Skip to content

B
binwalk
Commit 43ddf9b9 by devttys0
Options

Fixed extraction bug; prettified magic files

parent d95e015d
Showing with 272 additions and 272 deletions
src/binwalk/core/magic.py
...@@ -23,6 +23,7 @@ class SignatureResult(object): ...@@ -23,6 +23,7 @@ class SignatureResult(object):
self.strlen = 0 self.strlen = 0
self.string = False self.string = False
self.invalid = False self.invalid = False
self.extract = True
# These are set by code internally # These are set by code internally
self.file = None self.file = None
......
src/binwalk/magic/console
...@@ -4,99 +4,95 @@ ...@@ -4,99 +4,95 @@
#------------------------------------------------------------------------------ #------------------------------------------------------------------------------
# gameboy: file(1) magic for the Nintendo (Color) Gameboy raw ROM format # gameboy: file(1) magic for the Nintendo (Color) Gameboy raw ROM format
# #
0x104 belong 0xCEED6666 Gameboy ROM, 0x104 ubelong 0xCEED6666 Gameboy ROM,
>0x134 string >\0 name: "%.16s" >0x134 byte !0
>0x146 byte 0x03 \b,[SGB] >>0x134 string x name: "%.16s"
>0x147 byte 0x00 \b, [ROM ONLY] >0x146 byte 0x03 \b,[SGB]
>0x147 byte 0x01 \b, [ROM+MBC1] >0x147 byte 0x00 \b, [ROM ONLY]
>0x147 byte 0x02 \b, [ROM+MBC1+RAM] >0x147 byte 0x01 \b, [ROM+MBC1]
>0x147 byte 0x03 \b, [ROM+MBC1+RAM+BATT] >0x147 byte 0x02 \b, [ROM+MBC1+RAM]
>0x147 byte 0x05 \b, [ROM+MBC2] >0x147 byte 0x03 \b, [ROM+MBC1+RAM+BATT]
>0x147 byte 0x06 \b, [ROM+MBC2+BATTERY] >0x147 byte 0x05 \b, [ROM+MBC2]
>0x147 byte 0x08 \b, [ROM+RAM] >0x147 byte 0x06 \b, [ROM+MBC2+BATTERY]
>0x147 byte 0x09 \b, [ROM+RAM+BATTERY] >0x147 byte 0x08 \b, [ROM+RAM]
>0x147 byte 0x0B \b, [ROM+MMM01] >0x147 byte 0x09 \b, [ROM+RAM+BATTERY]
>0x147 byte 0x0C \b, [ROM+MMM01+SRAM] >0x147 byte 0x0B \b, [ROM+MMM01]
>0x147 byte 0x0D \b, [ROM+MMM01+SRAM+BATT] >0x147 byte 0x0C \b, [ROM+MMM01+SRAM]
>0x147 byte 0x0F \b, [ROM+MBC3+TIMER+BATT] >0x147 byte 0x0D \b, [ROM+MMM01+SRAM+BATT]
>0x147 byte 0x10 \b, [ROM+MBC3+TIMER+RAM+BATT] >0x147 byte 0x0F \b, [ROM+MBC3+TIMER+BATT]
>0x147 byte 0x11 \b, [ROM+MBC3] >0x147 byte 0x10 \b, [ROM+MBC3+TIMER+RAM+BATT]
>0x147 byte 0x12 \b, [ROM+MBC3+RAM] >0x147 byte 0x11 \b, [ROM+MBC3]
>0x147 byte 0x13 \b, [ROM+MBC3+RAM+BATT] >0x147 byte 0x12 \b, [ROM+MBC3+RAM]
>0x147 byte 0x19 \b, [ROM+MBC5] >0x147 byte 0x13 \b, [ROM+MBC3+RAM+BATT]
>0x147 byte 0x1A \b, [ROM+MBC5+RAM] >0x147 byte 0x19 \b, [ROM+MBC5]
>0x147 byte 0x1B \b, [ROM+MBC5+RAM+BATT] >0x147 byte 0x1A \b, [ROM+MBC5+RAM]
>0x147 byte 0x1C \b, [ROM+MBC5+RUMBLE] >0x147 byte 0x1B \b, [ROM+MBC5+RAM+BATT]
>0x147 byte 0x1D \b, [ROM+MBC5+RUMBLE+SRAM] >0x147 byte 0x1C \b, [ROM+MBC5+RUMBLE]
>0x147 byte 0x1E \b, [ROM+MBC5+RUMBLE+SRAM+BATT] >0x147 byte 0x1D \b, [ROM+MBC5+RUMBLE+SRAM]
>0x147 byte 0x1F \b, [Pocket Camera] >0x147 byte 0x1E \b, [ROM+MBC5+RUMBLE+SRAM+BATT]
>0x147 byte 0xFD \b, [Bandai TAMA5] >0x147 byte 0x1F \b, [Pocket Camera]
>0x147 byte 0xFE \b, [Hudson HuC-3] >0x147 byte 0xFD \b, [Bandai TAMA5]
>0x147 byte 0xFF \b, [Hudson HuC-1] >0x147 byte 0xFE \b, [Hudson HuC-3]
>0x147 byte 0xFF \b, [Hudson HuC-1]
>0x148 byte 0 \b, ROM: 256Kbit >0x148 byte 0 \b, ROM: 256Kbit
>0x148 byte 1 \b, ROM: 512Kbit >0x148 byte 1 \b, ROM: 512Kbit
>0x148 byte 2 \b, ROM: 1Mbit >0x148 byte 2 \b, ROM: 1Mbit
>0x148 byte 3 \b, ROM: 2Mbit >0x148 byte 3 \b, ROM: 2Mbit
>0x148 byte 4 \b, ROM: 4Mbit >0x148 byte 4 \b, ROM: 4Mbit
>0x148 byte 5 \b, ROM: 8Mbit >0x148 byte 5 \b, ROM: 8Mbit
>0x148 byte 6 \b, ROM: 16Mbit >0x148 byte 6 \b, ROM: 16Mbit
>0x148 byte 0x52 \b, ROM: 9Mbit >0x148 byte 0x52 \b, ROM: 9Mbit
>0x148 byte 0x53 \b, ROM: 10Mbit >0x148 byte 0x53 \b, ROM: 10Mbit
>0x148 byte 0x54 \b, ROM: 12Mbit >0x148 byte 0x54 \b, ROM: 12Mbit
>0x149 byte 1 \b, RAM: 16Kbit >0x149 byte 1 \b, RAM: 16Kbit
>0x149 byte 2 \b, RAM: 64Kbit >0x149 byte 2 \b, RAM: 64Kbit
>0x149 byte 3 \b, RAM: 128Kbit >0x149 byte 3 \b, RAM: 128Kbit
>0x149 byte 4 \b, RAM: 1Mbit >0x149 byte 4 \b, RAM: 1Mbit
#>0x14e long x \b, CRC: %x #>0x14e long x \b, CRC: %x
#------------------------------------------------------------------------------ #------------------------------------------------------------------------------
# genesis: file(1) magic for the Sega MegaDrive/Genesis raw ROM format # genesis: file(1) magic for the Sega MegaDrive/Genesis raw ROM format
# #
0x100 string SEGA Sega MegaDrive/Genesis raw ROM dump, 0x100 string SEGA Sega MegaDrive/Genesis raw ROM dump,
>0x120 string x Name: "%.16s" >0x120 string x Name: "%.16s",
>0x110 string >\0 "%.16s" >0x110 byte !0
>0x1B0 string RA with SRAM >>0x110 string x "%.16s",
>0x1B0 string RA with SRAM
# From: "Nelson A. de Oliveira" <naoliv@gmail.com> # From: "Nelson A. de Oliveira" <naoliv@gmail.com>
# Nintendo .nds # Nintendo .nds
192 string \044\377\256Qi\232 Nintendo DS Game ROM Image 192 string \044\377\256Qi\232 Nintendo DS Game ROM Image
# Nintendo .gba # Nintendo .gba
0 string \056\000\000\352$\377\256Qi Nintendo Game Boy Advance ROM Image 0 string \056\000\000\352$\377\256Qi Nintendo Game Boy Advance ROM Image
#------------------------------------------------------------------------------ #------------------------------------------------------------------------------
# Sony Playstation executables (Adam Sjoegren <asjo@diku.dk>) : # Sony Playstation executables (Adam Sjoegren <asjo@diku.dk>) :
0 string PS-X\ EXE Sony Playstation executable 0 string PS-X\x20EXE Sony Playstation executable
# Area: # Area:
>113 string x (%s) >113 string x (%s)
#------------------------------------------------------------------------------ #------------------------------------------------------------------------------
## Microsoft Xbox executables .xbe (Esa Hyytiä <ehyytia@cc.hut.fi>) ## Microsoft Xbox executables .xbe (Esa Hyytiä <ehyytia@cc.hut.fi>)
0 string XBEH Microsoft Xbox executable (XBE), 0 string XBEH Microsoft Xbox executable (XBE),
## probabilistic checks whether signed or not ## probabilistic checks whether signed or not
>0x0004 ulelong =0x0 >0x0004 ulelong =0x0
>>2 ulelong !0x0 \b, {invalid} >>2 ulelong =0x0 \b, not signed
>>2 ulelong =0x0 >0x0004 ulelong >0
>>>2 ulelong !0x0 \b, {invalid} >>2 ulelong >0 \b, signed
>>>2 ulelong =0x0 \b, not signed
>0x0004 ulelong >0
>>2 ulelong =0x0 \b, {invalid}
>>2 ulelong >0
>>>2 ulelong =0x0 \b, {invalid}
>>>2 ulelong >0 \b, signed
>0x0104 lelong <0 \b, {invalid} base address
## expect base address of 0x10000 ## expect base address of 0x10000
>0x0104 ulelong =0x10000 >0x0104 ulelong !0x10000 {invalid}
>>(0x0118-0x0FF60) ulelong&0x80000007 0x80000007 \b, all regions >0x0104 ulelong =0x10000
>>(0x0118-0x0FF60) ulelong&0x80000007 !0x80000007 >>(0x0118-0x0FF60) ulelong&0x80000007 0x80000007 \b, all regions
>>>(0x0118-0x0FF60) ulelong >0 (regions: >>(0x0118-0x0FF60) ulelong&0x80000007 !0x80000007
>>>>(0x0118-0x0FF60) ulelong &0x00000001 NA >>>(0x0118-0x0FF60) ulelong >0 (regions:
>>>>(0x0118-0x0FF60) ulelong &0x00000002 Japan >>>>(0x0118-0x0FF60) ulelong &0x00000001 NA
>>>>(0x0118-0x0FF60) ulelong &0x00000004 Rest_of_World >>>>(0x0118-0x0FF60) ulelong &0x00000002 Japan
>>>>(0x0118-0x0FF60) ulelong &0x80000000 Manufacturer >>>>(0x0118-0x0FF60) ulelong &0x00000004 Rest_of_World
>>>(0x0118-0x0FF60) ulelong >0 \b) >>>>(0x0118-0x0FF60) ulelong &0x80000000 Manufacturer
>>>(0x0118-0x0FF60) ulelong >0 \b)
# -------------------------------- # --------------------------------
# # Microsoft Xbox data file formats # # Microsoft Xbox data file formats
......
src/binwalk/magic/crypto
...@@ -9,26 +9,28 @@ ...@@ -9,26 +9,28 @@
# Type: OpenSSH key files # Type: OpenSSH key files
# From: Nicolas Collignon <tsointsoin@gmail.com> # From: Nicolas Collignon <tsointsoin@gmail.com>
0 string SSH\x20PRIVATE\x20KEY OpenSSH RSA1 private key, 0 string SSH\x20PRIVATE\x20KEY OpenSSH RSA1 private key,
>28 string >\0 version "%s" >28 byte !0
>>28 string x version "%s"
>28 byte 0 {invalid}
0 string ssh-dss\x20 OpenSSH DSA public key 0 string ssh-dss\x20 OpenSSH DSA public key
0 string ssh-rsa\x20 OpenSSH RSA public key 0 string ssh-rsa\x20 OpenSSH RSA public key
# Type: Certificates/key files in DER format # Type: Certificates/key files in DER format
# From: Gert Hulselmans <hulselmansgert@gmail.com> # From: Gert Hulselmans <hulselmansgert@gmail.com>
0 string \x30\x82 Private key in DER format (PKCS#8), 0 string \x30\x82 Private key in DER format (PKCS#8),
>4 string !\x02\x01\x00 {invalid}, >4 string !\x02\x01\x00 {invalid}
