Questions tagged [binwalk]
The binwalk tag has no usage guidance.
52
questions
0
votes
0
answers
57
views
Hello Watch 3+ firmware extracting
I have a firmware file of Hello Watch 3+ smart watch. I want to customize this firmware. I tried binwalk but no result. I am trying reverse engineering for the first time. Can you help me?
$ binwalk -...
2
votes
1
answer
89
views
Unix system with windows-style registry
When trying to determine the filesystem of a firmware image using binwalk, I encountered a strange combination.
The binwalk is returning a lot of Unix paths, but some of them contain a typical windows-...
0
votes
0
answers
148
views
Extract plain database from a large file based on binwalk results
I want to extract a plain SQL database from a file which is used by a software (CTF). The target is a file with .db extension. The file itself doesn't have a signature and file command doesn't provide ...
- 1
2
votes
1
answer
141
views
Decode a Windows CE nand dump
I am trying to decode and extract filesystem of NAND dump from broken device. Dump should't contain OOB. I tried to use eimgfs, but it didn't give any result.
Any suggestions please, what am I doing ...
- 21
2
votes
0
answers
148
views
binwalk gives an endless list of files
I am running binwalk -B image.bin on an 8MB firmware that I dumped from an MStar MSC313e based ip camera. The binwalk output is longer than I would expect. Could they be mostly false positives?
I have ...
- 131
2
votes
0
answers
647
views
Please help identify which type of CPU architecture is used on obscure portable media players
I am trying to reverse engineer a media player with obscure SigmaTel SoCs just for fun but I didn't find very useful information.
As far as I don't know exactly what CPU architecture is used on these ...
- 21
4
votes
1
answer
173
views
Mickey Mouse toy bin file analysis
I am trying to reverse engineer a Mickey Mouse toy just for fun but I am stuck.
The toy has several buttons that play various phrases and songs.
My aim was to see if I can read those songs from the ...
5
votes
1
answer
134
views
Zlib structure inside a GCC static library
I'm trying to analyze a GCC static library which is a part of a commercial software.
First, I used IDA Pro to analyze entire Lib file, but it could find only object files and was unable to disassemble ...
- 151
2
votes
0
answers
133
views
Assistance with dumped firmware image
I need some assistance in reverse engineering this dumped nor flash image.
binwalk yields this after norflash has been dumped (removed the flash chip, dumped it with CH341a and flashrom)
DECIMAL ...
- 21
3
votes
0
answers
144
views
rooting D-link DIR-x5460 - Weird Firmware
I have a D-link DIR-X5460 and I'm trying to get a shell on it.
I connected to the UART interface and tried some default passwords, but none work.
I downloaded the FW from D-link's website, decrypted ...
- 31
2
votes
1
answer
574
views
Trying to reverse a bin file
I'm trying to reverser a bin file with Ghidra, without success for the moment, I can't find any functions in the decompiled file.
he bin file is for an ARM 32bits, I'm pretty sure this is an stm32, so ...
- 131
2
votes
0
answers
262
views
.bin firmware Standalone Binwalk returns garbage, Binwalk -I returns something but seems corrupted. Binwalk -X returns hundreds of raw deflate streams
As the title says I have the firmware of the WAX214 wifi access point. The firmware is actively preventing me from using the full available functionality of the device so I am trying to reverse it to ...
- 21
2
votes
1
answer
160
views
Can an OpenWrt FIT kernel be virtualized in qemu?
I have a router I'd like to virtualize in order to do some dynamic analysis.
I could virtualize individual binaries with qemu, but I'd like to have the whole ecosystem up and running.
I'll start here:
...
- 105
4
votes
1
answer
861
views
Deciphering the format of an unknown file
I am attempting to discover the exact format/encoding of a file. These files stem from closed-source analysis software we use on a daily basis. I would like to obtain the format in order to create an ...
- 41
2
votes
0
answers
133
views
Edit Squashfs filesystem in flash memory
I have read Flash memory and analyze with binwalk and find out Squashfs that I can extract with dd and open with unsquashfs .
When I open this FS I want to add some file into this FS and edit some ...
0
votes
0
answers
491
views
Extract smartwatch firmware bin file
I'm trying to extract files from a bin file that's the firmware of a smartwatch.
I tried using
binwalk -Mre firmware.bin
but got no files, this is the result:
How should I extract/modify this bin ...
