Questions tagged [binwalk]
The binwalk tag has no usage guidance.
46
questions
0
votes
0answers
17 views
Binwalk, what's advantage of "Show results marked as invalid"?
I'm trying to understand -I option in binwalk. It provides some interesting output yet it isn't clear if these results are "invalid" or if they are valid results of a special type.
DECIMAL ...
3
votes
1answer
126 views
Deciphering the format of an unknown file
I am attempting to discover the exact format/encoding of a file. These files stem from closed-source analysis software we use on a daily basis. I would like to obtain the format in order to create an ...
1
vote
0answers
15 views
Edit Squashfs filesystem in flash memory
I have read Flash memory and analyze with binwalk and find out Squashfs that I can extract with dd and open with unsquashfs .
When I open this FS I want to add some file into this FS and edit some ...
0
votes
0answers
80 views
Extract RFS (rootfs) on UBIFS NAND Dump
I am practicing (studying) hardware reverse engineering. I dumped a NAND flash (smart TV), and managed to remove OOB data and emulate NAND in my environment. I detected that NAND used UBI filesystem, ...
0
votes
0answers
36 views
Changing variable in firmware.bin of UVC web camera
Just to note I am complete noob, and my plan might not even be possible. If that is the case that is fine, but I like to think everything is possible and at least try.
I have a UVC webcam that has ...
0
votes
0answers
80 views
Extract smartwatch firmware bin file
I'm trying to extract files from a bin file that's the firmware of a smartwatch.
I tried using
binwalk -Mre firmware.bin
but got no files, this is the result:
How should I extract/modify this bin ...
0
votes
0answers
58 views
Unpacking firmware of TP-LINK IPC firmware
I have some TP-LINK IPC firmware that must be reversed (as a task). But I can not unpack the .bin firmware and extract the file system.
Binwalk output:
576 0x240 xz compressed data
...
0
votes
0answers
79 views
Decoding a ZTE H188A config. file
I got this router from my ISP it's fairly good but most of the config options are grayed out. I wanted to decrypt the config file and change those options form there. after some research I found this ...
2
votes
1answer
360 views
Disassembling ARM based Camera Firmware
I'm trying to disassemble hikvision firmware 5.5.85. I want to extract the contents of digicap.dav file.
Binwalk is unable to extract the known zip files.
binwalk -e digicap.dav
DECIMAL ...
0
votes
0answers
85 views
Inflate zlib Data Stream from Hex File
I am working on a firmware bin file that has been extracted from an EXE file. The Firmware was inserted as an encrypted PKZip resource in the EXE.
I was able to fish the EXE password at runtime and ...
1
vote
0answers
154 views
Firmware RE (Beginner)
I'm trying to learn RE, and I thought I'd look at some firmware that interests me. I'm looking at the Roland TD-11 drum module firmware, which is available for download from the Roland website
I ...
1
vote
2answers
337 views
Harman Kardon firmware reverse engineering
First of all, I'm very new to reverse engineering, but I know about hex, binary, opcodes, et cetera.
I'm trying to reverse engineer a Harman Kardon firmware file, because I think there are some API ...
0
votes
0answers
98 views
Nokia 105(TA-1114) Firmware analysis using Binwalk
First please forgive me if a make any mistake. i am not a primarily English speaker but I will try my best.
Few days ago i started to tinkering with Nokia feature phone Nokia 105(TA-1114). I get a ...
2
votes
1answer
220 views
how to extract this firmware .img?
how to extract this firmware .img?!?
https://files.fm/u/bhgbk336r
w/ binwalk i've this output:
DECIMAL HEXADECIMAL DESCRIPTION
---------------------------------------------------------------...
0
votes
1answer
87 views
Grundfos Firmware
I am trying to understand the firmware of a Grundfos CIM 500 product.
The CIM 500 is a control module for grundfos pumps which uses a web interface.
From binwalk I have found that it is running eCos, ...
