|
Rob Thompsonrob.sun3.org |
RSS ArticlesArticle Categories:
New Articles:
- More on High Resolution Security Cameras
- Bash Shell: Find Nano or Pico
- Zimbra on a VPS: Tuning
- Zimbra on a VPS: Step-by-Step
- Zimbra: It's Going Places
- Threaded Discussion Site Widget
- Scripts as Reliable Daemons
- Switch vs. If
- Zimbra
- Universities and Email Outsourcing
- High Resolution Security Cameras
- Multiple User Apache Setups
- PHP and Solaris: getcwd() Behavior
- Wapache - Win GUI Framework
- SetGID and SetUID Shell Scripts
- Multipart Mime Headers in PHP
- Parallelizing RSYNC Processes
- Oracle Tree Relationships
- PHP: Find Ophaned Files
Contact:
New comments:
- Rob (Hi Christina, Here...)
- Christina (Hello Rob, Th...)
- Mike Whitton (Hi Rob, how d...)
- Rob (Hi SpinState, I just p...)
- SpinState (Looking forward...)
- gwb (This worked fine for m...)
- Shane (I'm having a hard ti...)
- Robert (what bugs me about...)
- Josh Johnston (Micro optimi...)
- Unomi (I've done a lot of b...)
- Matt Parrott (Thank you. T...)
- ApeHanger (> case($a = 0): ...)
- Marc Gear (Don't forget tha...)
- leo (Interesting test! But...)
- Rob Thompson (Hi Phil, than...)
- Phil Davis (I've wished for...)
- Adam (I've never heard of Z...)
- open source cms (It's work...)
- open source cms (Funny prob...)
Various Scripts
Various PHP & Related ScriptsPhoto Gallery
My Photo GalleryLinks
Oracle Corporationplanet-php.net
produx.org
robsort.org
The Saab Network (TSN)
Thread Buddy
Technorati Profile
Wayne State University
muskr.at
Scripts
Find magic blocks in binary images
<?
// Location of "file" command
$filebin = "/usr/bin/file";
if (strlen(trim($argv[1]))>0)
{
$filename = $argv[1];
$handle = fopen($filename, "rb");
$filesize = filesize($filename);
$contents = fread($handle, filesize($filename));
// Output the filesize
echo "Total size is: " . $filesize . "\n";
for ($i=0;$i<=$filesize;$i=$i+512)
{
$tempfile = "tmp.data";
$temphandle = fopen($tempfile,"wb");
$chunk = substr($contents,$i,2000);
fwrite($temphandle,$chunk,2000);
fclose($temphandle);
echo "Byte " . $i . " of " . $filesize . "\r";
// Run the file command
$filecmd = $filebin . " " . $tempfile;
exec($filecmd,$output);
// Output if we found anything
if (strpos($output[0],": data")==0)
{
echo "Location: 0x" . dechex($i) . " -- " . $output[0] . "\n";
}
$output = "";
unlink($tempfile);
}
fclose($handle);
}
else
{
echo "Usage: findmagic [file]\n";
}
?>
04/10/2008 09:21am
