Skip to main content

All Questions

Filter by
Sorted by
Tagged with
1 vote
0 answers
90 views

Firmware analysis output

I have a ZTE router "ZTE_ZXHN_H168N" and want to learn more about firmware reverse engineering. I managed to do the following so far: Dump the firmware from the SPI flash. Running strings ...
snabil's user avatar
  • 11
0 votes
0 answers
26 views

Going from NAND dump to firmware update package

I.... Have no idea what I'm doing. So, I did a full NAND dump of an Actions ATJ2257 based MP4 player (url: https://archive.org/details/eclipse-t-2810-c.-7z) and I want to recreate the ".fw" ...
qwerty keyboard's user avatar
1 vote
0 answers
660 views

How can I flash unpacked firmware into Alcatel MiFi?

I bought Alcatel MW40V from Vodafone Shop some weeks ago and I can't access USSD Codes within Web UI. Bus 001 Device 008: ID 1bbb:0195 T & A Mobile Phones Alcatel OneTouch L850V / Telekom ...
AtomX's user avatar
  • 111
4 votes
0 answers
909 views

How to extract sound file from a small 1MB binary

I have a bluetooth speaker which announces interface events like "connected", "powering off". I want to silence these announcements. The way I thought of doing this is to get at ...
Capstone's user avatar
  • 143
1 vote
0 answers
347 views

Trouble backing up rom on locked proprietary mediatek device - mt8163 chipset

I have a proprietary tablet with mediatek chipset MT8163v, and getting the factory ROM and/or scatter file is out of the question. My goal is to flash with TWRP. The device has a custom android repo ...
silencedogood's user avatar
3 votes
1 answer
258 views

Dump Headunit Software

I am a computer engineering senior and have a few quick questions i couldn't find any hits about online. I know just enough to get myself into trouble. Note: I have no specialized tools just a DMM and ...
DaCoder's user avatar
  • 31
2 votes
1 answer
398 views

How to dump firmware from ATWINC1510

I got a ATWINC-1510 based device in front of me where I want to dump the firmware / flash contents from into a bin file. I know that the IC offers an SPI interface through the pins described in the ...
cobz's user avatar
  • 121
0 votes
0 answers
177 views

How to dump firmware from an SD card?

I have an SD card that implements some strange Write-Once-Read-Many technology that I want to check the firmware of. I'm not new to reverse-engineering, but I've never dumped firmware from an SD card ...
c00000fd's user avatar
  • 1,761
1 vote
1 answer
279 views

SD card microcontroller

I have an SD card that I want to copy the firmware / memory from, my question is what pinouts do I connect to the SPI programmer and what are the commands to copy all of the firmware /memory. Thank ...
user29875's user avatar
1 vote
2 answers
1k views

Using NAND flash dump with OOB data

I have NAND flash memory dump, as a separate MTD partitions copied from NAND flash chip use built-in nanddump commands. I need to reflash some corrupted MTD partitions. In order to reflash partitions ...
minto's user avatar
  • 235
2 votes
1 answer
2k views

Dumping a NAND Flash

I am currently trying to dump the content of a NAND Flash that is part of an embedded system. The chip is a QCA4531 and the NAND Flash is a GD5F1GQ4RCYIG. The module consists of 28 Pins, 14 per side....
Ramazuri's user avatar
  • 108
1 vote
1 answer
71 views

SqashFS 3.0 file system has 40 "random" bytes of 0xFF in it

I'm looking at a firmware dump from a NAND flash chip and comparing it against another similar firmware dump I have. I am able to open one of them to see the root folder structure, however the other I ...
user29090's user avatar
1 vote
2 answers
4k views

How to read firmware from an STC microcontroller?

I have some printed circuit boards of a device that is no longer manufactured. I need to repair these boards but there is no replacement for them. I can make other boards, buy the components, but I ...
Daniel's user avatar
  • 215
4 votes
0 answers
343 views

How to perform manual flashing of a bricked device?

I bought a broken Zoom H4n audio recorder, expecting an easy repair. What I got is a little bit over my head. It isn't booting (beyond a certain point) and I can't enter the firmware update tool. I ...
baltersice's user avatar
9 votes
3 answers
11k views

Extracting a NAND flash dump with OOB data

I'm trying to extract a NAND flash dump of an old Walkman player. The dump was done by a friend and unfortunately cannot be redone because the chip was destroyed. The dump was supposed to be just user ...
Igor Skochinsky's user avatar
  • 36.9k
1 vote
3 answers
5k views

How to extract content of NVRAM file?

How to extract content from NVRAM file? NVRAM type is SPI Serial NOR Flash. NVRAM has been copied as mtdblock partition. An embedded device that run Linux v2.6.18_pro500. Linux version 2.6.18_pro500 ...
Lexx Luxx's user avatar
  • 203
0 votes
1 answer
680 views

Wiring Flash Chip to Raspberry Pi

I'm trying to wire a Winbond W25Q128FV to my Rasberry Pi Model 1B so that I can dump the firmware. I'll be using an SOIC8 clip and probe cables. Here is what I'm thinking: Flash ----- rPi CS ----- ...
Dylan Leggio's user avatar
2 votes
0 answers
902 views

Flash dump with encoded firmware

I downloaded firmware from 4MB spi flash in HDMI extender (more info here). It contains following sections: 0x00000000 – 0x00024e03 – SMEDIA02 …….456789ABCDEF (encoded – some strings suggesting ...
danman's user avatar
  • 129