0
votes
0answers
90 views
Possible ways to reverse enginerring the boot file
I am trying to take files from the file called LOADING.KWI
it is the boot file for multimedia, located on the loading sdhc card, which should be inserted in multimedia's slot, without this card the ...
0
votes
1answer
588 views
decryption of firmware file from modem/router Speedport Plus (Sercomm not ZTE)? [closed]
Although I have no hope really I will leave this here in case someone has the ability and time to help.
This is from a modem/router widely used in countries like Germany, Greece and others from ...
0
votes
1answer
123 views
How to get PI UEFI binary when mcrypt is used?
I am playing with a dump I made from a serial flash containing the BIOS of a ultra portable whose BIOS is protected by a password. I am trying to find the password or patch the routine which check the ...
2
votes
2answers
253 views
Unable to unsquash from a FW dump
After trying to unsquash a firmware dump from a router without success, I am asking for help.
I have a router with a BCM68380 CPU. After desoldering the TOSHIBA NAND chip I dumped the firmware (link ...
2
votes
0answers
171 views
Modify bin firmware file of an old phone
I am trying to remove/disable some system apps ( Messages, Games, Radio or Calendar ) and remove/replace the boot screen from samsung E1200y.
So i start searching for the way to do that...
I used HxH ...
0
votes
0answers
305 views
Binwalk on flash dump yielding useless files and empty file systems
I have been investigating some routers by desoldering their nand flash and dumping them using a flash programmer.
However when I use binwalk on these dumps I end up with fragments of files mixed in ...
1
vote
1answer
52 views
Why do some firmware binaries have more than 1 file system structures
As I unpack and explore the packing structure of firmware, I am noticing that some firmware will have several file system structures. I can't seem to find any documentation as to why one device may ...
1
vote
1answer
592 views
Unpacking, modifying, repacking and flashing a firmware
I've been trying to figure out how to modify the firmware on a DVR I bought for cheap recently. The built in software isn't great and doesn't offer any option for exporting video other than plugging a ...
1
vote
1answer
393 views
Recognize binary architecture
I have binary that run on Arm Thumb cpu, in embedded devive that not running Linux.
When I tried to run bimwalk or file ,and even open it with Ida ,but they didn't find out that this binary run on ...
1
vote
0answers
2k views
Windows binwalk refuses to extract files
I'm trying to reverse engineer the firmware for an AutoDrive AD-520 dashcam. The firmware is available for download here. I've installed binwalk on windows, I can get it to read the file just fine, ...
2
votes
2answers
762 views
Repacking an embedded initramfs
I'd like to modify some of the init scripts in an initramfs that is embedded in a kernel bzImage. I know I can modify them by not changing the size of any files (e.g. by commenting out lines, and ...
1
vote
0answers
232 views
No false positive on binwalk
I have the same problem from my previous post but this time, I don't think it's the same culprit again as I have solved the problems.
This time, I'm very sure I had extracted the firmware. On my ...
1
vote
0answers
642 views
Analyzing firmware image (eCos with YAFFS)
I'm trying to apply some of the practices I learn in class and online and reverse engineer the firmware of a Chinese dash camera.
I've downloaded the firmware from their website (Smart dash camera: ...
2
votes
0answers
1k views
How to proceed after running binwalk on this firmware?
I'm trying to access the firmware from the .bin in this archive: http://mydjiflight.dji.com/file/links/OSMO_ACTION_V17020_20191203_ZIP
So far I've used binwalk and gotten the following output:
...
1
vote
0answers
44 views
Possibly infected image
Long story short I'v downloaded a template for my website and instead of images it has the .html files included, and at the beginning those html files do include PNG IHDR , and they are being loaded ...
1
vote
0answers
236 views
Extract files of a SquashFS Filesystem
I already asked a similar question but after a deeper analysis of the filesystem I found out that I misunderstood the problem and that's why I decided to delete the old question and make a new one.
