-
Notifications
You must be signed in to change notification settings - Fork 61
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
can this tool effective identification cpu of firmware for routers and cameras? #22
Comments
A detailed analysis of each firmware would be needed to understand why the results are not good. I suppose that for example the DIR-320A1_FW121WWb03.bin file that you mention is the one that can be downloaded at https://files.dlink.com.au/products/DIR-320/REV_A/Firmware/Firmware_v1.21b03/ because I get the same results.
It seems similar to what has been analyzed about another similar product: https://openwrt.org/toh/d-link/d-link_dir-845l_rev._a1 |
I think so too. Maybe I need to test a specific executable file for decompression. Below are the results of my analysis using cpu_rec and rabin2, respectively. cpu_rec result: emba@emba:~/Desktop/cpu_rec$ python3 cpu_rec.py /home/emba/Desktop/_DIR868L_B1_FW205WWb02.bin.extracted/squashfs-root/htdocs/cgibin
/home/emba/Desktop/_DIR868L_B1_FW205WWb02.bin.extracted/squashfs-root/htdocs/cgibinfull(0x268e8) ARMel chunk(0x20000;64) ARMel rabin2 result: emba@emba:~/Desktop/_DIR868L_B1_FW205WWb02.bin.extracted/squashfs-root/htdocs$ rabin2 -I cgibin
arch arm
baddr 0x8000
binsz 157006
bintype elf
bits 32
canary false
injprot false
class ELF32
compiler GCC: (GNU) 3.3.2 20031005 (Debian prerelease) GCC: (Buildroot 2012.02) 4.5.3
flags 0x5000002
abi eabi5
crypto false
endian little
havecode true
intrp /lib/ld-uClibc.so.0
laddr 0x0
lang c
linenum false
lsyms false
machine ARM
nx true
os linux
pic false
relocs false
relro no
rpath NONE
sanitize false
static false
stripped true
subsys linux
va true
|
For this specific file, I don't think that cpu_rec is the best tool, because all information found by cpu_rec (ARM & Little-Endian) is directly visible in the ELF header. |
It seems failed
The text was updated successfully, but these errors were encountered: