Using binwalk to analyze PLC firmware
See original GitHub issueI was wondering if you have any information or have ventured into this area. I understand due to the critical nature of systems that implement PLCs that typically vendors try to keep people from reverse engineering their firmware. When I run binwalk on say this firmware. This is what I got from binwalk:
DECIMAL HEXADECIMAL DESCRIPTION
--------------------------------------------------------------------------------
33131 0x816B LZMA compressed data, properties: 0xD0, dictionary size: 1048576 bytes, uncompressed size: 13510798884208640 bytes
34035 0x84F3 LZMA compressed data, properties: 0xA2, dictionary size: 33554432 bytes, uncompressed size: 2732199881 bytes
341411 0x535A3 LZMA compressed data, properties: 0xD8, dictionary size: 8388608 bytes, uncompressed size: 110500231412449280 bytes
However, when these files are extracted using -Mre, all that I get out are files that are either empty or very small.
Issue Analytics
- State:
- Created 6 years ago
- Comments:7
Top Results From Across the Web
Analyzing firmware image using Binwalk | by Nishant Sharma
Binwalk is an open-source tool to analyze, reverse engineer, and extracting firmware images. It is written in Python.
Read more >Short Tutorial: Firmware Analysis Tool Binwalk [Updated 2022]
Use : Analyze and extract firmware images and help in identifying code, files, and other information embedded in the binary image of firmware....
Read more >Embedded Devices Security and Firmware Reverse ...
binwalk – Binwalk is a firmware analysis tool designed to assist in the analysis, extraction, and reverse en- gineering of firmware images and...
Read more >Towards Firmware Analysis of Industrial Internet of Things ( ...
tools such as OpenPLC, firmadyne, and QEMU to uncover hidden vulnerabilities, find ways to mitigate ... tomated firmware analysis on embedded systems, In-....
Read more >Firmware Extraction Using BinWalk - YouTube
Firmware Extraction Using BinWalk | Firmware Analysis by LearninglynkLearningLynks India Pvt Ltd is Corporate training center in India.
Read more >Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start FreeTop Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Top GitHub Comments
Without knowing the architecture, IDA isn’t going to be much help. I haven’t used it, but you might try cpu_rec; it claims to be able to identify a wide variety of architectures by analyzing the raw binary data.
I tried running cpu_rect at it, and it’s giving me that it’s seeing SuperH architecture. Never heard of it, but it makes sense considering that the company is Automation Direct and SuperH was developed by Hitachi. Now to find a disassembler for it.