Skip to content

B
binwalk
Commit a3c4c779 by devttys0
Options

Fixed signature bugs

parent 26138bb9
Showing with 64 additions and 64 deletions
src/magic/archives
......@@ -195,11 +195,11 @@
# For example the LaserJet 5L driver puts the "PJL ENTER LANGUAGE" in line 10
# From: Uwe Bonnes <bon@elektron.ikp.physik.th-darmstadt.de>
#
0 string \033%-12345X@PJL HP Printer Job Language data
>&0 string >\0 "%s"
>>&0 string >\0 "%s"
>>>&0 string >\0 "%s"
>>>>&0 string >\0 "%s"
0 string \033%-12345X@PJL HP Printer Job Language data, "
>0 string >\0 %s
>>128 string >\0 %s
>>>256 string >\0 %s
>0 byte x "
#------------------------------------------------------------------------------
#
......
src/magic/console
......@@ -77,15 +77,15 @@
0 string XBEH Microsoft Xbox executable (XBE),
## probabilistic checks whether signed or not
>0x0004 ulelong =0x0
>>&2 ulelong !0x0 \b, invalid
>>&2 ulelong =0x0
>>>&2 ulelong !0x0 \b, invalid
>>>&2 ulelong =0x0 \b, not signed
>>2 ulelong !0x0 \b, invalid
>>2 ulelong =0x0
>>>2 ulelong !0x0 \b, invalid
>>>2 ulelong =0x0 \b, not signed
>0x0004 ulelong >0
>>&2 ulelong =0x0 \b, invalid
>>&2 ulelong >0
>>>&2 ulelong =0x0 \b, invalid
>>>&2 ulelong >0 \b, signed
>>2 ulelong =0x0 \b, invalid
>>2 ulelong >0
>>>2 ulelong =0x0 \b, invalid
>>>2 ulelong >0 \b, signed
>0x0104 lelong <0 \b, invalid base address
## expect base address of 0x10000
>0x0104 ulelong =0x10000
......
src/magic/crypto
......@@ -39,13 +39,13 @@
#------------------------------------------------------------------------------
# Mavroyanopoulos Nikos <nmav@hellug.gr>
# mcrypt: file(1) magic for mcrypt 2.2.x;
0 string \0m\3 mcrypt 2.5 encrypted data,
>4 byte 0 invalid
>4 string >\0 algorithm: "%s",
>>&1 leshort <1 invalid
>>&1 leshort >0 keysize: %d bytes,
>>>&0 byte 0 invalid
>>>&0 string >\0 mode: "%s",
#0 string \0m\3 mcrypt 2.5 encrypted data,
#>4 byte 0 invalid
#>4 string >\0 algorithm: "%s",
#>>&1 leshort <1 invalid
#>>&1 leshort >0 keysize: %d bytes,
#>>>&0 byte 0 invalid
#>>>&0 string >\0 mode: "%s",
0 string \0m\2 mcrypt 2.2 encrypted data,
>3 byte 0 algorithm: blowfish-448,
......
src/magic/filesystems
......@@ -37,23 +37,23 @@
0 string \x03\x00\x00\x00\x01\x00\x00\x00\xFF\xFF YAFFS filesystem
# EFS2 file system - jojo@utulsa.edu
0 lelong 0x53000000 EFS2 Qualcomm filesystem super block, little endian,
>8 string !EFSSuper invalid,
>4 leshort &1 NAND
>4 leshort ^1 NOR
>4 leshort x version 0x%x,
>24 lelong x %d blocks,
>16 lelong x 0x%x pages per block,
>20 lelong x 0x%x bytes per page
0 belong 0x53000000 EFS2 Qualcomm filesystem super block, big endian,
>8 string !SSFErepu invalid,
>4 beshort &1 NAND
>4 beshort ^1 NOR
>4 beshort x version 0x%x,
>24 belong x %d blocks,
>16 belong x 0x%x pages per block,
>20 belong x 0x%x bytes per page
0 lelong 0x53000000 EFS2 Qualcomm filesystem super block, little endian,
>8 string !EFSSuper invalid,
>4 leshort&0x01 1 NAND
>4 leshort&0x01 0 NOR
>4 leshort x version 0x%x,
>24 lelong x %d blocks,
>16 lelong x 0x%x pages per block,
>20 lelong x 0x%x bytes per page
0 belong 0x53000000 EFS2 Qualcomm filesystem super block, big endian,
>8 string !SSFErepu invalid,
>4 beshort&0x01 1 NAND
>4 beshort&0x01 0 NOR
>4 beshort x version 0x%x,
>24 belong x %d blocks,
>16 belong x 0x%x pages per block,
>20 belong x 0x%x bytes per page
# TROC file system
0 string TROC TROC filesystem,
......@@ -182,7 +182,7 @@
>>40 bequad x \b{file-size:%lld}
>4 belong x %d inodes,
>28 beshort >3
>>12 belong blocksize: %d bytes,
>>12 belong x blocksize: %d bytes,
>28 beshort <2
>>32 beshort x blocksize: %d bytes,
>28 beshort 2
......@@ -216,24 +216,24 @@
>28 leshort 3
>>63 lequad x size: %lld bytes,
>>63 lequad x {file-size:%lld}
>28 leshort >3
>28 leshort >3
>>40 lequad x size: %lld bytes,