>>2 beshort x header length: 4, sequence length: %d >2 beshort x header length: 4, sequence length: %d
0 string \x30\x82 Certificate in DER format (x509 v3), 0 string \x30\x82 Certificate in DER format (x509 v3),
>4 string !\x30\x82 {invalid}, >4 string !\x30\x82 {invalid}
>>2 beshort x header length: 4, sequence length: %d >2 beshort x header length: 4, sequence length: %d
# GnuPG # GnuPG
# The format is very similar to pgp # The format is very similar to pgp
0 string \001gpg GPG key trust database 0 string \001gpg GPG key trust database
>4 byte x version %d >4 byte x version %d
# Not a very useful signature # Not a very useful signature
#0 beshort 0x9901 GPG key public ring #0 beshort 0x9901 GPG key public ring
...@@ -39,50 +41,50 @@ ...@@ -39,50 +41,50 @@
#------------------------------------------------------------------------------ #------------------------------------------------------------------------------
# Mavroyanopoulos Nikos <nmav@hellug.gr> # Mavroyanopoulos Nikos <nmav@hellug.gr>
# mcrypt: file(1) magic for mcrypt 2.2.x; # mcrypt: file(1) magic for mcrypt 2.2.x;
#0 string \0m\3 mcrypt 2.5 encrypted data, #0 string \0m\3 mcrypt 2.5 encrypted data,
#>4 byte 0 {invalid} #>4 byte 0 {invalid}
#>4 string >\0 algorithm: "%s", #>4 string >\0 algorithm: "%s",
#>>&1 leshort <1 {invalid} #>>&1 leshort <1 {invalid}
#>>&1 leshort >0 keysize: %d bytes, #>>&1 leshort >0 keysize: %d bytes,
#>>>&0 byte 0 {invalid} #>>>&0 byte 0 {invalid}
#>>>&0 string >\0 mode: "%s", #>>>&0 string >\0 mode: "%s",
0 string \0m\2 mcrypt 2.2 encrypted data, 0 string \0m\2 mcrypt 2.2 encrypted data,
>3 byte 0 algorithm: blowfish-448, >3 byte 0 algorithm: blowfish-448,
>3 byte 1 algorithm: DES, >3 byte 1 algorithm: DES,
>3 byte 2 algorithm: 3DES, >3 byte 2 algorithm: 3DES,
>3 byte 3 algorithm: 3-WAY, >3 byte 3 algorithm: 3-WAY,
>3 byte 4 algorithm: GOST, >3 byte 4 algorithm: GOST,
>3 byte 6 algorithm: SAFER-SK64, >3 byte 6 algorithm: SAFER-SK64,
>3 byte 7 algorithm: SAFER-SK128, >3 byte 7 algorithm: SAFER-SK128,
>3 byte 8 algorithm: CAST-128, >3 byte 8 algorithm: CAST-128,
>3 byte 9 algorithm: xTEA, >3 byte 9 algorithm: xTEA,
>3 byte 10 algorithm: TWOFISH-128, >3 byte 10 algorithm: TWOFISH-128,
>3 byte 11 algorithm: RC2, >3 byte 11 algorithm: RC2,
>3 byte 12 algorithm: TWOFISH-192, >3 byte 12 algorithm: TWOFISH-192,
>3 byte 13 algorithm: TWOFISH-256, >3 byte 13 algorithm: TWOFISH-256,
>3 byte 14 algorithm: blowfish-128, >3 byte 14 algorithm: blowfish-128,
>3 byte 15 algorithm: blowfish-192, >3 byte 15 algorithm: blowfish-192,
>3 byte 16 algorithm: blowfish-256, >3 byte 16 algorithm: blowfish-256,
>3 byte 100 algorithm: RC6, >3 byte 100 algorithm: RC6,
>3 byte 101 algorithm: IDEA, >3 byte 101 algorithm: IDEA,
>3 byte <0 {invalid} algorithm >3 byte <0 {invalid}
