file
file file is the Unix classic for identifying file types via magic signatures, sniffing bytes to classify ELF, PDF, or JPEG without extensions for quick triage in forensics or scripting. Compile its C source or use pre-built, run on dirs for batch outputs with MIME subtypes for precise categorization. Open-source from Christos Zoulas, it's the signature sentinel for analysts verifying formats in raw dumps.
Explore →python-magic
python-magic python-magic is the libmagic wrapper for Python, probing file buffers for types like gzip or HTML with from_file/from_buffer for seamless integration in scripts or apps. Bind it to sniff uploads or evidence, outputting MIME strings for automated classification chains. Open-source from ahupp, it's the Pythonic probe for devs embedding type checks in data pipelines.
Explore →filetype
filetype filetype is the blazing Go lib for header-based identification, matching bytes against 100+ signatures for images, archives, or docs with zero allocations for high-throughput scans. Import and call Match on readers, returning MIME and extensions for quick validations. Open-source from h2non, it's the speed sniffer for Go devs classifying streams in real-time.
Explore →identify
identify identify is the CLI and lib for file type detection using regex patterns on headers, supporting 200+ formats like PNG or ZIP for accurate MIME guesses in batch jobs. Run on files for verbose outputs, scripting integrations for custom classifiers in forensics tools. Open-source from chriskuehl, it's the pattern picker for analysts extending type detection beyond magic.
Explore →binwalk
binwalk binwalk's signature scanner identifies embedded file types in firmware or images, carving out nested PDFs or ELF within larger blobs for multi-layer forensics. Extract via CLI with -e, tuning for false positives in complex dumps. Open-source from ReFirmLabs, it's the embedded explorer for reverse engineers spotting types in packed archives.
Explore →TrID
TrID TrID is the statistical identifier that analyzes file entropy and n-grams against a defs database for 5000+ types, scoring matches for unknown formats in evidence triage. Update defs from source, run the C++ exe on samples for detailed reports. Open-source from Marco Pontello, it's the probabilistic profiler for examiners classifying exotic artifacts.
Explore →libmagic
libmagic libmagic is the core C library powering file command, with bindings for type matching via compiled magic files for extensible signature sets in custom tools. Link it in projects for from-mem checks, updating dbs for new formats. Open-source from Christos Zoulas, it's the foundational forge for devs building type-aware scanners from the ground up.
Explore →mimemagic
mimemagic mimemagic is the Ruby gem for header-based MIME detection, wrapping libmagic for accurate file typing in Rails uploads or script validations with extension fallbacks. Gem install and call on paths or strings for quick classifications. Open-source from minimagic, it's the Ruby radar for web devs sniffing content types in dynamic inputs.
Explore →whatfile
whatfile whatfile is the Node.js CLI for file type probing with libmagic bindings, outputting MIME and descriptions for uploads or log parsing in JS-heavy workflows. npm install and run on globs for batch jobs, integrating with Express for runtime checks. Open-source from ryanmcgrath, it's the JS junction for full-stack testers classifying files in serverless setups.
Explore →python-libmagic