Skip to main content

Questions tagged [binwalk]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
19 views

How to unpack LTE modem backuped file via chip programmer

I take a backup for my LTE modem to analyse the firmware on it, because i want to modify for getting "shell connexion" like adb /telnet or ssh on it. On binwalk dump_rout.bin it show this ...
0xnewbie's user avatar
1 vote
1 answer
97 views

binwalk guess wrong LZ4 compressed data format

I have a stock Netgear switch firmware file: https://www.downloads.netgear.com/files/GDC/GS316EP/GS316EP_GS316EPP_V1.0.3.7.zip When I do binwalk, it gives me at position 0x769BDC a description as &...
Julionabi's user avatar
0 votes
0 answers
44 views

Unknown Mitsubishi automotive MCUs - are these using unknown architecture?

Please help ientify the architecture (ISA) of MH8200F and MH8110F which is found almost exclusively on Mazda ECUs with L3CK, L587, L5E8, LFAR, LFFR, LFJP firmwares I've revealed that the MH8501F is ...
Andy's user avatar
  • 1
0 votes
0 answers
86 views

Extracting KIA care update firmware

I have a new KIA sportage NQ5 car. Now I want to enable wifi and turn on ADB so I can install custom app and use AA Wireless or Carplay wireless. Sadly, the old trick to access android setting app ...
Khánh Nguyễn Nhật's user avatar
0 votes
0 answers
558 views

Hello Watch 3+ smart watch firmware extracting

I have a firmware file of Hello Watch 3+ smart watch. I want to customize this firmware. I tried binwalk but no result. I am trying reverse engineering for the first time. Can you help me? File link: ...
Eray Eser's user avatar
2 votes
1 answer
101 views

Unix system with windows-style registry

When trying to determine the filesystem of a firmware image using binwalk, I encountered a strange combination. The binwalk is returning a lot of Unix paths, but some of them contain a typical windows-...
Suske Lambik's user avatar
0 votes
0 answers
395 views

Extract plain database from a large file based on binwalk results

I want to extract a plain SQL database from a file which is used by a software (CTF). The target is a file with .db extension. The file itself doesn't have a signature and file command doesn't provide ...
zbx0310's user avatar
2 votes
1 answer
256 views

Decode a Windows CE nand dump

I am trying to decode and extract filesystem of NAND dump from broken device. Dump should't contain OOB. I tried to use eimgfs, but it didn't give any result. Any suggestions please, what am I doing ...
Alexander's user avatar
2 votes
0 answers
199 views

binwalk gives an endless list of files

I am running binwalk -B image.bin on an 8MB firmware that I dumped from an MStar MSC313e based ip camera. The binwalk output is longer than I would expect. Could they be mostly false positives? I have ...
dotvav's user avatar
  • 131
2 votes
0 answers
660 views

Please help identify which type of CPU architecture is used on obscure portable media players

I am trying to reverse engineer a media player with obscure SigmaTel SoCs just for fun but I didn't find very useful information. As far as I don't know exactly what CPU architecture is used on these ...
Andy's user avatar
  • 21
4 votes
1 answer
191 views

Mickey Mouse toy bin file analysis

I am trying to reverse engineer a Mickey Mouse toy just for fun but I am stuck. The toy has several buttons that play various phrases and songs. My aim was to see if I can read those songs from the ...
George Farcas's user avatar
5 votes
1 answer
163 views

Zlib structure inside a GCC static library

I'm trying to analyze a GCC static library which is a part of a commercial software. First, I used IDA Pro to analyze entire Lib file, but it could find only object files and was unable to disassemble ...
HamidReza's user avatar
  • 151
2 votes
0 answers
154 views

Assistance with dumped firmware image

I need some assistance in reverse engineering this dumped nor flash image. binwalk yields this after norflash has been dumped (removed the flash chip, dumped it with CH341a and flashrom) DECIMAL ...
MisterZZ's user avatar
3 votes
0 answers
163 views

rooting D-link DIR-x5460 - Weird Firmware

I have a D-link DIR-X5460 and I'm trying to get a shell on it. I connected to the UART interface and tried some default passwords, but none work. I downloaded the FW from D-link's website, decrypted ...
Barakinio's user avatar
2 votes
1 answer
796 views

Trying to reverse a bin file

I'm trying to reverser a bin file with Ghidra, without success for the moment, I can't find any functions in the decompiled file. he bin file is for an ARM 32bits, I'm pretty sure this is an stm32, so ...
simon's user avatar
  • 131
2 votes
0 answers
327 views

.bin firmware Standalone Binwalk returns garbage, Binwalk -I returns something but seems corrupted. Binwalk -X returns hundreds of raw deflate streams

As the title says I have the firmware of the WAX214 wifi access point. The firmware is actively preventing me from using the full available functionality of the device so I am trying to reverse it to ...
Arimodu's user avatar
  • 21
2 votes
1 answer
194 views

Can an OpenWrt FIT kernel be virtualized in qemu?

