Questions tagged [binwalk]
The binwalk tag has no usage guidance.
31
questions
2
votes
1answer
100 views
decryption of firmware file from modem/router Speedport Plus (Sercomm not ZTE)?
Although I have no hope really I will leave this here in case someone has the ability and time to help.
This is from a modem/router widely used in countries like Germany, Greece and others from ...
0
votes
1answer
31 views
How to get PI UEFI binary when mcrypt is used?
I am playing with a dump I made from a serial flash containing the BIOS of a ultra portable whose BIOS is protected by a password. I am trying to find the password or patch the routine which check the ...
1
vote
1answer
91 views
Unable to unsquash from a FW dump
After trying to unsquash a firmware dump from a router without success, I am asking for help.
I have a router with a BCM68380 CPU. After desoldering the TOSHIBA NAND chip I dumped the firmware (link ...
1
vote
0answers
88 views
Modify bin firmware file of an old phone
I am trying to remove/disable some system apps ( Messages, Games, Radio or Calendar ) and remove/replace the boot screen from samsung E1200y.
So i start searching for the way to do that...
I used HxH ...
0
votes
0answers
37 views
binwalk not showing file descriptions (signatures) after 1st try
I have a bin file that shows a list of lzma compressed files which I extracted generically to .7z files using this format "binwalk -D "elf 32-bit lsb shared object":.so image.bin"
...
0
votes
0answers
106 views
Binwalk on flash dump yielding useless files and empty file systems
I have been investigating some routers by desoldering their nand flash and dumping them using a flash programmer.
However when I use binwalk on these dumps I end up with fragments of files mixed in ...
1
vote
1answer
44 views
Why do some firmware binaries have more than 1 file system structures
As I unpack and explore the packing structure of firmware, I am noticing that some firmware will have several file system structures. I can't seem to find any documentation as to why one device may ...
1
vote
1answer
126 views
Unpacking, modifying, repacking and flashing a firmware
I've been trying to figure out how to modify the firmware on a DVR I bought for cheap recently. The built in software isn't great and doesn't offer any option for exporting video other than plugging a ...
1
vote
1answer
127 views
Recognize binary architecture
I have binary that run on Arm Thumb cpu, in embedded devive that not running Linux.
When I tried to run bimwalk or file ,and even open it with Ida ,but they didn't find out that this binary run on ...
1
vote
0answers
957 views
Windows binwalk refuses to extract files
I'm trying to reverse engineer the firmware for an AutoDrive AD-520 dashcam. The firmware is available for download here. I've installed binwalk on windows, I can get it to read the file just fine, ...
1
vote
2answers
335 views
Repacking an embedded initramfs
I'd like to modify some of the init scripts in an initramfs that is embedded in a kernel bzImage. I know I can modify them by not changing the size of any files (e.g. by commenting out lines, and ...
1
vote
0answers
146 views
No false positive on binwalk
I have the same problem from my previous post but this time, I don't think it's the same culprit again as I have solved the problems.
This time, I'm very sure I had extracted the firmware. On my ...
1
vote
0answers
289 views
Analyzing firmware image (eCos with YAFFS)
I'm trying to apply some of the practices I learn in class and online and reverse engineer the firmware of a Chinese dash camera.
I've downloaded the firmware from their website (Smart dash camera: ...
2
votes
0answers
561 views
How to proceed after running binwalk on this firmware?
I'm trying to access the firmware from the .bin in this archive: http://mydjiflight.dji.com/file/links/OSMO_ACTION_V17020_20191203_ZIP
So far I've used binwalk and gotten the following output:
...
1
vote
0answers
43 views
Possibly infected image
Long story short I'v downloaded a template for my website and instead of images it has the .html files included, and at the beginning those html files do include PNG IHDR , and they are being loaded ...
1
vote
0answers
118 views
Extract files of a SquashFS Filesystem
I already asked a similar question but after a deeper analysis of the filesystem I found out that I misunderstood the problem and that's why I decided to delete the old question and make a new one.
