8 KB)
📄
isz
(514 B)
📄
java
(1.54 KB)
📄
javascript
(984 B)
📄
jpeg
(3.42 KB)
📄
karma
(291 B)
📄
kde
(390 B)
📄
keepass
(692 B)
📄
kerberos
(1.43 KB)
📄
kicad
(2.21 KB)
📄
kml
(1.43 KB)
📄
lecter
(269 B)
📄
lex
(528 B)
📄
lif
(240 B)
📄
linux
(17.84 KB)
📄
lisp
(2.77 KB)
📄
llvm
(723 B)
📄
lua
(754 B)
📄
luks
(419 B)
📄
m4
(370 B)
📄
mach
(8.48 KB)
📄
macintosh
(16.58 KB)
📄
macos
(206 B)
📄
magic
(426 B)
📄
mail.news
(2.64 KB)
📄
make
(1.25 KB)
📄
map
(13.47 KB)
📄
maple
(1.86 KB)
📄
marc21
(1019 B)
📄
mathcad
(300 B)
📄
mathematica
(2.69 KB)
📄
matroska
(422 B)
📄
mcrypt
(1.21 KB)
📄
measure
(1013 B)
📄
mercurial
(424 B)
📄
metastore
(337 B)
📄
meteorological
(1.77 KB)
📄
microfocus
(741 B)
📄
mime
(280 B)
📄
mips
(2.97 KB)
📄
mirage
(258 B)
📄
misctools
(2.45 KB)
📄
mkid
(318 B)
📄
mlssa
(277 B)
📄
mmdf
(220 B)
📄
modem
(2.94 KB)
📄
modulefile
(421 B)
📄
motorola
(2.63 KB)
📄
mozilla
(1.41 KB)
📄
msdos
(57.99 KB)
📄
msooxml
(2.09 KB)
📄
msvc
(2.35 KB)
📄
msx
(9.34 KB)
📄
mup
(781 B)
📄
music
(546 B)
📄
nasa
(272 B)
📄
natinst
(1.05 KB)
📄
ncr
(1.69 KB)
📄
neko
(373 B)
📄
netbsd
(7.36 KB)
📄
netscape
(902 B)
📄
netware
(306 B)
📄
news
(555 B)
📄
nitpicker
(460 B)
📄
numpy
(401 B)
📄
oasis
(471 B)
📄
ocaml
(542 B)
📄
octave
(323 B)
📄
ole2compounddocs
(18.67 KB)
📄
olf
(3.14 KB)
📄
openfst
(616 B)
📄
opentimestamps
(704 B)
📄
os2
(1.83 KB)
📄
os400
(1.88 KB)
📄
os9
(2.55 KB)
📄
osf1
(254 B)
📄
palm
(5.16 KB)
📄
parix
(384 B)
📄
parrot
(764 B)
📄
pascal
(444 B)
📄
pbf
(444 B)
📄
pbm
(258 B)
📄
pc88
(726 B)
📄
pc98
(2.72 KB)
📄
pdf
(1.03 KB)
📄
pdp
(1.3 KB)
📄
perl
(3.52 KB)
📄
pgf
(1.38 KB)
📄
pgp
(15.43 KB)
📄
pkgadd
(297 B)
📄
plan9
(866 B)
📄
plus5
(550 B)
📄
pmem
(1.23 KB)
📄
polyml
(744 B)
📄
printer
(5.83 KB)
📄
project
(389 B)
📄
psdbms
(483 B)
📄
psl
(559 B)
📄
pulsar
(370 B)
📄
pwsafe
(669 B)
📄
pyramid
(426 B)
📄
python
(10.29 KB)
📄
qt
(745 B)
📄
revision
(2.36 KB)
📄
riff
(15.77 KB)
📄
rpi
(674 B)
📄
rpm
(1.09 KB)
📄
rpmsg
(349 B)
📄
rst
(385 B)
📄
rtf
(3.71 KB)
📄
ruby
(1.86 KB)
📄
sc
(245 B)
📄
sccs
(835 B)
📄
scientific
(3.56 KB)
📄
securitycerts
(366 B)
📄
selinux
(806 B)
📄
sendmail
(1.46 KB)
📄
sequent
(1.67 KB)
📄
sereal
(1.24 KB)
📄
sgi
(3.89 KB)
📄
sgml
(4.43 KB)
📄
sharc
(816 B)
📄
sinclair
(1007 B)
📄
sisu
(471 B)
📄
sketch
(258 B)
📄
smalltalk
(593 B)
📄
smile
(1.23 KB)
📄
sniffer
(13.39 KB)
📄
softquad
(1.45 KB)
📄
sosi
(1.65 KB)
📄
spec
(600 B)
📄
spectrum
(3.17 KB)
📄
sql
(5.15 KB)
📄
ssh
(1.4 KB)
📄
ssl
(929 B)
📄
sun
(4.69 KB)
📄
sylk
(1.23 KB)
📄
symbos
(915 B)
📄
sysex
(11.53 KB)
📄
tcl
(1005 B)
📄
teapot
(266 B)
📄
terminfo
(2.46 KB)
📄
tex
(4.55 KB)
📄
tgif
(262 B)
📄
ti-8x
(7.55 KB)
📄
timezone
(1.46 KB)
📄
tplink
(2.89 KB)
📄
troff
(1.22 KB)
📄
tuxedo
(306 B)
📄
typeset
(286 B)
📄
unicode
(771 B)
📄
unisig
(402 B)
📄
unknown
(1.34 KB)
📄
usd
(568 B)
📄
uterus
(468 B)
📄
uuencode
(1.09 KB)
📄
vacuum-cleaner
(2.06 KB)
📄
varied.out
(1.63 KB)
📄
varied.script
(1.49 KB)
📄
vax
(1001 B)
📄
vicar
(759 B)
📄
virtual
(11.69 KB)
📄
virtutech
(524 B)
📄
visx
(972 B)
📄
vms
(1.41 KB)
📄
vmware
(283 B)
📄
vorbis
(5.97 KB)
📄
vxl
(489 B)
📄
warc
(596 B)
📄
weak
(629 B)
📄
web
(371 B)
📄
webassembly
(633 B)
📄
windows
(37.27 KB)
📄
wireless
(295 B)
📄
wordprocessors
(10.51 KB)
📄
wsdl
(761 B)
📄
x68000
(743 B)
📄
xdelta
(548 B)
📄
xenix
(2.98 KB)
📄
xilinx
(1.26 KB)
📄
xo65
(987 B)
📄
xwindows
(1.04 KB)
📄
yara
(461 B)
📄
zfs
(2.37 KB)
📄
zilog
(451 B)
📄
zip
(3.23 KB)
📄
zyxel
(613 B)
Editing: android
#------------------------------------------------------------ # $File: android,v 1.16 2019/11/15 21:03:14 christos Exp $ # Various android related magic entries #------------------------------------------------------------ # Dalvik .dex format. http://retrodev.com/android/dexformat.html # From <mkf@google.com> "Mike Fleming" # Fixed to avoid regexec 17 errors on some dex files # From <diff@lookout.com> "Tim Strazzere" 0 string dex\n >0 regex dex\n[0-9]{2}\0 Dalvik dex file >4 string >000 version %s 0 string dey\n >0 regex dey\n[0-9]{2}\0 Dalvik dex file (optimized for host) >4 string >000 version %s # Android bootimg format # From https://android.googlesource.com/\ # platform/system/core/+/master/mkbootimg/bootimg.h # https://github.com/djrbliss/loki/blob/master/loki.h#L43 0 string ANDROID! Android bootimg >1024 string LOKI \b, LOKI'd >>1028 lelong 0 \b (boot) >>1028 lelong 1 \b (recovery) >8 lelong >0 \b, kernel >>12 lelong >0 \b (0x%x) >16 lelong >0 \b, ramdisk >>20 lelong >0 \b (0x%x) >24 lelong >0 \b, second stage >>28 lelong >0 \b (0x%x) >36 lelong >0 \b, page size: %d >38 string >0 \b, name: %s >64 string >0 \b, cmdline (%s) # Android Backup archive # From: Ariel Shkedi # Update: Joerg Jenderek # URL: https://github.com/android/platform_frameworks_base/blob/\ # 0bacfd2ba68d21a68a3df345b830bc2a1e515b5a/services/java/com/\ # android/server/BackupManagerService.java#L2367 # Reference: https://sourceforge.net/projects/adbextractor/ # android-backup-extractor/perl/backupencrypt.pl # Note: only unix line feeds "\n" found # After the header comes a tar file # If compressed, the entire tar file is compressed with JAVA deflate # # Include the version number hardcoded with the magic string to avoid # false positives 0 string/b ANDROID\ BACKUP\n Android Backup # maybe look for some more characteristics like linefeed '\n' or version #>16 string \n # No mime-type defined officially !:mime application/x-google-ab !:ext ab # on 2nd line version (often 1, 2 on kitkat 4.4.3+, 4 on 7.1.2) >15 string >\0 \b, version %s # "1" on 3rd line means compressed >17 string 0\n \b, Not-Compressed >17 string 1\n \b, Compressed # The 4th line is encryption "none" or "AES-256" # any string as long as it's not the word none (which is matched below) >19 string none\n \b, Not-Encrypted # look for backup content after line with encryption info #>>19 search/7 \n # data part after header for not encrypted Android Backup #>>>&0 ubequad x \b, content 0x%16.16llx... # look for zlib compressed by ./compress after message with 1 space at end #>>>&0 indirect x \b; contains # look for tar archive block by ./archive for package name manifest >>288 string ustar \b; contains >>>31 use tar-file # look for zip/jar archive by ./archive ./zip after message with 1 space at end #>>2079 search/1025/s PK\003\004 \b; contains #>>>&0 indirect x >19 string !none >>19 regex/1l \^([^n\n]|n[^o]|no[^n]|non[^e]|none.+).* \b, Encrypted (%s) # Commented out because they don't seem useful to print # (but they are part of the header - the tar file comes after them): # The 5th line is User Password Salt (128 Hex) # string length too high with standard src configuration #>>>&1 string >\0 \b, PASSWORD salt: "%-128.128s" #>>>&1 regex/1l .* \b, Password salt: %s # The 6th line is Master Key Checksum Salt (128 Hex) #>>>>&1 regex/1l .