/dev/ttyS0

Embedded hacking courses:

[/dev/ttyS0 @devttyS0]

@nmatt0 Can confirm. @nmatt0 has great stuff as always, and the whole embedded systems village was awesome.

[Matt Brown @nmatt0]

Embedded Systems Village has been hoppin! Come check it out if you haven't yet!

[Matt Brown @nmatt0]

Had a blast doing this podcast!!

[Kislay @whyKislay]

Discovered internal Google files inside the sandbox.
Extracted a 579MB binary too big to just print out.
Used Binwalk to unpack it and found… source code.

https://t.co/M79xvQEV7a

[EMBA Firmware Analyzer @securefirmware]

Just in time for a happy new year with better firmware analysis. Now with the enhanced binwalk decryptor available in EMBA. SBOM, known vulnerabilities, static analysis, emulation and much more (Screenshots from DIR-822 Rev C) https://t.co/Fz9BFPpTS0

[/dev/ttyS0 @devttyS0]

@pravda79 Binwalk definitely *should* handle those. Bug reports are always welcome, if you can provide a sample firmware image or link (either here or on the github page) I can take a look. Thanks!

[/dev/ttyS0 @devttyS0]

Just in time for Christmas: a repository for decrypting many encrypted D-Link firmware images. Also integrated into Binwalk for auto-magic decryption & extraction.

https://t.co/4GcTrXoFhp

[/dev/ttyS0 @devttyS0]

@GM4AJK I did, though I haven’t posted content there in some time now

[/dev/ttyS0 @devttyS0]

@pravda79 lol that’s the main purpose of binwalk, what binary blob(s) are you referring to? unblob is good, it does some things binwalk doesn’t (and ice-versa), I keep both tools installed on my system for RE work.

[EMBA Firmware Analyzer @securefirmware]

EMBA release alert with version 1.5.1 - Rise from the dead or Binwalk is back in town.

We have a big update for all you #SBOM/#IoT/#firmware and binary analysis people out there.
EMBA is getting faster and more powerful with new binwalk v3 and more SBOM https://t.co/ILsgIakKiG

[/dev/ttyS0 @devttyS0]

@nmatt0 Nice work! :) FYI, Binwalk disables text formatting when it's not outputting to a terminal, so piping the output to `tee -` might help when using large terminal fonts for your videos.

[EMBA Firmware Analyzer @securefirmware]

making progress ... say hi to all new binwalk in EMBA

[/dev/ttyS0 @devttyS0]

@braincode Interesting, carving out the SquashFS images and running unsquashfs manually provides a partial extraction, but encounters a decompression failure part-way through.

[/dev/ttyS0 @devttyS0]

Decrypt D-Link DIR-850L B1 firmware version 2.20. I should create a repository for these.

openssl aes-256-cbc -nopad -d -in encrypted.bin -out decrypted.bin -K 0721010d2e79773a283633570f5a710b4340160f442b3d39317a66461a195b10 -iv 3b1d064e2f7f633003295a2d13660942

[/dev/ttyS0 @devttyS0]

@braincode I don't, but maybe I should create one. :) Interesting about the SquashFS image, was the flash chip NAND perchance? Could be an issue with OOB/spare data in the raw flash dump.

[EMBA Firmware Analyzer @securefirmware]

#BHMEA24 is finally happening… come to the EMBA Arsenal session tomorrow

[Hamid Kashfi @hkashfi]

Finally got some real excuse to play with the new Rust rewrite of Binwalk (v3). It is absurdly faster in most tasks, to the point that I had to verify if my batch is really running and finishing tasks or just throwing mishandled errors.

[/dev/ttyS0 @devttyS0]

@sundhaug92 That one was a bit trickier than the others. Required hardware access + an exploit to pop a root shell. :)

[/dev/ttyS0 @devttyS0]

Happy Veteran's Day! 🇺🇸

D-Link E15 firmware decryption:

openssl aes-128-cbc -in enc.bin -out dec.bin -d -md sha256 -k 044b4e59846ecee953662ff2238fcc23