Abusing PHP's Easter Eggs: Revealing PHP Versions

1:09 PM

PHP Comes with some easter eggs for fun. today, I will try to share the way I use to identify the PHP version of a website as an alternative way. This way is useful for information gathering when the traditional nmap scanning & X-Powered-By headers get filtered.

If you add the value "?=PHPE9568F36-D428-11d2-A769-00AA001ACF42"  to the end of any URL that is a PHP page, you will see a funny picture on *most* servers. Note this trick does not work on big sites like Facebook.

There is a hidden function in PHP, which is NOT documented in php.net online manual. php_egg_logo_guid().
The function is defined as a macro preprocessor in php-src/ext/standard/info.h around line 54,

 


The easter egg on april 1 (april fool's) will replace the PHP logo on any phpinfo() page. If the php directive expose _php is set to "off" in php.ini, then the PHP eggs will not show. it is "on" by default. 3 of the web hosting servers I have tried, all of them, did not change it.


?=PHPE9568F36-D428-11d2-A769-00AA001ACF42 is interesting. Below are 6 different images that will be displayed depending on the PHP version.


If the first brown dog appeared, PHP Version 4.3.0 - 4.3.10
If the black dog appeared, PHP Version is PHP Versions 4.3.11 - 4.4.6; and 5.0.4 - 5.1.2
If colored php logo, PHP Version 5.1.3 - 5.2.13
The guy with breadsticks means, PHP Version 4.0.0 - 4.2.3
If the bunny appeared, PHP Version 5.0.0 - 5.0.3
Or else, if the elephant appeared, PHP Version 5.3.0 - current

And easy as that, we have our PHP version range.
the easter eggs also contain, ?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000 for PHP credits.
which is almost very similar interface of the phpinfo() page.
Also?=PHPE9568F35-D428-11d2-A769-00AA001ACF42 to identify the zend engine php uses, which is an alternative way of version identification depending on the logo.




Out of Topic, People need to listen to this amazing song. I loved it.

Happy Hacking :)

Share This Story

Tags:

You Might Also Like

25 comments

  1. AnonymousOctober 9, 2014 at 11:05 AM

    Awesome article. thanks for sharing.

    ReplyDelete
  2. KungFu PandaNovember 13, 2014 at 9:58 AM

    the song, thanks

    ReplyDelete
  3. BloggerDecember 25, 2016 at 7:43 PM

    Bluehost is the best web-hosting provider with plans for all of your hosting needs.

    ReplyDelete
  4. karthik anuMarch 6, 2017 at 10:17 PM

    Nice it seems to be good post... It will get readers engagement on the article since readres engagement plays an vital role in every blog.. i am expecting more updated posts from your hands.
    iOS Training in Chennai
    Android Training in Chennai
    php Training in Chennai

    ReplyDelete
  5. vinito stanyMay 1, 2017 at 4:35 AM

    You have provided an nice article, Thank you very much for this one. And i hope this will be useful for many people.. and i am waiting for your next post keep on updating these kinds of knowledgeable things...
    PHP training in chennai

    ReplyDelete
  6. Ashfak RezaJune 4, 2017 at 1:03 AM

    Thanks, great post. I find your opinion quite interesting, but the other day I stumbled upon a completely different advice from another blogger, I need to think that one through, thanks for posting.
    earn money online without investment

    ReplyDelete
  7. john stanyJune 12, 2017 at 1:03 AM

    You have provided an nice article, Thank you very much for this one. And i hope this will be useful for many people.. and i am waiting for your next post keep on updating these kinds of knowledgeable things...

    Android App Development Company

    ReplyDelete
  8. Sharon SandyJune 27, 2017 at 10:33 PM

    great and nice blog thanks sharing..I just want to say that all the information you have given here is awesome...Thank you very much for this one.
    web design Company
    web development Company
    web design Company in chennai
    web development Company in chennai
    web design Company in India
    web development Company in India

    ReplyDelete
  9. john stanyJune 29, 2017 at 11:31 PM

    I am expecting more interesting topics from you. And this was nice content and definitely it will be useful for many people.
    iOS App Development Company
    iOS App Development Company

    ReplyDelete
  10. Logu christyJune 30, 2017 at 3:45 AM

    All are saying the same thing repeatedly, but in your blog I had a chance to get some useful and unique information, I love your writing style very much, I would like to suggest your blog in my dude circle, so keep on updates…
    Web Designing Training in Chennai|Java Training in chennai |Python Training in Chennai

    ReplyDelete
  11. louis philipJuly 3, 2017 at 6:10 AM

    I wondered upon your blog and wanted to say that I have really enjoyed reading your blog posts. Any way I’ll be subscribing to your feed and I hope you post again soon.

    Fitness SMS
    Fitness Text
    Salon SMS
    Salon Text
    Investor Relation SMS
    Investor Relation Text

    ReplyDelete
  12. isabella jacobJuly 6, 2017 at 12:34 AM

    it is really amazing...thanks for sharing....provide more useful information...
    Mobile app development company

    ReplyDelete
  13. Sandy SandyJuly 20, 2017 at 12:24 AM

    It is very post,thanks for sharing.



    top mobile apps development company
    mobile apps development company in Mumbai
    Android app development company India
    iPhone apps development companies India
    iOS app development companies
    Windows apps development companies Noida

    ReplyDelete
  14. ravi kumarJuly 29, 2017 at 12:06 AM

    iam regular reader of your blog and no doubt it all stuff is awesome. The best thing about your sharing and posting is that you always provide content that is helpful for both the newbie and experts. Looking for more stuff and tutorials.

    White Label Website Builder

    ReplyDelete
  15. Sharon SandyAugust 22, 2017 at 12:05 AM

    great and nice blog thanks sharing..I just want to say that all the information you have given here is awesome...Thank you very much for this one.
    web design Company
    web development Company
    web design Company in chennai
    web development Company in chennai
    web design Company in India
    web development Company in India

    ReplyDelete
  16. Sandy SandySeptember 6, 2017 at 10:49 PM

    very helpful post for those who are new and thinking to start a blog site.Your posts are very helpful and creative. I have atlast opened a blog site being inspired from your articles…


    IOT Application Development Company
    artificial intelligence company India
    best automation company India
    machine learning company India
    Deep Learning company in India
    Data science company in India

    ReplyDelete
  17. louis philipSeptember 11, 2017 at 1:05 AM

    Being new to the blogging world I feel like there is still so much to learn. Your tips helped to clarify a few things for me as well as giving..
    Texting API
    Text message marketing
    Digital Mobile Marketing
    Sms API
    Sms marketing

    ReplyDelete
  18. jessicaNovember 5, 2017 at 11:46 PM

    This is excellent information. It is amazing and wonderful to visit your site.Thanks for sharing this information,this is useful to me...
    Mobile Marketing Service
    Mobile Marketing Companies

    ReplyDelete
  19. Inigo josephNovember 6, 2017 at 4:21 AM

    Needed to compose you a very little word to thank you yet again regarding the nice suggestions you’ve contributed here. php training in chennai

    ReplyDelete
  20. Standard Cold Pressed OilNovember 21, 2017 at 11:15 PM


    It is a very nice article including a lot of viral content. I am going to share it on social media. Get the Cold Pressed Oil

    ReplyDelete
  21. ASO ServicesDecember 5, 2017 at 7:25 PM

    Thanks a lot for sharing this with all of us, I like it and we can communicate. Do you need buy app ratings and reviews. To boost app ranking and double app downloads now.

    ReplyDelete
  22. kri pavDecember 6, 2017 at 4:10 AM

    Nice and good informative article, thanks for sharing your valuable ideas, keep rocks.Android Training Institute in Chennai | IOS Training in Chennai | Online Android Training in Velachery

    ReplyDelete
  23. Govind RajJanuary 25, 2018 at 9:35 PM

    i am really happy to say it’s an interesting post to read . I learn new information from your article , you are doing a great job . Keep it up

    PSD to Wordpress
    wordpress website development

    ReplyDelete
  24. Rigid BoxFebruary 16, 2018 at 3:11 AM

    Super !! Very Nice Article I have got happy to read this article. Thanks for shared this article.

    ReplyDelete
  25. Vel Murugan PropertiesFebruary 17, 2018 at 2:44 AM

    Nice article Thanks for sharing this article Wonderful information from this website Thanks !!!

    ReplyDelete

Note: Only a member of this blog may post a comment.