* \b, Master salt: %s # The 7th line is Number of PBDKF2 Rounds (10000) #>>>>>&1 regex/1l .* \b, PBKDF2 rounds: %s # The 8th line is User key Initialization Vector (IV) (32 Hex) #>>>>>>&1 regex/1l .* \b, IV: %s #>>>>>>&1 regex/1l .* \b, IV: %s # The 9th line is Master IV+Key+Checksum (192 Hex) #>>>>>>>&1 regex/1l .* \b, Key: %s # look for new line separator char after line number 9 #>>>0x204 ubyte 0x0a NL found #>>>>&1 ubequad x \b, Content magic %16.16llx # *.pit files by Joerg Jenderek # https://forum.xda-developers.com/showthread.php?p=9122369 # https://forum.xda-developers.com/showthread.php?t=816449 # Partition Information Table for Samsung's smartphone with Android # used by flash software Odin 0 ulelong 0x12349876 # 1st pit entry marker >0x01C ulequad&0xFFFFFFFCFFFFFFFC =0x0000000000000000 # minimal 13 and maximal 18 PIT entries found >>4 ulelong <128 Partition Information Table for Samsung smartphone >>>4 ulelong x \b, %d entries # 1. pit entry >>>4 ulelong >0 \b; #1 >>>0x01C use PIT-entry >>>4 ulelong >1 \b; #2 >>>0x0A0 use PIT-entry >>>4 ulelong >2 \b; #3 >>>0x124 use PIT-entry >>>4 ulelong >3 \b; #4 >>>0x1A8 use PIT-entry >>>4 ulelong >4 \b; #5 >>>0x22C use PIT-entry >>>4 ulelong >5 \b; #6 >>>0x2B0 use PIT-entry >>>4 ulelong >6 \b; #7 >>>0x334 use PIT-entry >>>4 ulelong >7 \b; #8 >>>0x3B8 use PIT-entry >>>4 ulelong >8 \b; #9 >>>0x43C use PIT-entry >>>4 ulelong >9 \b; #10 >>>0x4C0 use PIT-entry >>>4 ulelong >10 \b; #11 >>>0x544 use PIT-entry >>>4 ulelong >11 \b; #12 >>>0x5C8 use PIT-entry >>>4 ulelong >12 \b; #13 >>>>0x64C use PIT-entry # 14. pit entry >>>4 ulelong >13 \b; #14 >>>>0x6D0 use PIT-entry >>>4 ulelong >14 \b; #15 >>>0x754 use PIT-entry >>>4 ulelong >15 \b; #16 >>>0x7D8 use PIT-entry >>>4 ulelong >16 \b; #17 >>>0x85C use PIT-entry # 18. pit entry >>>4 ulelong >17 \b; #18 >>>0x8E0 use PIT-entry 0 name PIT-entry # garbage value implies end of pit entries >0x00 ulequad&0xFFFFFFFCFFFFFFFC =0x0000000000000000 # skip empty partition name >>0x24 ubyte !0 # partition name >>>0x24 string >\0 %-.32s # flags >>>0x0C ulelong&0x00000002 2 \b+RW # partition ID: # 0~IPL,MOVINAND,GANG;1~PIT,GPT;2~HIDDEN;3~SBL,HIDDEN;4~SBL2,HIDDEN;5~BOOT;6~KENREl,RECOVER,misc;7~RECOVER # ;11~MODEM;20~efs;21~PARAM;22~FACTORY,SYSTEM;23~DBDATAFS,USERDATA;24~CACHE;80~BOOTLOADER;81~TZSW >>>0x08 ulelong x (0x%x) # filename >>>0x44 string >\0 "%-.64s" #>>>0x18 ulelong >0 # blocksize in 512 byte units ? #>>>>0x18 ulelong x \b, %db # partition size in blocks ? #>>>>0x22 ulelong x \b*%d # Android sparse img format # From https://android.googlesource.com/\ # platform/system/core/+/master/libsparse/sparse_format.h 0 lelong 0xed26ff3a Android sparse image >4 leshort x \b, version: %d >6 leshort x \b.%d >16 lelong x \b, Total of %d >12 lelong x \b %d-byte output blocks in >20 lelong x \b %d input chunks. # Android binary XML magic # In include/androidfw/ResourceTypes.h: # RES_XML_TYPE = 0x0003 followed by the size of the header (ResXMLTree_header), # which is 8 bytes (2 bytes type + 2 bytes header size + 4 bytes size). 0 lelong 0x00080003 Android binary XML # Android cryptfs footer # From https://android.googlesource.com/\ # platform/system/vold/+/refs/heads/master/cryptfs.h 0 lelong 0xd0b5b1c4 Android cryptfs footer >4 leshort x \b, version: %d >6 leshort x \b.%d
Upload File
Create Folder