I ...
3
votes
0answers
232 views
Blank binwalk and binvis.io
I've been trying to extract a Bluetooth door lock's firmware. When I tried extracting it, I got an empty output.
I then found a post which I thought would help me but when I tried using binvis.io, ...
3
votes
0answers
725 views
Extracting specific files from a unknown archive file format
I'm trying to extract some binary blobs from a unknown archive format. (*.pakz).
I know this archive contains some .xtreme binary files that are the files I'm looking for. My goal is to extract those ...
1
vote
2answers
1k views
CSR DFU File Format
I am trying to reverse engineer the firmware for my JBL Flip 3 speaker. I have obtained a DFU file for the device online but am unsure as to how much of the firmware is included. My first question ...
2
votes
1answer
2k views
Problem with analyzing a JFFS2 Filesystem
I extracted the content of a NAND Flash and analyzed it with binwalk.
Binwalk showed me that the dump contains a big endian JFFS2 filesystem. My next step was extracting the files into a directory. To ...
0
votes
1answer
3k views
Binwalk to Extract Firmware is not working for me
I'm trying to extract code from Yuneec Drone Firmware and I've run into some issues. Currently when I run binwalk agains the file, I get the following issues:
binwalk autopilot.yuneec.bin
DECIMAL ...
2
votes
0answers
851 views
Extracting firmware image from binary
I have firmware file in .bin format, but I need get firmware.img image file and Kernel uImage file for reflashing bricked device. How can I get these parts?
I used Binwalk to extract content, ...
4
votes
2answers
630 views
Reverse Engineering Firmware Aether Cone
I have been trying to work out if its possible to reverse engineer the firmware for the Aether Cone. This is a good sound quality WIFI and Bluetooth speaker, but with Aether going bust, there is no ...
0
votes
0answers
617 views
unsquashfs failed to read SquashFS file
I tried to unpack binary which is SquashFS system, the file is mtd partition copied from NAND device, Root filesystem (read-only). Actually its SquashFS version, modifyed/patched by vendor.
binwalk ...
1
vote
0answers
190 views
Can't install sasquatch tool
Ubuntu 16.04 LTS. I'm trying to install sasquatch tool (which should apply patches to the standard unsquashfs utility), but got the issue, every time build process show error in one place:
./build.sh:...
2
votes
0answers
581 views
Extracting Firmware file from Wireshark Dump
I updated a device over a firmware update software and sniffed the whole traffic with wireshark. There is a TCP Stream with ~30MB which I exported as raw data. The resulting file is Zip archived data ...
1
vote
1answer
3k views
Extracting SquashFS based filesystem
I'm trying to use binwalk to extract the firmware for the Ubiquiti Networks ER-X. Currently I've downloaded a copy of the firmware and uncompressed it. I opened the folder with the filesystem contents ...
8
votes
0answers
960 views
Firmware analysis, can't find file system
I'm TV repair tech and I've found that corrupted firmware is responsible for the failure of a large portion of the TV's I work on. I came up with the idea that if I could reverse engineer the ...
3
votes
1answer
3k views
Binwalk does not show anything when process binary
I tried use Binwalk to extract content of binary firmware image dumped from flash, but Binwalk does not show anything.
I tried commands
binwalk -Me file.bin
binwalk --dd='.*' file.bin
strings ...
1
vote
1answer
1k views
Binwalk extracted images corrupt?
I ran:
$> binwalk --dd='jpeg:jpg' file.bin
The JPGs (there are hundreds of them) are extracted but all of the JPGs experience varying levels of "corruption". Here's an example of what most of the ...
2
votes
2answers
2k views
How to unpack the Fortigate firmware?
I want to unpack the fortigate firmware - FGT_110C-v400-build0092-FORTINET.out. binwalk only gives a hint about gzip compressed data.
~/Documents# binwalk -i FGT_110C-v400-build0092-FORTINET.out
...