>3 byte >101 {invalid} algorithm, >3 byte >101 {invalid}
>3 byte >16 >3 byte >16
>>3 byte <100 {invalid} algorithm, >>3 byte <100 {invalid}
>4 byte 0 mode: CBC, >4 byte 0 mode: CBC,
>4 byte 1 mode: ECB, >4 byte 1 mode: ECB,
>4 byte 2 mode: CFB, >4 byte 2 mode: CFB,
>4 byte 3 mode: OFB, >4 byte 3 mode: OFB,
>4 byte 4 mode: nOFB, >4 byte 4 mode: nOFB,
>4 byte <0 {invalid} mode, >4 byte <0 {invalid}
>4 byte >4 {invalid} mode, >4 byte >4 {invalid}
>5 byte 0 keymode: 8bit >5 byte 0 keymode: 8bit
>5 byte 1 keymode: 4bit >5 byte 1 keymode: 4bit
>5 byte 2 keymode: SHA-1 hash >5 byte 2 keymode: SHA-1 hash
>5 byte 3 keymode: MD5 hash >5 byte 3 keymode: MD5 hash
>5 byte <0 {invalid} keymode >5 byte <0 {invalid}
>5 byte >3 {invalid} keymode >5 byte >3 {invalid}
#------------------------------------------------------------------------------ #------------------------------------------------------------------------------
# pgp: file(1) magic for Pretty Good Privacy # pgp: file(1) magic for Pretty Good Privacy
...@@ -90,13 +92,14 @@ ...@@ -90,13 +92,14 @@
#0 beshort 0x9900 PGP key public ring #0 beshort 0x9900 PGP key public ring
#0 beshort 0x9501 PGP key security ring #0 beshort 0x9501 PGP key security ring
#0 beshort 0x9500 PGP key security ring #0 beshort 0x9500 PGP key security ring
#0 beshort 0xa600 PGP encrypted data #0 beshort 0xa600 PGP encrypted data
0 string -----BEGIN\040PGP PGP armored data, 0 string -----BEGIN\040PGP PGP armored data,
>15 string PUBLIC\040KEY\040BLOCK- public key block >15 string PUBLIC\040KEY\040BLOCK- public key block
>15 string MESSAGE- message >15 string MESSAGE- message
>15 string SIGNED\040MESSAGE- signed message >15 string SIGNED\040MESSAGE- signed message
>15 string PGP\040SIGNATURE- signature >15 string PGP\040SIGNATURE- signature
0 string Salted__ OpenSSL encryption, salted, 0 string Salted__ OpenSSL encryption, salted,
>8 belong x salt: 0x%X >8 belong x salt: 0x%X
>12 belong x \b%X >12 belong x \b%X
src/binwalk/magic/kernels
...@@ -5,16 +5,15 @@ ...@@ -5,16 +5,15 @@
# and others such as Axel Kohlmeyer <akohlmey@rincewind.chemie.uni-ulm.de> # and others such as Axel Kohlmeyer <akohlmey@rincewind.chemie.uni-ulm.de>
# and Nicolás Lichtmaier <nick@debian.org> # and Nicolás Lichtmaier <nick@debian.org>
# All known start with: b8 c0 07 8e d8 b8 00 90 8e c0 b9 00 01 29 f6 29 # All known start with: b8 c0 07 8e d8 b8 00 90 8e c0 b9 00 01 29 f6 29
0 string \xb8\xc0\x07\x8e\xd8\xb8\x00\x90\x8e\xc0\xb9\x00\x01\x29\xf6\x29 Linux kernel boot image 0 string \xb8\xc0\x07\x8e\xd8\xb8\x00\x90\x8e\xc0\xb9\x00\x01\x29\xf6\x29 Linux kernel boot image
>514 string !HdrS ({invalid}) >514 string !HdrS {invalid}
# Finds and prints Linux kernel strings in raw Linux kernels (output like uname -a). # Finds and prints Linux kernel strings in raw Linux kernels (output like uname -a).
