Firmware analysis Website and API (JSON)
Upload firmware and run static analysis (parse firmware, grep strings, search for interesting files (conf, certs, db files...), etc.).
- Upload a new firmware
- PROFIT !
- description : test
- brand : text
- model : text
- version : text
- file :file (firmware archive (bin, zip))
Return global stats
- nb of firmwares in db
- nb of password grepped
- nb of certificates
- etc
Return 10 latests firmwares analysis
Return firmware informations (files, etc.)
Return firmware informations without files
Return firmware informations + hierarchy as string for treeeJS frontend
Download firmware
Return file informations
Download File
If file is ELF and graph=true, return a png call graph (generated by radare2)
Search firmwares for given keyword
- Radare2 from github : https://github.com/radare/radare2.git
- Binwalk from github : https://github.com/devttys0/binwalk
- rats : https://security.web.cern.ch/security/recommendations/en/codetools/rats.shtml
- graphviz
- pydot
- Django
- r2pipe
- python-magic
- squashfs-tools
- python3-openssl
- MisterCh0c (@MisterCh0c)
- Ganapati (@G4N4P4T1)
- Geoffrey (@geoffreyvdberge)