Firmware Extraction & Analysis Suite

Firmware Extraction & Analysis Suite

Pipeline complete for analysis of firmware of devices IoT:

n
• Extraction SPI — Scripts for dump of chips SPI flash (W25Q, MX25L) using flashrom + CH341A programmer.
n
• Extraction I2C — Lectura of EEPROMs I2C with Bus Pirate o FT232H.
n
• Despacking — Wrapper on binwalk with analysis automatic: identifies filesystem (squashfs, jffs2, cramfs), extracts, and monta.
n
• Secret finder — Busca in the filesystem extracted: hardcoded passwords, API keys, certificates, SSH keys, config files.
n
• Emulation — Scripts for emulatesr firmware ARM/MIPS with QEMU user-mode and system-mode. Parcheo automatic of nvram.
n
• Diffing — Comfor dos versions of firmware for identifying patches of security appliesdos.
n