I ...
3
votes
0answers
156 views
Blank binwalk and binvis.io
I've been trying to extract a Bluetooth door lock's firmware. When I tried extracting it, I got an empty output.
I then found a post which I thought would help me but when I tried using binvis.io, ...
3
votes
0answers
265 views
Extracting specific files from a unknown archive file format
I'm trying to extract some binary blobs from a unknown archive format. (*.pakz).
I know this archive contains some .xtreme binary files that are the files I'm looking for. My goal is to extract those ...
1
vote
2answers
714 views
CSR DFU File Format
I am trying to reverse engineer the firmware for my JBL Flip 3 speaker. I have obtained a DFU file for the device online but am unsure as to how much of the firmware is included. My first question ...
3
votes
1answer
691 views
Problem with analyzing a JFFS2 Filesystem
I extracted the content of a NAND Flash and analyzed it with binwalk.
Binwalk showed me that the dump contains a big endian JFFS2 filesystem. My next step was extracting the files into a directory. To ...
0
votes
1answer
1k views
Binwalk to Extract Firmware is not working for me
I'm trying to extract code from Yuneec Drone Firmware and I've run into some issues. Currently when I run binwalk agains the file, I get the following issues:
binwalk autopilot.yuneec.bin
DECIMAL ...
2
votes
0answers
584 views
Extracting firmware image from binary
I have firmware file in .bin format, but I need get firmware.img image file and Kernel uImage file for reflashing bricked device. How can I get these parts?
I used Binwalk to extract content, ...
3
votes
2answers
426 views
Reverse Engineering Firmware Aether Cone
I have been trying to work out if its possible to reverse engineer the firmware for the Aether Cone. This is a good sound quality WIFI and Bluetooth speaker, but with Aether going bust, there is no ...
1
vote
0answers
433 views
unsquashfs failed to read SquashFS file
I tried to unpack binary which is SquashFS system, the file is mtd partition copied from NAND device, Root filesystem (read-only). Actually its SquashFS version, modifyed/patched by vendor.
binwalk ...
1
vote
0answers
105 views
Can't install sasquatch tool
Ubuntu 16.04 LTS. I'm trying to install sasquatch tool (which should apply patches to the standard unsquashfs utility), but got the issue, every time build process show error in one place:
./build.sh:...
2
votes
0answers
349 views
Extracting Firmware file from Wireshark Dump
I updated a device over a firmware update software and sniffed the whole traffic with wireshark. There is a TCP Stream with ~30MB which I exported as raw data. The resulting file is Zip archived data ...
1
vote
1answer
2k views
Extracting SquashFS based filesystem
I'm trying to use binwalk to extract the firmware for the Ubiquiti Networks ER-X. Currently I've downloaded a copy of the firmware and uncompressed it. I opened the folder with the filesystem contents ...
8
votes
0answers
719 views
Firmware analysis, can't find file system
I'm TV repair tech and I've found that corrupted firmware is responsible for the failure of a large portion of the TV's I work on. I came up with the idea that if I could reverse engineer the ...
3
votes
1answer
2k views
Binwalk does not show anything when process binary
I tried use Binwalk to extract content of binary firmware image dumped from flash, but Binwalk does not show anything.
I tried commands
binwalk -Me file.bin
binwalk --dd='.*' file.bin
strings ...
1
vote
1answer
1k views
Binwalk extracted images corrupt?
I ran:
$> binwalk --dd='jpeg:jpg' file.bin
The JPGs (there are hundreds of them) are extracted but all of the JPGs experience varying levels of "corruption". Here's an example of what most of the ...
2
votes
2answers
1k views
How to unpack the Fortigate firmware?
I want to unpack the fortigate firmware - FGT_110C-v400-build0092-FORTINET.out. binwalk only gives a hint about gzip compressed data.
~/Documents# binwalk -i FGT_110C-v400-build0092-FORTINET.out
...
