Using binwalk to analyze PLC firmware
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Newbie friendliness
- 25/100
- Issue type
- Bug
- Clarity
- Needs clarification
- Activity status
- Stale
- Domain
- embedded-iot, reverse-engineering
Research direction
Start by reproducing binwalk -Mre against the linked d450_v350.zip firmware and compare the reported LZMA regions with the extracted files. Review whether the empty or very small outputs correspond to valid firmware contents; done when extraction works for this sample or the limitation and expected handling are clearly documented.
Written by the indexing model from the issue text.
Description
I was wondering if you have any information or have ventured into this area. I understand due to the critical nature of systems that implement PLCs that typically vendors try to keep people from reverse engineering their firmware. When I run binwalk on say this firmware. This is what I got from binwalk:
DECIMAL HEXADECIMAL DESCRIPTION
--------------------------------------------------------------------------------
33131 0x816B LZMA compressed data, properties: 0xD0, dictionary size: 1048576 bytes, uncompressed size: 13510798884208640 bytes
34035 0x84F3 LZMA compressed data, properties: 0xA2, dictionary size: 33554432 bytes, uncompressed size: 2732199881 bytes
341411 0x535A3 LZMA compressed data, properties: 0xD8, dictionary size: 8388608 bytes, uncompressed size: 110500231412449280 bytes
However, when these files are extracted using -Mre, all that I get out are files that are either empty or very small.
- Dominant language
- Rust
- Stars
- 14.4k
- Forks
- 1.8k
- PR merge metrics
- No merged PRs in 30d
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from ReFirmLabs/binwalk
-
Difficulty 1/5 Under an hour Newbie friendliness 72/100
ReFirmLabs/binwalk#960 · 1 reaction ·
-
Difficulty 3/5 1-2 days Newbie friendliness 62/100
ReFirmLabs/binwalk#970 ·
-
Difficulty 3/5 1-2 days Newbie friendliness 64/100
ReFirmLabs/binwalk#963 · 1 comment ·
-
Difficulty 4/5 3-5 days Newbie friendliness 48/100
ReFirmLabs/binwalk#962 · 11 comments ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 58/100
ReFirmLabs/binwalk#961 ·
All issues in ReFirmLabs/binwalk
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 86/100
kwakseongjae/auto-hwp#319 ·
-
area:cli bug filter-quality good first issue priority:medium
Difficulty 2/5 1-3 hours Newbie friendliness 84/100
-
Difficulty 1/5 Under an hour Newbie friendliness 72/100
bevyengine/bevy#25861 ·
-
comp-datalake
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
ClickHouse/ClickHouse#121222 ·
-
enhancement remote
Difficulty 2/5 1-3 hours Newbie friendliness 68/100