Questions tagged [firmware]

Combination of executable code and data used to drive hardware devices and provide a first layer of software services prior to the operating system. Typical examples are BIOS, UEFI, the software running in a DSL router or a mobile phone.

Filter by
Sorted by
Tagged with
2 votes
1 answer
48 views

TP-Link Manual Installation

Before starting my researches, i was just curious about how my router could work. I found some posts about reversing and emulating TP-LINK routers, so i bought one. First, i successfully extracted the ...
user avatar
0 votes
0 answers
45 views

How to reverse engineer this router firmware using binwalk?

I want to modify router firmware so I can enable telnet. What steps should I take? The router is hg630v2; the firmware can be found at this link. It's Linux based. When I do binwalk --signature --term ...
user avatar
  • 1
0 votes
0 answers
13 views

Firmware-mod-kit failed with CRC update failed

hello I'm trying to modify firmware to enable telnet support when i tried to build firmware without any modification it give me these errors Firmware Mod Kit (build) 0.99, (c)2011-2013 Craig ...
user avatar
  • 1
0 votes
0 answers
28 views

Reverse engineering Powermac G4 Cube firmware

I need help. I am neither a programmer, nor an electrical engineer, but I am willing to learn if I only knew where to start. The G4 Cube was famous for having no internal audio. However I have found ...
user avatar
0 votes
0 answers
365 views

PPPoE username and password from ZTE ZXHN F680 V6

I'm trying to extract the PPPoE username and password from a ZTE ZXHN F680 V6 router. I have obtained several files from the router and can get access to other files if needed. Here is where I'm at. ...
user avatar
1 vote
0 answers
77 views

Reverse engineering firmware to CD/DVD drive to enable scrambled mode support

I am a volunteer of the redump.org project, the goal of our website is to archive game CDs in the best possible quality. Unfortunately, this site requires only DiscImageCreator to be used for CD and ...
user avatar
  • 11
1 vote
1 answer
104 views

ARM - Understanding a "base address" when reversing firmware

I've read that when reversing firmware from an embedded system it's important to get the right base address of the firmware to make sure cross references to things such as strings work when looking at ...
user avatar
0 votes
0 answers
174 views

Getting rid of a custom Shell on a LiteOS based outdoor camera

I started reversing this camera in order to get rid of the unwanted traffic it constantly does towards Chinese servers. I have a serial access to it thanks to an obvious UART port (bottom left in the ...
user avatar
  • 101
0 votes
0 answers
354 views

how to decrypt zte zxhn h108n V2.5.5_VDFT13 config.bin?

I need the root password from my router. I need to change my snr because my provider had lock it at a high value. I try to decrypt my config.bin file but no result. I try first with zte-config-utility ...
user avatar
  • 1
1 vote
0 answers
76 views

Prevention of reverse engineering of a microcontroller's firmware

What steps may I take to make it more expensive to reverse engineer a firmware I want to use on a cheap microcontroller? Options I see so far: Flood it with epoxy with quartz or metal dust to make ...
user avatar
2 votes
0 answers
56 views

Is it possible to dump firmware of a device via USB port?

I have a device which can be connected via USB port. The vendor of this device provides a tool for upgrading firmware of this device via USB port. lsusb command says that this device has following ...
user avatar
0 votes
0 answers
99 views

Extract firmware from SSD / SandForce Controller SF-2281VB1-SDC

Question Is it possible to extract the firmware from a SandForce SF-2281VB1-SDC SSD controller using JTAG? I have a bricked SSD patient and donor drive (indentical model wise). I want to clone and ...
user avatar
  • 103
0 votes
1 answer
115 views

dumping and modifying keyboard firmware

is theoretically possible to dump the keyboard firmware of a laptop, modify it and reflash it to make the keyboard works not properly ? I don't know even if the laptop keyboard has a firmware. ...
user avatar
  • 101
0 votes
0 answers
77 views

Reverse Engineering CHALLENGE

I have a BIN firmware archive file starts with 04 02 which is unknown to me what makes me sure it is an archive file is the source I got it from BINWALK and all other known tools failed to identify ...
user avatar
  • 1
0 votes
0 answers
97 views

Reverse engineering STM32F303 firmware udpate

I have an .exe file, which connects via USB to a STM32F303 peripheral with unknown firmware. The .exe is able to update the STM32 firmware via the USB. The firmware update is also provided, and its ...
user avatar
  • 21
1 vote
1 answer
122 views

Reverse compression of QDSP6 modem files

I'm trying to reverse a qdsp6 modem file but I'm stuck with the (probably) compressed segments. There is also a third compressed segment which simply uses zlib but the other two are not recognized by ...
user avatar
2 votes
1 answer
251 views

Arm custom u-boot reversing

I'm trying to reverse a custom u-boot that implements cryptography for the Kernel at runtime (the Kernel at rest is encrypted also in a flash). I can probably ask the IoT vendor to provide the ...
user avatar
  • 153
1 vote
0 answers
66 views

Bypassing unsupported android TV box!