- 1
3
votes
2
answers
2k
views
Disassembling ARM based Camera Firmware
I'm trying to disassemble hikvision firmware 5.5.85. I want to extract the contents of digicap.dav file.
Binwalk is unable to extract the known zip files.
binwalk -e digicap.dav
DECIMAL ...
- 131
1
vote
0
answers
420
views
Firmware RE (Beginner)
I'm trying to learn RE, and I thought I'd look at some firmware that interests me. I'm looking at the Roland TD-11 drum module firmware, which is available for download from the Roland website
I ...
- 11
2
votes
2
answers
1k
views
Harman Kardon firmware reverse engineering
First of all, I'm very new to reverse engineering, but I know about hex, binary, opcodes, et cetera.
I'm trying to reverse engineer a Harman Kardon firmware file, because I think there are some API ...
- 23
2
votes
0
answers
342
views
Nokia 105(TA-1114) Firmware analysis using Binwalk
First please forgive me if a make any mistake. i am not a primarily English speaker but I will try my best.
Few days ago i started to tinkering with Nokia feature phone Nokia 105(TA-1114). I get a ...
2
votes
1
answer
1k
views
how to extract this firmware .img?
how to extract this firmware .img?!?
https://files.fm/u/bhgbk336r
w/ binwalk i've this output:
DECIMAL HEXADECIMAL DESCRIPTION
---------------------------------------------------------------...
- 21
0
votes
1
answer
178
views
Grundfos Firmware
I am trying to understand the firmware of a Grundfos CIM 500 product.
The CIM 500 is a control module for grundfos pumps which uses a web interface.
From binwalk I have found that it is running eCos, ...
0
votes
1
answer
2k
views
decryption of firmware file from modem/router Speedport Plus (Sercomm not ZTE)? [closed]
Although I have no hope really I will leave this here in case someone has the ability and time to help.
This is from a modem/router widely used in countries like Germany, Greece and others from ...
- 9
0
votes
1
answer
461
views
How to get PI UEFI binary when mcrypt is used?
I am playing with a dump I made from a serial flash containing the BIOS of a ultra portable whose BIOS is protected by a password. I am trying to find the password or patch the routine which check the ...
- 43
5
votes
2
answers
761
views
Unable to unsquash from a FW dump
After trying to unsquash a firmware dump from a router without success, I am asking for help.
I have a router with a BCM68380 CPU. After desoldering the TOSHIBA NAND chip I dumped the firmware (link ...
- 51
3
votes
0
answers
470
views
Modify bin firmware file of an old phone
I am trying to remove/disable some system apps ( Messages, Games, Radio or Calendar ) and remove/replace the boot screen from samsung E1200y.
So i start searching for the way to do that...
I used HxH ...
- 53
0
votes
0
answers
701
views
Binwalk on flash dump yielding useless files and empty file systems
I have been investigating some routers by desoldering their nand flash and dumping them using a flash programmer.
However when I use binwalk on these dumps I end up with fragments of files mixed in ...
1
vote
1
answer
96
views
Why do some firmware binaries have more than 1 file system structures
As I unpack and explore the packing structure of firmware, I am noticing that some firmware will have several file system structures. I can't seem to find any documentation as to why one device may ...
- 123
1
vote
1
answer
1k
views
Unpacking, modifying, repacking and flashing a firmware
I've been trying to figure out how to modify the firmware on a DVR I bought for cheap recently. The built in software isn't great and doesn't offer any option for exporting video other than plugging a ...
- 113
1
vote
1
answer
1k
views
Recognize binary architecture
I have binary that run on Arm Thumb cpu, in embedded devive that not running Linux.
When I tried to run bimwalk or file ,and even open it with Ida ,but they didn't find out that this binary run on ...
1
vote
0
answers
2k
views
Windows binwalk refuses to extract files
I'm trying to reverse engineer the firmware for an AutoDrive AD-520 dashcam. The firmware is available for download here. I've installed binwalk on windows, I can get it to read the file just fine, ...
- 111
2
votes
2
answers
1k
views
Repacking an embedded initramfs
I'd like to modify some of the init scripts in an initramfs that is embedded in a kernel bzImage. I know I can modify them by not changing the size of any files (e.g. by commenting out lines, and ...
- 21
1
vote
0
answers
322
views
No false positive on binwalk
I have the same problem from my previous post but this time, I don't think it's the same culprit again as I have solved the problems.
This time, I'm very sure I had extracted the firmware. On my ...