>>40 lequad x {file-size:%lld}
>4 lelong x %d inodes,
>28 leshort >3
>>12 lelong blocksize: %d bytes,
>28 leshort >3
>>12 lelong x blocksize: %d bytes,
>28 leshort <2
>>32 leshort x blocksize: %d bytes,
>28 leshort 2
>>51 lelong x blocksize: %d bytes,
>28 leshort 3
>>51 lelong x blocksize: %d bytes,
>28 leshort >3
>>12 lelong x blocksize: %d bytes,
>28 leshort <4
>28 leshort 3
>>51 lelong x blocksize: %d bytes,
>28 leshort >3
>>12 lelong x blocksize: %d bytes,
>28 leshort <4
>>39 ledate x created: %s
>28 leshort >3
>>8 ledate x created: %s
>28 leshort >3
>>8 ledate x created: %s
>28 leshort <3
>>8 lelong x {jump-to-offset:%d}
>28 leshort 3
......@@ -266,7 +266,7 @@
>>40 bequad x {file-size:%lld}
>4 belong x %d inodes,
>28 beshort >3
>>12 belong blocksize: %d bytes,
>>12 belong x blocksize: %d bytes,
>28 beshort <2
>>32 beshort x blocksize: %d bytes,
>28 beshort 2
......@@ -311,7 +311,7 @@
>>40 bequad x {file-size:%lld}
>4 belong x %d inodes,
>28 beshort >3
>>12 belong blocksize: %d bytes,
>>12 belong x blocksize: %d bytes,
>28 beshort <2
>>32 beshort x blocksize: %d bytes,
>28 beshort 2
......@@ -356,7 +356,7 @@
>>40 bequad x {file-size:%lld}
>4 belong x %d inodes,
>28 beshort >3
>>12 belong blocksize: %d bytes,
>>12 belong x blocksize: %d bytes,
>28 beshort <2
>>32 beshort x blocksize: %d bytes,
>28 beshort 2
......@@ -401,7 +401,7 @@
>>40 lequad x {file-size:%lld}
>4 lelong x %d inodes,
>28 leshort >3
>>12 lelong blocksize: %d bytes,
>>12 lelong x blocksize: %d bytes,
>28 leshort <2
>>32 leshort x blocksize: %d bytes,
>28 leshort 2
......@@ -446,7 +446,7 @@
>>40 lequad x {file-size:%lld}
>4 lelong x %d inodes,
>28 leshort >3
>>12 lelong blocksize: %d bytes,
>>12 lelong x blocksize: %d bytes,
>28 leshort <2
>>32 leshort x blocksize: %d bytes,
>28 leshort 2
......@@ -481,8 +481,8 @@
>4 lelong x rev %d
>6 leshort x \b.%d
# No journal? ext2
>36 lelong ^0x0000004 ext2 filesystem data
>>2 leshort ^0x0000001 (mounted or unclean)
>36 lelong&0x04 0 ext2 filesystem data
>>2 leshort&0x01 0 (mounted or unclean)
# Has a journal? ext3 or ext4
>36 lelong &0x0000004
# and small INCOMPAT?
......@@ -519,7 +519,7 @@
>36 belong x %d files
# netboot image - Juan Cespedes <cespedes@debian.org>
0 lelong 0x1b031336L Netboot image,
0 lelong 0x1b031336 Netboot image,
>4 lelong&0xFFFFFF00 0
>>4 lelong&0x100 0x000 mode 2
>>4 lelong&0x100 0x100 mode 3
......
src/magic/firmware
......@@ -522,7 +522,7 @@
# Obfuscated Arcadyan firmware
0x68 belong 0x00D50800 Obfuscated Arcadyan firmware,
>0 belong x signature bytes: 0x%X,
>0x70 belong !\x00\x00\x00\x00\x00\x00\x00 invalid,
>0x70 string !\x00\x00\x00\x00\x00\x00\x00 invalid,
>0x70 belong 0x00000000 see https://github.com/devttys0/wrt120n/deobfuscator
# Digi firmware images
......@@ -578,10 +578,10 @@
>>(198.L+206) belong x \b, file size: %d bytes
>>(198.L+206) belong x \b{file-size:%d}
>(198.L+202) belong 3
>>&4 string @(RECENT_FIRMWARE)/ \b, alias:
>>&23 string x "%s"
>>&(&0.L(0)) belong x
>>>&4 belong x \b, file size: %d bytes
>>4 string @(RECENT_FIRMWARE)/ \b, alias:
>>23 string x "%s"
#>>(&0.L(0)) belong x
>>>4 belong x \b, file size: %d bytes
# Signatures to identify the start of a VxWorks symbol table
8 string \x00\x00\x05\x00\x00\x00\x00\x00 VxWorks symbol table, big endian,
......
src/magic/misc
......@@ -2,9 +2,9 @@
# $File: pdf,v 1.6 2009/09/19 16:28:11 christos Exp $
# pdf: file(1) magic for Portable Document Format
#
0 string %PDF- PDF document,
>6 byte !0x2e invalid
>5 string x version: "%3s"
0 string %PDF- PDF document,
>6 byte !0x2e invalid
>5 string x version: "%3s"
#------------------------------------------------------------------------------
# $File: zyxel,v 1.6 2009/09/19 16:28:13 christos Exp $
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment