ASK: Reverse Engineering Router Firmware YAFFS

Beranda

...

Linux dan OS Selain Microsoft & Mac
ASK: Reverse Engineering Router Firmware YAFFS

mentheleng

28-09-2017 11:41

ASK: Reverse Engineering Router Firmware YAFFS

Misi para mastah...
Ane punya router merk Tenda, model F3.
Ane pengen ganti device name, aslinya "Tenda".
Tanya om gugel, ketemu ama istilah di atas.
Chipset router pakai Broadcom.
BIN/firmware nya TRX header.
Ane udah extract firmwarenya, ketemu info begini:

Spoiler for firmware:

Code:



DECIMAL HEXADECIMAL DESCRIPTION

--------------------------------------------------------------------------------

120 0x78 eCos kernel exception handler, architecture: MIPSEL, exception vector table base address: 0x80000200

256 0x100 eCos kernel exception handler, architecture: MIPSEL, exception vector table base address: 0x80000200

2067052 0x1F8A6C Base64 standard index table

2072348 0x1F9F1C eCos RTOS string reference: "ecos_name"

2072360 0x1F9F28 eCos RTOS string reference: "ecos"

2073785 0x1FA4B9 eCos RTOS string reference: "eCos Router/AP %s "

2075260 0x1FAA7C Unix path: /home/work/workspace/ECOSV1.1/src/router/shared/nvparse.c

2075281 0x1FAA91 eCos RTOS string reference: "ECOSV1.1/src/router/shared/nvparse.c"

2083817 0x1FCBE9 eCos RTOS string reference: "ECOSV1.1/src/bcmcrypto/bn.c"

2084256 0x1FCDA0 SHA256 hash constants, little endian

2161589 0x20FBB5 Neighborly text, "neighbor report measurement requestd]"

2184728 0x215618 Unix path: /home/work/workspace/ECOSV1.1/src/router/nas/nas_wksp.c

2184749 0x21562D eCos RTOS string reference: "ECOSV1.1/src/router/nas/nas_wksp.c"

2185032 0x215748 Unix path: /home/work/workspace/ECOSV1.1/src/router/nas/nas_wksp_radius.c

2185053 0x21575D eCos RTOS string reference: "ECOSV1.1/src/router/nas/nas_wksp_radius.c"

2197460 0x2187D4 Unix path: /dev/net/ppp/ppp%d

2205660 0x21A7DC Base64 standard index table

2211080 0x21BD08 Unix path: /home/work/workspace/ECOSV1.1/src/../src/router/libbcm/bcmgpio.c

2211101 0x21BD1D eCos RTOS string reference: "ECOSV1.1/src/../src/router/libbcm/bcmgpio.c"

2211245 0x21BDAD eCos RTOS string reference: "ECOSV1.1/src/../src/wps/common/shared/slist.c"

2213168 0x21C530 Base64 standard index table

2214884 0x21CBE4 eCos RTOS string reference: "ECOS"

2217000 0x21D428 XML document, version: "1.0"

2217820 0x21D75C XML document, version: "1.0"

2219335 0x21DD47 HTML document footer

2220108 0x21E04C HTML document footer

2220216 0x21E0B8 HTML document header

2220936 0x21E388 HTML document header

2221043 0x21E3F3 HTML document footer

2221068 0x21E40C eCos RTOS string reference: "ecos_pw=%s:language=%s; path=/"

2221168 0x21E470 HTML document header

2221328 0x21E510 HTML document footer

2223940 0x21EF44 eCos RTOS string reference: "ecos_pw="

2320336 0x2367D0 PC bitmap, OS/2 1.x format,, 0 x 4

2322550 0x237076 Boot section Start 0x17 End 0x10000

2325818 0x237D3A Boot section Start 0x2A End 0x0

2331874 0x2394E2 Boot section Start 0x14 End 0x10000

2331994 0x23955A Boot section Start 0x14 End 0x10000

2332134 0x2395E6 Boot section Start 0x14 End 0x10000

2332214 0x239636 Boot section Start 0x14 End 0x10000

2372076 0x2431EC CRC32 polynomial table, little endian

2380456 0x2452A8 eCos RTOS string reference: "eCos_node"

2410152 0x24C6A8 XML document, version: "1.0"

2413196 0x24D28C XML document, version: "1.0"

2414168 0x24D658 XML document, version: "1.0"

2420160 0x24EDC0 XML document, version: "1.0"

2430640 0x2516B0 XML document, version: "1.0"

2432372 0x251D74 XML document, version: "1.0"

2616701 0x27ED7D Copyright string: "Copyright 2013 REasy Foundation, Inc. and other contributors"

2699150 0x292F8E HTML document header

2699156 0x292F94 HTML document footer

2699857 0x293251 HTML document header

2699863 0x293257 HTML document footer

2702817 0x293DE1 Unix path: /./b/../c") ==> "http://test.com/a/c"

2702886 0x293E26 Unix path: /a/b/./c/./d ==> /a/b/c/d

2702954 0x293E6A Unix path: /b/c/../../d ==> a/b/../d ==> a/d

2705904 0x2949F0 Unix path: /msdn.microsoft.com/en-us/library/ms536429(VS.85).aspx

2706595 0x294CA3 Unix path: /developer.mozilla.org/en/HTML/Element/link#Stylesheet_load_events

2734009 0x29B7B9 Base64 standard index table

2744760 0x29E1B8 Copyright string: "Copyright 2013 Scott Jehl"

2744811 0x29E1EB Unix path: /github.com/scottjehl/Respond/blob/master/LICENSE-MIT

2749122 0x29F2C2 Copyright string: "Copyright 2014 ET.W"

2754684 0x2A087C Copyright string: "Copyright 2013 reasy Foundation and other contributors"

2758969 0x2A1939 Copyright string: "Copyright 2013 reasy Foundation and other contributors"

2765757 0x2A33BD Copyright string: "Copyright 2013 reasy Foundation and other contributors"

2774217 0x2A54C9 Copyright string: "Copyright 2013 reasy Foundation and other contributors"

2775334 0x2A5926 Copyright string: "Copyright 2013 reasy Foundation and other contributors"

2782030 0x2A734E Copyright string: "Copyright 2013 reasy Foundation and other contributors"

2892285 0x2C21FD HTML document header

2895804 0x2C2FBC HTML document footer

3259985 0x31BE51 HTML document header

3266187 0x31D68B HTML document footer

3287860 0x322B34 XML document, version: "1.0"

3287952 0x322B90 Unix path: /www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd" >

3341444 0x32FC84 GIF image data, version "89a", 18 x 18

3342852 0x330204 PNG image, 128 x 128, 8-bit colormap, non-interlaced

3343424 0x330440 Zlib compressed data, best compression

3348768 0x331920 GIF image data, version "89a", 96 x 96

3349028 0x331A24 Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf/:D/escription rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http

3354524 0x332F9C PNG image, 80 x 12, 8-bit colormap, non-interlaced

3355524 0x333384 PNG image, 133 x 30, 8-bit/color RGBA, non-interlaced

3355814 0x3334A6 Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf/:D/escription rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef=

3356415 0x3336FF Zlib compressed data, best compression

3358620 0x333F9C GIF image data, version "89a", 130 x 200

3358952 0x3340E8 Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf/:D/escription rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http

3366424 0x335E18 PNG image, 116 x 26, 8-bit/color RGBA, non-interlaced

3366714 0x335F3A Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf/:D/escription rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef=

3367315 0x336193 Zlib compressed data, best compression

3369185 0x3368E1 HTML document header

3372339 0x337533 HTML document footer

3377993 0x338B49 HTML document header

3386952 0x33AE48 HTML document footer

3389713 0x33B911 HTML document header

3390607 0x33BC8F HTML document footer

3430816 0x3459A0 YAFFS filesystem