From e470cab2a3d0ef967399ca08df7e29402a1fb6a8 Mon Sep 17 00:00:00 2001 From: Christos Zoulas Date: Wed, 20 Apr 2022 21:14:23 +0000 Subject: More PHP magic from Anatol Belski --- magic/Magdir/commands | 28 +++++++++++++++++++++++++++- 1 file changed, 27 insertions(+), 1 deletion(-) diff --git a/magic/Magdir/commands b/magic/Magdir/commands index 7265ebb1..a257eb2b 100644 --- a/magic/Magdir/commands +++ b/magic/Magdir/commands @@ -1,6 +1,6 @@ #------------------------------------------------------------------------------ -# $File: commands,v 1.68 2022/04/04 16:12:56 christos Exp $ +# $File: commands,v 1.69 2022/04/20 21:14:23 christos Exp $ # commands: file(1) magic for various shells and interpreters # #0 string/w : shell archive or script for antique kernel text @@ -153,6 +153,32 @@ 0 string Zend\x00 PHP script Zend Optimizer data +# From: Anatol Belski +0 string OPCACHE +>7 ubyte 0 PHP opcache filecache data + +0 search/64 --TEST-- +>16 search/64 --FILE-- +>24 search/8192 --EXPECT PHP core test +!:ext phpt + +# https://www.php.net/manual/en/phar.fileformat.signature.php +-4 string GBMB PHP phar archive +>-8 ubyte 0x1 with MD5 signature +!:ext phar +>-8 ubyte 0x2 with SHA1 signature +!:ext phar +>-8 ubyte 0x3 with SHA256 signature +!:ext phar +>-8 ubyte 0x4 with SHA512 signature +!:ext phar +>-8 ubyte 0x10 with OpenSSL signature +!:ext phar +>-8 ubyte 0x11 with OpenSSL SHA256 signature +!:ext phar +>-8 ubyte 0x12 with OpenSSL SHA512 signature +!:ext phar + 0 string/t $! DCL command file # Type: Pdmenu -- cgit v1.2.1