PHPackages                             radoi-teodor/detect-it-easy-php - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. radoi-teodor/detect-it-easy-php

ActiveLibrary

radoi-teodor/detect-it-easy-php
===============================

A powerful file type detection and analysis library for cybersecurity experts and reverse engineers. Identifies executables, archives, packers, compilers, protectors, and more.

00PHP

Since Apr 6Pushed yesterdayCompare

[ Source](https://github.com/radoi-teodor/detect-it-easy-php)[ Packagist](https://packagist.org/packages/radoi-teodor/detect-it-easy-php)[ RSS](/packages/radoi-teodor-detect-it-easy-php/feed)WikiDiscussions main Synced today

READMEChangelogDependenciesVersions (1)Used By (0)

DetectItEasy-PHP
================

[](#detectiteasy-php)

A powerful, cross-platform file type detection and analysis library for PHP. Designed for cybersecurity experts, malware analysts, and reverse engineers.

Inspired by [Detect-It-Easy](https://github.com/horsicq/Detect-It-Easy), this pure PHP library identifies file formats, compilers, packers, protectors, installers, and frameworks through a combination of signature matching and heuristic analysis.

Features
--------

[](#features)

- **Universal format detection** — PE, ELF, Mach-O, APK, IPA, DEX, ZIP, RAR, 7z, PDF, Office documents, images, and 30+ more formats
- **Deep binary analysis** — PE header parsing (COFF, optional header, sections, Rich header), ELF header/section parsing, Mach-O load command parsing
- **Packer detection** — UPX, ASPack, PECompact, MPRESS, Petite, FSG, NSPack, PyInstaller, and more
- **Compiler identification** — MSVC (2005–2022), GCC, Clang/LLVM, Borland Delphi, Go, Rust, Nim, Zig, Free Pascal, and more
- **Protector detection** — Themida, VMProtect, Armadillo, Enigma, Code Virtualizer, .NET Reactor, ConfuserEx, and more
- **Installer detection** — NSIS, Inno Setup, InstallShield, WiX, and more
- **Framework detection** — .NET, Qt, Electron, Flutter, React Native, Xamarin, UIKit, AppKit
- **Entropy analysis** — Shannon entropy computation with block-level analysis for identifying packed/encrypted content
- **ZIP subtype refinement** — Automatically distinguishes APK, JAR, WAR, IPA, DOCX, XLSX, PPTX, EPUB, NuGet from plain ZIP
- **Rich header analysis** — Decodes PE Rich headers to identify Microsoft build tools
- **Extensible signature database** — JSON-based signatures, easy to add custom signatures
- **CLI tool included** — Batch scan directories, JSON output, quick scan mode
- **Cross-platform** — Runs on Windows, Linux, and macOS
- **PHP 7.4+** compatible (including PHP 8.x)

Requirements
------------

[](#requirements)

- PHP 7.4 or higher
- `ext-json` (included by default in PHP)

No external dependencies required.

Installation
------------

[](#installation)

### Via Composer

[](#via-composer)

```
composer require radoi-teodor/detect-it-easy-php
```

### Manual Installation

[](#manual-installation)

Clone or download the repository:

```
git clone https://github.com/radoi-teodor/detect-it-easy-php.git
cd detect-it-easy-php
composer install
```

Quick Start
-----------

[](#quick-start)

### Basic Usage (Library)

[](#basic-usage-library)

```