# Commonly found in decompressed embedded kernel binaries. # Commonly found in decompressed embedded kernel binaries.
0 string Linux\ version\ Linux kernel version 0 string Linux\x20version\x20 Linux kernel version
>14 byte 0 {invalid} >14 byte 0 {invalid}
>14 byte !0 >14 byte !0
>>14 string x "%s >>14 string x "%s"
>>45 string x \b%s"
# eCos kernel exception handlers # eCos kernel exception handlers
# #
...@@ -26,13 +25,13 @@ ...@@ -26,13 +25,13 @@
# lw $k1, 0($k1) # lw $k1, 0($k1)
# jr $k1 # jr $k1
# nop # nop
0 string \x00\x68\x1A\x40\x00\x00\x00\x00\x7F\x00\x5A\x33 eCos kernel exception handler, architecture: MIPSEL, 0 string \x00\x68\x1A\x40\x00\x00\x00\x00\x7F\x00\x5A\x33 eCos kernel exception handler, architecture: MIPSEL,
>14 leshort !0x3C1B {invalid} >14 leshort !0x3C1B {invalid}
>18 leshort !0x277B {invalid} >18 leshort !0x277B {invalid}
>12 leshort x exception vector table base address: 0x%.4X >12 uleshort x exception vector table base address: 0x%.4X
>16 leshort x \b%.4X >16 uleshort x \b%.4X
0 string \x40\x1A\x68\x00\x00\x00\x00\x00\x33\x5A\x00\x7F eCos kernel exception handler, architecture: MIPS, 0 string \x40\x1A\x68\x00\x00\x00\x00\x00\x33\x5A\x00\x7F eCos kernel exception handler, architecture: MIPS,
>12 beshort !0x3C1B {invalid} >12 beshort !0x3C1B {invalid}
>16 beshort !0x277B {invalid} >16 beshort !0x277B {invalid}
>14 beshort x exception vector table base address: 0x%.4X >14 ubeshort x exception vector table base address: 0x%.4X
>18 beshort x \b%.4X >18 ubeshort x \b%.4X
src/binwalk/magic/lzma
This source diff could not be displayed because it is too large. You can view the blob instead.
src/binwalk/magic/misc
...@@ -2,9 +2,9 @@ ...@@ -2,9 +2,9 @@
# $File: pdf,v 1.6 2009/09/19 16:28:11 christos Exp $ # $File: pdf,v 1.6 2009/09/19 16:28:11 christos Exp $
# pdf: file(1) magic for Portable Document Format # pdf: file(1) magic for Portable Document Format
# #
0 string %PDF- PDF document, 0 string %PDF- PDF document,
>6 byte !0x2e {invalid} >6 byte !0x2e {invalid}
>5 string x version: "%3s" >5 string x version: "%3s"
#------------------------------------------------------------------------------ #------------------------------------------------------------------------------
# $File: zyxel,v 1.6 2009/09/19 16:28:13 christos Exp $ # $File: zyxel,v 1.6 2009/09/19 16:28:13 christos Exp $
...@@ -25,18 +25,18 @@ ...@@ -25,18 +25,18 @@
0 string LinuxGuestRecord Xen saved domain file 0 string LinuxGuestRecord Xen saved domain file
0 string \x3chtml HTML document header{extract-delay:HTML document footer} 0 string \x3chtml HTML document header
>5 byte !0x20 >5 byte !0x20
>>5 byte !0x3e \b, {invalid} >>5 byte !0x3e {invalid}
0 string \x3cHTML HTML document header{extract-delay:HTML document footer} 0 string \x3cHTML HTML document header
>5 byte !0x20 >5 byte !0x20
>>5 byte !0x3e \b, {invalid} >>5 byte !0x3e {invalid}
0 string \x3c/html\x3e HTML document footer{offset-adjust:7} 0 string \x3c/html\x3e HTML document footer
0 string \x3c/HTML\x3e HTML document footer{offset-adjust:7} 0 string \x3c/HTML\x3e HTML document footer
0 string \x3c?xml\x20version XML document, 0 string \x3c?xml\x20version XML document,
>15 string x version: "%.3s" >15 string x version: "%.3s"
# CodeGate 2011 http://nopsrus.blogspot.com/2013/05/codegate-ctf-2011-binary-100-points.html # CodeGate 2011 http://nopsrus.blogspot.com/2013/05/codegate-ctf-2011-binary-100-points.html
0 string \x23\x40\x7e\x5e Windows Script Encoded Data (screnc.exe) 0 string \x23\x40\x7e\x5e Windows Script Encoded Data (screnc.exe)
...@@ -57,13 +57,13 @@ ...@@ -57,13 +57,13 @@
>63 string x \b%s" >63 string x \b%s"
0 string begin\x20 uuencoded data, 0 string begin\x20 uuencoded data,
>9 byte !0x20 {invalid} format, >9 byte !0x20 {invalid}invalid format,
>6 byte <0x30 {invalid} permissions, >6 byte <0x30 {invalid}invalid permissions,
>6 byte >0x39 {invalid} permissions, >6 byte >0x39 {invalid}invalid permissions,
>7 byte <0x30 {invalid} permissions, >7 byte <0x30 {invalid}invalid permissions,
>7 byte >0x39 {invalid} permissions, >7 byte >0x39 {invalid}invalid permissions,
>8 byte <0x30 {invalid} permissions, >8 byte <0x30 {invalid}invalid permissions,
>8 byte >0x39 {invalid} permissions, >8 byte >0x39 {invalid}invalid permissions,
>10 string x file name: "%s", >10 string x file name: "%s",
>6 string x file permissions: "%.3s" >6 string x file permissions: "%.3s"
