Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options answers only not deleted user 1408

Reverting (statically or dynamically) the effect of a binary packer: recovering its original structure and code by removing compression, encryption, protections features..

4 votes
Accepted

How to extract the filesystem from a I240w-A firmware

All the LZMA entries appear to be valid, and decompress to tar archives (-1 is a valid file size, and is used when the compressor doesn't know the size of the original data, such as when the data is p …
devttys0's user avatar
  • 2,714
3 votes

Windows CE + Itron RTOS image

Actually, from the strings, it looks to me like it's using eCos, not Windows CE: $ binwalk FW_ZERO_DES.bin DECIMAL HEXADECIMAL DESCRIPTION -------------------------------------------------- …
devttys0's user avatar
  • 2,714
8 votes
Accepted

Unpack Billion 5102 firmware

The output from the file utility, as you've probably guessed, is a false positive. The beginning of the firmware.bin file contains what looks to be a basic header (note the "SIG" string near the begin …
devttys0's user avatar
  • 2,714
7 votes

unpack Clear spot .bin firmware update

The CramFS image is a false positive; I doubt there would be over 1 billion files in a 5MB firmware image. It looks like your binwalk signatures are a bit old; here is the output from mine (running t …
devttys0's user avatar
  • 2,714