/dev/ttyS0

Embedded hacking courses:

[Matt Brown @nmatt0]

Check out Moria speed through this firmware file!

[/dev/ttyS0 @devttyS0]

@nmatt0 @securefirmware this might be a useful addition to emba

[/dev/ttyS0 @devttyS0]

@nmatt0 This looks awesome! Ran it across a few firmware images I had laying around, worked great. V impressive list of extractors…does it handle known non standard implementations (thinking mostly of some older SquashFS images)?

[Matt Brown @nmatt0]

Today I'm introducing two new open source IoT firmware analysis tools:
Moria and Mithril

Moria is a firmware extraction tool just like binwalk and unblob, except for one major difference: ZERO external extractor dependencies!

No more relying on ancient and unmaintained extraction utilities with numerous bugs / patches.

EVERY filesystem extractor has been rewritten in 1st party C++ to be fast and flexible.

Mithril is moria's companion. It scans extracted filesystems for secrets and SBOM. Correlates CVEs. Syncs with NVD, EPSS and KEV datasets.

Check out my blog post where I kick the tires:
https://t.co/qBAQFPiGES

[/dev/ttyS0 @devttyS0]

@nmatt0 @FernandesUSA lol wasn’t me 🤷‍♂️

[/dev/ttyS0 @devttyS0]

Decrypt D-Link M95 router firmware:

dd if=firmware_image.bin of=enc.bin bs=512 skip=1
openssl aes-256-cbc -d -in enc.bin -out dec.bin -k 91A9A3AF2218F4EA60AC37D5835EB318

[/dev/ttyS0 @devttyS0]

Decrypt D-Link R95 router firmware:

dd if=firmware_image.bin of=enc.bin bs=512 skip=1
openssl aes-256-cbc -d -in enc.bin -out dec.bin -k BE81AE1B6F523AC7164C4FD67B6BD8FD

[/dev/ttyS0 @devttyS0]

Decrypt D-Link M36 router firmware:

dd if=firmware_image.bin of=enc.bin bs=512 skip=1
openssl aes-256-cbc -d -in enc.bin -out dec.bin -k A11E331C15CE73ABA8E06171A11D2FB6

[/dev/ttyS0 @devttyS0]

Decrypt D-Link R36 router firmware:

dd if=firmware_image.bin of=enc.bin bs=512 skip=1
openssl aes-256-cbc -d -in enc.bin -out dec.bin -k CAD1C42B11F1982FFA94B6A24C260A43

[/dev/ttyS0 @devttyS0]

@nmatt0 Can confirm. @nmatt0 has great stuff as always, and the whole embedded systems village was awesome.

[Matt Brown @nmatt0]

Embedded Systems Village has been hoppin! Come check it out if you haven't yet!

[Matt Brown @nmatt0]

Had a blast doing this podcast!!

[Kislay @whyKislay]

Discovered internal Google files inside the sandbox.
Extracted a 579MB binary too big to just print out.
Used Binwalk to unpack it and found… source code.

https://t.co/M79xvQEV7a

[EMBA Firmware Analyzer @securefirmware]

Just in time for a happy new year with better firmware analysis. Now with the enhanced binwalk decryptor available in EMBA. SBOM, known vulnerabilities, static analysis, emulation and much more (Screenshots from DIR-822 Rev C) https://t.co/Fz9BFPpTS0

[/dev/ttyS0 @devttyS0]

@pravda79 Binwalk definitely *should* handle those. Bug reports are always welcome, if you can provide a sample firmware image or link (either here or on the github page) I can take a look. Thanks!

[/dev/ttyS0 @devttyS0]

Just in time for Christmas: a repository for decrypting many encrypted D-Link firmware images. Also integrated into Binwalk for auto-magic decryption & extraction.

https://t.co/4GcTrXoFhp

[/dev/ttyS0 @devttyS0]

@GM4AJK I did, though I haven’t posted content there in some time now

[EMBA Firmware Analyzer @securefirmware]

EMBA release alert with version 1.5.1 - Rise from the dead or Binwalk is back in town.

We have a big update for all you #SBOM/#IoT/#firmware and binary analysis people out there.
EMBA is getting faster and more powerful with new binwalk v3 and more SBOM https://t.co/ILsgIakKiG

[/dev/ttyS0 @devttyS0]

@nmatt0 Nice work! :) FYI, Binwalk disables text formatting when it's not outputting to a terminal, so piping the output to `tee -` might help when using large terminal fonts for your videos.