I have an android TV box called Proximus decoder v4, anyway the android TV box is not supported anymore by the company. When I turn it on I get an update checking, you can't even cancel it, and then I ...
user avatar
0 votes
0 answers
232 views

Extract RFS (rootfs) on UBIFS NAND Dump

I am practicing (studying) hardware reverse engineering. I dumped a NAND flash (smart TV), and managed to remove OOB data and emulate NAND in my environment. I detected that NAND used UBI filesystem, ...
user avatar
0 votes
0 answers
92 views

Need Help with decryption backup config.bin file "ZTE ZXHN H168N V3.5"

I am trying to decrypt my router config.bin file.( model mentioned above). When i use zcu utility to decompress my backup to Original format it's say payload 4 .. and the key might be your serial. I ...
user avatar
0 votes
0 answers
36 views

Changing variable in firmware.bin of UVC web camera

Just to note I am complete noob, and my plan might not even be possible. If that is the case that is fine, but I like to think everything is possible and at least try. I have a UVC webcam that has ...
user avatar
0 votes
2 answers
67 views

Not Understanding the FU540 Boot Process

I'm reading the manual for the SiFive FU540-C000 trying to understand the boot process, and I'm not making sense of the initial steps after power on. I'm using MSEL = 1111 based on the recommendation ...
user avatar
0 votes
0 answers
27 views

Guess wich microcontroller own the firmware possible?

I have a collection of firmware dumps, I need to classified theme for the hw( that I have not, I have only those dumps), is there a way to guess for what microcontroller are a firmware developped only ...
user avatar
  • 1
1 vote
0 answers
37 views

I attempted to read from an Intel 87C54 microcontroller and it came up all FF's. Any way to read from this?

I'm using the popular TL866II Plus programmer to read from the chip. I see in the datasheet that it has lock bits which can disable the verify (read) function, but I'm not sure if that causes an ...
user avatar
  • 166
1 vote
0 answers
83 views

Reversing Brother Sewing Machine Firmware

Context: Taking my first stab at reverse engineering, I am trying to install firmware intended for a machine sold in a different region (EAS) to my machine (US). I believe Brother sells the same ...
user avatar
  • 11
0 votes
0 answers
57 views

How can I identify JTAG in this case and utilize it?

I'm developer and I somehow tried today to reverse engineer and take apart a hardware, just after learning that some devices have hardware debugging. First thing to try to know in my understanding of ...
user avatar
  • 179
0 votes
0 answers
109 views

Ghidra: Adding Static Register value for pcode and XREF

If a register is the same value throughout the firmware and is used as a base data pointer, is there a way of defining that value for pcode analysis and adding correct XREFs to memory locations ?
user avatar
  • 11
0 votes
0 answers
93 views

Unknown filesystem in GoPro Hero 9 firmware

I'm trying to extract the GoPro Hero 9's firmware to tweak some of the parameters. This is my first time doing any sort of reverse engineering but I'm hoping that by finding the filesystem I can ...
user avatar
  • 101
0 votes
0 answers
523 views

Mitsubishi MAC-577IF2-E WIFI controller Firmware file

I recently installed Mitsubishi AC with Mitsubishi MAC-577IF2-E Wi-Fi controller, and as always nowadays these devices communicate with Cloud servers first, then with you, which practically means you ...
user avatar
1 vote
0 answers
19 views

Unable to find the pci device mentioned in the processor datasheet

I have following intel processor 4th Generation Core Processor (Haswell U/Y). I want to check the value of PMBASE register in the processor. For that I have downloaded the processor datasheet, where I ...
user avatar
3 votes
1 answer
127 views

Fujifilm Firmware Checksum

I'm working on reverse engineering the firmware for my Fujifilm HS20EXR. I've figured out most of it, but I am currently stuck on what I am fairly certain is a checksum. If I modify it, the camera ...
user avatar
  • 71
0 votes
0 answers
81 views

Unpacking firmware of TP-LINK IPC firmware

I have some TP-LINK IPC firmware that must be reversed (as a task). But I can not unpack the .bin firmware and extract the file system. Binwalk output: 576 0x240 xz compressed data ...
user avatar
2 votes
1 answer
627 views

Disassembling ARM based Camera Firmware

I'm trying to disassemble hikvision firmware 5.5.85. I want to extract the contents of digicap.dav file. Binwalk is unable to extract the known zip files. binwalk -e digicap.dav DECIMAL ...
user avatar
  • 121
5 votes
1 answer
198 views

Would hiring a RE service be worth it?