- 63
1
vote
0
answers
1k
views
Analyzing firmware image (eCos with YAFFS)
I'm trying to apply some of the practices I learn in class and online and reverse engineer the firmware of a Chinese dash camera.
I've downloaded the firmware from their website (Smart dash camera: ...
- 133
2
votes
0
answers
3k
views
How to proceed after running binwalk on this firmware?
I'm trying to access the firmware from the .bin in this archive: http://mydjiflight.dji.com/file/links/OSMO_ACTION_V17020_20191203_ZIP
So far I've used binwalk and gotten the following output:
...
- 1,830
2
votes
0
answers
50
views
Possibly infected image
Long story short I'v downloaded a template for my website and instead of images it has the .html files included, and at the beginning those html files do include PNG IHDR , and they are being loaded ...
1
vote
0
answers
760
views
Extract files of a SquashFS Filesystem
I already asked a similar question but after a deeper analysis of the filesystem I found out that I misunderstood the problem and that's why I decided to delete the old question and make a new one.
I ...
- 108
3
votes
0
answers
320
views
Blank binwalk and binvis.io
I've been trying to extract a Bluetooth door lock's firmware. When I tried extracting it, I got an empty output.
I then found a post which I thought would help me but when I tried using binvis.io, ...
- 63
3
votes
0
answers
1k
views
Extracting specific files from a unknown archive file format
I'm trying to extract some binary blobs from a unknown archive format. (*.pakz).
I know this archive contains some .xtreme binary files that are the files I'm looking for. My goal is to extract those ...
- 131
1
vote
3
answers
2k
views
CSR DFU File Format
I am trying to reverse engineer the firmware for my JBL Flip 3 speaker. I have obtained a DFU file for the device online but am unsure as to how much of the firmware is included. My first question ...
- 368
2
votes
1
answer
3k
views
Problem with analyzing a JFFS2 Filesystem
I extracted the content of a NAND Flash and analyzed it with binwalk.
Binwalk showed me that the dump contains a big endian JFFS2 filesystem. My next step was extracting the files into a directory. To ...
- 108
0
votes
1
answer
5k
views
Binwalk to Extract Firmware is not working for me
I'm trying to extract code from Yuneec Drone Firmware and I've run into some issues. Currently when I run binwalk agains the file, I get the following issues:
binwalk autopilot.yuneec.bin
DECIMAL ...
- 11
2
votes
0
answers
1k
views
Extracting firmware image from binary
I have firmware file in .bin format, but I need get firmware.img image file and Kernel uImage file for reflashing bricked device. How can I get these parts?
I used Binwalk to extract content, ...
- 215
4
votes
2
answers
918
views
Reverse Engineering Firmware Aether Cone
I have been trying to work out if its possible to reverse engineer the firmware for the Aether Cone. This is a good sound quality WIFI and Bluetooth speaker, but with Aether going bust, there is no ...
- 41
0
votes
0
answers
999
views
unsquashfs failed to read SquashFS file
I tried to unpack binary which is SquashFS system, the file is mtd partition copied from NAND device, Root filesystem (read-only). Actually its SquashFS version, modifyed/patched by vendor.
binwalk ...
- 215
1
vote
0
answers
478
views
Can't install sasquatch tool
Ubuntu 16.04 LTS. I'm trying to install sasquatch tool (which should apply patches to the standard unsquashfs utility), but got the issue, every time build process show error in one place:
./build.sh:...
- 215
2
votes
0
answers
1k
views
Extracting Firmware file from Wireshark Dump
I updated a device over a firmware update software and sniffed the whole traffic with wireshark. There is a TCP Stream with ~30MB which I exported as raw data. The resulting file is Zip archived data ...
- 21
1
vote
1
answer
6k
views
Extracting SquashFS based filesystem
I'm trying to use binwalk to extract the firmware for the Ubiquiti Networks ER-X. Currently I've downloaded a copy of the firmware and uncompressed it. I opened the folder with the filesystem contents ...
- 105
9
votes
0
answers
1k
views
Firmware analysis, can't find file system
I'm TV repair tech and I've found that corrupted firmware is responsible for the failure of a large portion of the TV's I work on. I came up with the idea that if I could reverse engineer the ...
- 91
3
votes
1
answer
4k
views
Binwalk does not show anything when process binary
I tried use Binwalk to extract content of binary firmware image dumped from flash, but Binwalk does not show anything.
I tried commands
binwalk -Me file.bin
binwalk --dd='.*' file.bin
strings ...
- 215