@devttyS0i
iAccount based inUnited States
About this account
- Account based in
- United States
- Connected via
- United States App Store
Account-level information from X, not a live location or the device used for a specific post.
Embedded hacking courses: https://nitter.cf/t.co/OgxN50zWNV
Joined December 2010
- Tweets1.9K
- Following107
- Followers7.7K
- Likes1.1K
/dev/ttyS0 retweeted
Today I'm introducing two new open source IoT firmware analysis tools:
Moria and Mithril
Moria is a firmware extraction tool just like binwalk and unblob, except for one major difference: ZERO external extractor dependencies!
No more relying on ancient and unmaintained extraction utilities with numerous bugs / patches.
EVERY filesystem extractor has been rewritten in 1st party C++ to be fast and flexible.
Mithril is moria's companion. It scans extracted filesystems for secrets and SBOM. Correlates CVEs. Syncs with NVD, EPSS and KEV datasets.
Check out my blog post where I kick the tires:
brownfinesecurity.com/blog/i…
Decrypt D-Link M95 router firmware:
dd if=firmware_image.bin of=enc.bin bs=512 skip=1
openssl aes-256-cbc -d -in enc.bin -out dec.bin -k 91A9A3AF2218F4EA60AC37D5835EB318
Decrypt D-Link R95 router firmware:
dd if=firmware_image.bin of=enc.bin bs=512 skip=1
openssl aes-256-cbc -d -in enc.bin -out dec.bin -k BE81AE1B6F523AC7164C4FD67B6BD8FD
Decrypt D-Link M36 router firmware:
dd if=firmware_image.bin of=enc.bin bs=512 skip=1
openssl aes-256-cbc -d -in enc.bin -out dec.bin -k A11E331C15CE73ABA8E06171A11D2FB6
Decrypt D-Link R36 router firmware:
dd if=firmware_image.bin of=enc.bin bs=512 skip=1
openssl aes-256-cbc -d -in enc.bin -out dec.bin -k CAD1C42B11F1982FFA94B6A24C260A43
/dev/ttyS0 retweeted
Had a blast doing this podcast!!
Replying to @nmatt0
@nmatt0 is a hardware and #IoT security researcher. He joins Chris to talk about best practices for securing hardware that talks to the internet and share stories of products that didn't pass muster.
theamphour.com/698-hardware-…
/dev/ttyS0 retweeted
Discovered internal Google files inside the sandbox.
Extracted a 579MB binary too big to just print out.
Used Binwalk to unpack it and found… source code.
linkedin.com/posts/kislayy_h…
/dev/ttyS0 retweeted
Just in time for a happy new year with better firmware analysis. Now with the enhanced binwalk decryptor available in EMBA. SBOM, known vulnerabilities, static analysis, emulation and much more (Screenshots from DIR-822 Rev C) github.com/e-m-b-a/emba
Just in time for Christmas: a repository for decrypting many encrypted D-Link firmware images. Also integrated into Binwalk for auto-magic decryption & extraction.
github.com/devttys0/delink
Just in time for Christmas: a repository for decrypting many encrypted D-Link firmware images. Also integrated into Binwalk for auto-magic decryption & extraction.
github.com/devttys0/delink
/dev/ttyS0 retweeted
EMBA release alert with version 1.5.1 - Rise from the dead or Binwalk is back in town.
We have a big update for all you #SBOM/#IoT/#firmware and binary analysis people out there.
EMBA is getting faster and more powerful with new binwalk v3 and more SBOM github.com/e-m-b-a/emba/rele…
/dev/ttyS0 retweeted
making progress ... say hi to all new binwalk in EMBA
Looks as it is time to start with some binwalk v3 integration into EMBA. First run is binwalk v2, 2nd run is v3 ... great work @devttyS0
/dev/ttyS0 retweeted
#BHMEA24 is finally happening… come to the EMBA Arsenal session tomorrow
/dev/ttyS0 retweeted
Finally got some real excuse to play with the new Rust rewrite of Binwalk (v3). It is absurdly faster in most tasks, to the point that I had to verify if my batch is really running and finishing tasks or just throwing mishandled errors.
Happy Veteran's Day! 🇺🇸
D-Link E15 firmware decryption:
openssl aes-128-cbc -in enc.bin -out dec.bin -d -md sha256 -k 044b4e59846ecee953662ff2238fcc23
Decrypt D-Link DIR-850L B1 firmware version 2.20. I should create a repository for these.
openssl aes-256-cbc -nopad -d -in encrypted.bin -out decrypted.bin -K 0721010d2e79773a283633570f5a710b4340160f442b3d39317a66461a195b10 -iv 3b1d064e2f7f633003295a2d13660942
/dev/ttyS0 retweeted
Can't wait to merge the new SBOM stuff into the EMBA master ... now with dependencies and much more included
Decrypt D-Link DAP-1665 firmware v2.03 and later:
openssl aes-256-cbc -nopad -d -in encrypted.bin -out decrypted.bin -K 3305302d3e4d46201e255424565a4e45445016135f5f506a4d6c06385e181926 -iv 1104231c5f05053d1a2331120846654d