I have a router I'd like to virtualize in order to do some dynamic analysis. I could virtualize individual binaries with qemu, but I'd like to have the whole ecosystem up and running. I'll start here: ...
Matthew Tingum's user avatar
4 votes
1 answer
1k views

Deciphering the format of an unknown file

I am attempting to discover the exact format/encoding of a file. These files stem from closed-source analysis software we use on a daily basis. I would like to obtain the format in order to create an ...
wptmdoorn's user avatar
2 votes
0 answers
170 views

Edit Squashfs filesystem in flash memory

I have read Flash memory and analyze with binwalk and find out Squashfs that I can extract with dd and open with unsquashfs . When I open this FS I want to add some file into this FS and edit some ...
yfr24493AzzrggAcom's user avatar
0 votes
0 answers
544 views

Extract smartwatch firmware bin file

I'm trying to extract files from a bin file that's the firmware of a smartwatch. I tried using binwalk -Mre firmware.bin but got no files, this is the result: How should I extract/modify this bin ...
Kazem Ma's user avatar
3 votes
2 answers
2k views

Disassembling ARM based Camera Firmware

I'm trying to disassemble hikvision firmware 5.5.85. I want to extract the contents of digicap.dav file. Binwalk is unable to extract the known zip files. binwalk -e digicap.dav DECIMAL ...
ArkoD's user avatar
  • 131
1 vote
0 answers
480 views

Firmware RE (Beginner)

I'm trying to learn RE, and I thought I'd look at some firmware that interests me. I'm looking at the Roland TD-11 drum module firmware, which is available for download from the Roland website I ...
Odysseus's user avatar
2 votes
2 answers
2k views

Harman Kardon firmware reverse engineering

First of all, I'm very new to reverse engineering, but I know about hex, binary, opcodes, et cetera. I'm trying to reverse engineer a Harman Kardon firmware file, because I think there are some API ...
Lars Jansen's user avatar
2 votes
0 answers
478 views

Nokia 105(TA-1114) Firmware analysis using Binwalk

First please forgive me if a make any mistake. i am not a primarily English speaker but I will try my best. Few days ago i started to tinkering with Nokia feature phone Nokia 105(TA-1114). I get a ...
muhammad shahzaib's user avatar
2 votes
1 answer
1k views

how to extract this firmware .img?

how to extract this firmware .img?!? https://files.fm/u/bhgbk336r w/ binwalk i've this output: DECIMAL HEXADECIMAL DESCRIPTION ---------------------------------------------------------------...
hackstunt's user avatar
0 votes
1 answer
206 views

Grundfos Firmware

I am trying to understand the firmware of a Grundfos CIM 500 product. The CIM 500 is a control module for grundfos pumps which uses a web interface. From binwalk I have found that it is running eCos, ...
Thue Iversen's user avatar
0 votes
1 answer
2k views

decryption of firmware file from modem/router Speedport Plus (Sercomm not ZTE)? [closed]

Although I have no hope really I will leave this here in case someone has the ability and time to help. This is from a modem/router widely used in countries like Germany, Greece and others from ...
N.K.K.'s user avatar
  • 9
0 votes
1 answer
548 views

How to get PI UEFI binary when mcrypt is used?

I am playing with a dump I made from a serial flash containing the BIOS of a ultra portable whose BIOS is protected by a password. I am trying to find the password or patch the routine which check the ...
rdpdo's user avatar
  • 43
5 votes
2 answers
864 views

Unable to unsquash from a FW dump

After trying to unsquash a firmware dump from a router without success, I am asking for help. I have a router with a BCM68380 CPU. After desoldering the TOSHIBA NAND chip I dumped the firmware (link ...
Ismael's user avatar
  • 51
3 votes
0 answers
523 views

Modify bin firmware file of an old phone

I am trying to remove/disable some system apps ( Messages, Games, Radio or Calendar ) and remove/replace the boot screen from samsung E1200y. So i start searching for the way to do that... I used HxH ...
M J's user avatar
  • 53
0 votes
0 answers
806 views

Binwalk on flash dump yielding useless files and empty file systems

I have been investigating some routers by desoldering their nand flash and dumping them using a flash programmer. However when I use binwalk on these dumps I end up with fragments of files mixed in ...
Plasma_000's user avatar
1 vote
1 answer
121 views

Why do some firmware binaries have more than 1 file system structures

As I unpack and explore the packing structure of firmware, I am noticing that some firmware will have several file system structures. I can't seem to find any documentation as to why one device may ...
Lexicon's user avatar
  • 123
1 vote
1 answer
2k views

Unpacking, modifying, repacking and flashing a firmware

I've been trying to figure out how to modify the firmware on a DVR I bought for cheap recently. The built in software isn't great and doesn't offer any option for exporting video other than plugging a ...
jvergeldedios's user avatar
1 vote
1 answer
1k views

Recognize binary architecture

I have binary that run on Arm Thumb cpu, in embedded devive that not running Linux. When I tried to run bimwalk or file ,and even open it with Ida ,but they didn't find out that this binary run on ...
yfr24493AzzrggAcom's user avatar
1 vote
0 answers
3k views

Windows binwalk refuses to extract files

I'm trying to reverse engineer the firmware for an AutoDrive AD-520 dashcam. The firmware is available for download here. I've installed binwalk on windows, I can get it to read the file just fine, ...
HaLo2FrEeEk's user avatar
2 votes
2 answers
1k views

Repacking an embedded initramfs

I'd like to modify some of the init scripts in an initramfs that is embedded in a kernel bzImage. I know I can modify them by not changing the size of any files (e.g. by commenting out lines, and ...
ntlord's user avatar
  • 21
1 vote
0 answers
336 views

No false positive on binwalk

I have the same problem from my previous post but this time, I don't think it's the same culprit again as I have solved the problems. This time, I'm very sure I had extracted the firmware. On my ...
Calvin9's user avatar
  • 63
1 vote
0 answers
1k views

Analyzing firmware image (eCos with YAFFS)

I'm trying to apply some of the practices I learn in class and online and reverse engineer the firmware of a Chinese dash camera. I've downloaded the firmware from their website (Smart dash camera: ...
shaqed's user avatar
  • 133
2 votes
0 answers
3k views

How to proceed after running binwalk on this firmware?

I'm trying to access the firmware from the .bin in this archive: http://mydjiflight.dji.com/file/links/OSMO_ACTION_V17020_20191203_ZIP So far I've used binwalk and gotten the following output: ...
the_endian's user avatar
  • 1,870
2 votes
0 answers
50 views

Possibly infected image

Long story short I'v downloaded a template for my website and instead of images it has the .html files included, and at the beginning those html files do include PNG IHDR , and they are being loaded ...
Tomas Randomas's user avatar
1 vote
0 answers
869 views

Extract files of a SquashFS Filesystem

I already asked a similar question but after a deeper analysis of the filesystem I found out that I misunderstood the problem and that's why I decided to delete the old question and make a new one. I ...
Ramazuri's user avatar
  • 108
3 votes
0 answers
338 views

Blank binwalk and binvis.io

I've been trying to extract a Bluetooth door lock's firmware. When I tried extracting it, I got an empty output. I then found a post which I thought would help me but when I tried using binvis.io, ...
Calvin9's user avatar
  • 63
3 votes
0 answers
1k views

Extracting specific files from a unknown archive file format

I'm trying to extract some binary blobs from a unknown archive format. (*.pakz). I know this archive contains some .xtreme binary files that are the files I'm looking for. My goal is to extract those ...
Felipe Lira's user avatar
1 vote
3 answers
2k views

CSR DFU File Format

I am trying to reverse engineer the firmware for my JBL Flip 3 speaker. I have obtained a DFU file for the device online but am unsure as to how much of the firmware is included. My first question ...
genghiskhan's user avatar
2 votes
1 answer
3k views

Problem with analyzing a JFFS2 Filesystem

I extracted the content of a NAND Flash and analyzed it with binwalk. Binwalk showed me that the dump contains a big endian JFFS2 filesystem. My next step was extracting the files into a directory. To ...
Ramazuri's user avatar
  • 108
0 votes
1 answer
6k views

Binwalk to Extract Firmware is not working for me

I'm trying to extract code from Yuneec Drone Firmware and I've run into some issues. Currently when I run binwalk agains the file, I get the following issues: binwalk autopilot.yuneec.bin DECIMAL ...
jemo's user avatar
  • 11
2 votes
0 answers
1k views

Extracting firmware image from binary

I have firmware file in .bin format, but I need get firmware.img image file and Kernel uImage file for reflashing bricked device. How can I get these parts? I used Binwalk to extract content, ...
minto's user avatar
  • 215
4 votes
2 answers
962 views

Reverse Engineering Firmware Aether Cone

I have been trying to work out if its possible to reverse engineer the firmware for the Aether Cone. This is a good sound quality WIFI and Bluetooth speaker, but with Aether going bust, there is no ...
Blaine O's user avatar
0 votes
0 answers
1k views

unsquashfs failed to read SquashFS file

I tried to unpack binary which is SquashFS system, the file is mtd partition copied from NAND device, Root filesystem (read-only). Actually its SquashFS version, modifyed/patched by vendor. binwalk ...
minto's user avatar
  • 215
1 vote
0 answers
492 views

Can't install sasquatch tool

Ubuntu 16.04 LTS. I'm trying to install sasquatch tool (which should apply patches to the standard unsquashfs utility), but got the issue, every time build process show error in one place: ./build.sh:...
minto's user avatar
  • 215