Before I clarify my question, I will explain the project I'm working on, and what I've done so far so there will be a better understanding of what I'm trying to do. I'm trying to modify the UI of a ...
user avatar
0 votes
0 answers
191 views

Extracting files from NAND flash dump

I trying to extract files from nand flash dump (car radio player). Dump is done by desoldering and read with flash programmer.I see that there is a UBI file system, but cannot extract/mount any files. ...
user avatar
1 vote
0 answers
232 views

Firmware RE (Beginner)

I'm trying to learn RE, and I thought I'd look at some firmware that interests me. I'm looking at the Roland TD-11 drum module firmware, which is available for download from the Roland website I ...
user avatar
1 vote
0 answers
176 views

How can I flash unpacked firmware into Alcatel MiFi?

I bought Alcatel MW40V from Vodafone Shop some weeks ago and I can't access USSD Codes within Web UI. Bus 001 Device 008: ID 1bbb:0195 T & A Mobile Phones Alcatel OneTouch L850V / Telekom ...
user avatar
  • 111
1 vote
0 answers
194 views

ARM Cortex-M0 - How to either (non-intrusively) extract firmware or modify downloadable firmware (NuMicro NUC126)

As a hands-on introduction into RE, I've decided to take on a small, simple embedded device. In hindsight, it was probably a mistake. This "project" has consumed me for about 2 weeks. ...
user avatar
  • 56
0 votes
0 answers
41 views

Only some files are unpacked while firmware reversing with binwalk tool

I am reversing a firmware with binwalk. Unpacking was succeed, but I can't find my target files. (CGI files in www folder) When I connect to the web page of my router, I can see links include CGI ...
user avatar
  • 36
1 vote
0 answers
61 views

Reverse Engineering SNES adapter

A good "Hello world" for everybody here I've bought a Mayflash PC052 adapter to convert an original SNES-mini controller (CLV-202) to a USB port on PC or PS4... The thing is, this CLV-202 ...
user avatar
  • 11
-1 votes
3 answers
259 views

How to reverse *.pkg file? This is a firmware file of a router

I am a newbi for reversing engineering. I am going to reversing a firmware file. (*.pkg) I could find many tutorials for reversing *.bin, but I can't find any tutorials for reversing *.pkg file. And I ...
user avatar
3 votes
2 answers
265 views

Find the entry point in Interrupt Vector Table ARM9

I'm analyzing the firmware of a device that has the cpu ARM946E-S. It has not a file system, just assembly code and strings. I've disassembled the firmware using ida pro, but I couldn't find the entry ...
user avatar
4 votes
0 answers
437 views

How to extract sound file from a small 1MB binary

I have a bluetooth speaker which announces interface events like "connected", "powering off". I want to silence these announcements. The way I thought of doing this is to get at ...
user avatar
  • 123
1 vote
0 answers
55 views

Automotive engine management - reversing a PIN that has locked an MTX8 ECU

I'm after advice on how to identify a PIN that has been accidently entered and has locked an automotive ECU making it useless. The problem is resolvable by sending the computer back to the ...
user avatar
  • 11
1 vote
2 answers
440 views

Harman Kardon firmware reverse engineering

First of all, I'm very new to reverse engineering, but I know about hex, binary, opcodes, et cetera. I'm trying to reverse engineer a Harman Kardon firmware file, because I think there are some API ...
user avatar
1 vote
1 answer
54 views

Replacing firmware, Longshine Shinebook

Am wondering how to replace the firmware on a Longshine Shinebook (manual, firmware, more stuff). Assuming I modify the firmware files, how do I put the new version on the device? I'm guessing there ...
user avatar
  • 133
1 vote
0 answers
134 views

Nokia 105(TA-1114) Firmware analysis using Binwalk

First please forgive me if a make any mistake. i am not a primarily English speaker but I will try my best. Few days ago i started to tinkering with Nokia feature phone Nokia 105(TA-1114). I get a ...
user avatar
3 votes
2 answers
910 views

How do I extract the firmware from this bluetooth speaker board?

I have a bluetooth speaker. Infinity Fuze 100. It's a good speaker. But it has annoying messages on startup and shutdown. And for other interface events. I'd like to either get rid of them entirely, ...
user avatar
  • 123
2 votes
0 answers
94 views

How to modify checksum after making changes in Nokia 215 4G firmware?

If I change any character in the firmware file and try to flash it, it will failed. But it will successfully flashed if I changed the string with the same number of character if it's not a function. ...
user avatar
  • 21
2 votes
0 answers
327 views

How to perform full MIPS system emulation with QEMU, using the squashfs image and uBoot kernel image?

TL;DR: Need tips on emulation of MIPS-BE system using QEMU with the help of squashfs image file and uBoot Kernel image file extracted from the firmware file. Long Version: - What I have: A cheap ...
user avatar

1
2 3 4 5
9