Embedded hacking courses: grayhatacademy.com
Based in United States
- Tweets 1,929
- Following 107
- Followers 7,738
- Likes 1,080
This looks awesome! Ran it across a few firmware images I had laying around, worked great. V impressive list of extractors…does it handle known non standard implementations (thinking mostly of some older SquashFS images)?
1
1
342
/dev/ttyS0 retweeted
Today I'm introducing two new open source IoT firmware analysis tools:
Moria and Mithril
Moria is a firmware extraction tool just like binwalk and unblob, except for one major difference: ZERO external extractor dependencies!
No more relying on ancient and unmaintained extraction utilities with numerous bugs / patches.
EVERY filesystem extractor has been rewritten in 1st party C++ to be fast and flexible.
Mithril is moria's companion. It scans extracted filesystems for secrets and SBOM. Correlates CVEs. Syncs with NVD, EPSS and KEV datasets.
Check out my blog post where I kick the tires:
brownfinesecurity.com/blog/i…
21
113
494
19,963
Decrypt D-Link M95 router firmware:
dd if=firmware_image.bin of=enc.bin bs=512 skip=1
openssl aes-256-cbc -d -in enc.bin -out dec.bin -k 91A9A3AF2218F4EA60AC37D5835EB318
1
12
85
5,636
Decrypt D-Link R95 router firmware:
dd if=firmware_image.bin of=enc.bin bs=512 skip=1
openssl aes-256-cbc -d -in enc.bin -out dec.bin -k BE81AE1B6F523AC7164C4FD67B6BD8FD
1
4
39
4,084
Decrypt D-Link M36 router firmware:
dd if=firmware_image.bin of=enc.bin bs=512 skip=1
openssl aes-256-cbc -d -in enc.bin -out dec.bin -k A11E331C15CE73ABA8E06171A11D2FB6
1
24
961
Decrypt D-Link R36 router firmware:
dd if=firmware_image.bin of=enc.bin bs=512 skip=1
openssl aes-256-cbc -d -in enc.bin -out dec.bin -k CAD1C42B11F1982FFA94B6A24C260A43
10
63
4,163
Can confirm. @nmatt0 has great stuff as always, and the whole embedded systems village was awesome.
1
190
/dev/ttyS0 retweeted
Embedded Systems Village has been hoppin! Come check it out if you haven't yet!
1
1
45
2,103
/dev/ttyS0 retweeted
Had a blast doing this podcast!!
@nmatt0 is a hardware and #IoT security researcher. He joins Chris to talk about best practices for securing hardware that talks to the internet and share stories of products that didn't pass muster.
theamphour.com/698-hardware-…
1
7
83
4,311
/dev/ttyS0 retweeted
Just in time for a happy new year with better firmware analysis. Now with the enhanced binwalk decryptor available in EMBA. SBOM, known vulnerabilities, static analysis, emulation and much more (Screenshots from DIR-822 Rev C) github.com/e-m-b-a/emba
Just in time for Christmas: a repository for decrypting many encrypted D-Link firmware images. Also integrated into Binwalk for auto-magic decryption & extraction.
github.com/devttys0/delink
6
19
93
9,654
Binwalk definitely *should* handle those. Bug reports are always welcome, if you can provide a sample firmware image or link (either here or on the github page) I can take a look. Thanks!
41
lol that’s the main purpose of binwalk, what binary blob(s) are you referring to? unblob is good, it does some things binwalk doesn’t (and ice-versa), I keep both tools installed on my system for RE work.
1
173
Just in time for Christmas: a repository for decrypting many encrypted D-Link firmware images. Also integrated into Binwalk for auto-magic decryption & extraction.
github.com/devttys0/delink
5
100
394
40,384
/dev/ttyS0 retweeted
EMBA release alert with version 1.5.1 - Rise from the dead or Binwalk is back in town.
We have a big update for all you #SBOM/#IoT/#firmware and binary analysis people out there.
EMBA is getting faster and more powerful with new binwalk v3 and more SBOM github.com/e-m-b-a/emba/rele…
3
6
45
3,029
Nice work! :) FYI, Binwalk disables text formatting when it's not outputting to a terminal, so piping the output to `tee -` might help when using large terminal fonts for your videos.
1
1
55
/dev/ttyS0 retweeted
making progress ... say hi to all new binwalk in EMBA
Looks as it is time to start with some binwalk v3 integration into EMBA. First run is binwalk v2, 2nd run is v3 ... great work @devttyS0
17
104
9,362