src/binwalk/magic/sql
...@@ -5,26 +5,26 @@ ...@@ -5,26 +5,26 @@
# From: "Marty Leisner" <mleisner@eng.mc.xerox.com> # From: "Marty Leisner" <mleisner@eng.mc.xerox.com>
# Recognize some MySQL files. # Recognize some MySQL files.
# #
0 beshort 0xfe01 MySQL table definition file 0 beshort 0xfe01 MySQL table definition file
>2 string <1 {invalid} >2 ubyte <1 {invalid}
>2 string >\11 {invalid} >2 ubyte >11 {invalid}
>2 byte x Version %d >2 byte x Version %d
0 string \xfe\xfe\x03 MySQL MISAM index file 0 string \xfe\xfe\x03 MySQL MISAM index file
>3 string <1 {invalid} >3 ubyte <1 {invalid}
>3 string >\11 {invalid} >3 ubyte >11 {invalid}
>3 byte x Version %d >3 byte x Version %d
0 string \xfe\xfe\x07 MySQL MISAM compressed data file 0 string \xfe\xfe\x07 MySQL MISAM compressed data file
>3 string <1 {invalid} >3 ubyte <1 {invalid}
>3 string >\11 {invalid} >3 ubyte >11 {invalid}
>3 byte x Version %d >3 byte x Version %d
0 string \xfe\xfe\x05 MySQL ISAM index file 0 string \xfe\xfe\x05 MySQL ISAM index file
>3 string <1 {invalid} >3 ubyte <1 {invalid}
>3 string >\11 {invalid} >3 ubyte >11 {invalid}
>3 byte x Version %d >3 byte x Version %d
0 string \xfe\xfe\x06 MySQL ISAM compressed data file 0 string \xfe\xfe\x06 MySQL ISAM compressed data file
>3 string <1 {invalid} >3 ubyte <1 {invalid}
>3 string >\11 {invalid} >3 ubyte >11 {invalid}
>3 byte x Version %d >3 byte x Version %d
#0 string \376bin MySQL replication log #0 string \376bin MySQL replication log
#------------------------------------------------------------------------------ #------------------------------------------------------------------------------
...@@ -32,9 +32,10 @@ ...@@ -32,9 +32,10 @@
# From Ken Guest <ken@linux.ie> # From Ken Guest <ken@linux.ie>
# As observed from iRivNavi.iDB and unencoded firmware # As observed from iRivNavi.iDB and unencoded firmware
# #
0 string iRivDB iRiver Database file 0 string iRivDB iRiver Database file
>11 string >\0 Version "%s" >11 byte !0
>39 string iHP-100 [H Series] >>11 string x Version "%s"
#>39 string iHP-100 [H Series]
#------------------------------------------------------------------------------ #------------------------------------------------------------------------------
# SQLite database files # SQLite database files
...@@ -49,7 +50,7 @@ ...@@ -49,7 +50,7 @@
# Version 3 of SQLite allows applications to embed their own "user version" # Version 3 of SQLite allows applications to embed their own "user version"
# number in the database. Detect this and distinguish those files. # number in the database. Detect this and distinguish those files.
0 string SQLite\x20format\x203 0 string SQLite\x20format\x203 SQLite 3.x database,
>60 string _MTN Monotone source repository >60 string _MTN monotone source repository
>60 belong !0 SQLite 3.x database, user version %u >60 ubelong !0 \b, user version %u
>60 belong 0 SQLite 3.x database
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment