#05 - How To Get The Root File System - Hardware Hacking Tutorial

If you have downloaded the firmware file for your device from the supplier's website or if you have dumped the EEPROM from your device and you want to extract the root file system and other information, this is the video for you!

In this episode I will talk about the available options to understand where the root file system is located in the firmware image, and the tools to use to extract it with the purpose to analyse it.

In this episode we will use 3 different types of firmware file:

- An encrypted firmware update file for a digital camera, downloaded from the supplier's website. I will not succeed to extract the root file system, but we will learn something useful anyway.

- Another file is a firmware upgrade for home router, downloaded from the supplier's website; we will successfully extract the file system, with some minor issues.

- The last file is an EEPROM dump that we dumped from the sample Gemtek router in the previous episode.

- We will do everything on our Linux box using some simple tools:

- The "file" command, that gives very basic information about any type of file.

- The "strings" command, that prints embedded strings in a binary file.

- The "hexdump" command, that prints the hex dump of a file, including the ASCII equivalent of each byte.

- The "binwalk" software, it is able to scan a binary file searching signatures of many different file system images, of compressed data segments, of digital certificates and of many other type of information embedded on a single binary file. It is also able to show the running entropy of a file allowing us to understand if we have an encrypted or compressed segment inside the binary file.

- The "dd" command, it is able to dissect a file, easily extracting part of it, or reassembling a file putting together different parts.

** Links with additional Information **

Channel's Author: https://www.makemehack.com/2020/02/a-...

Channel's Web Site: https://www.makemehack.com/

The sample router (Gemtek WVRTM-127ACN) on techinfodepot: http://en.techinfodepot.shoutwiki.com...

The sample router (Gemtek WVRTM-127ACN) reverse engineered on GitHub, includes scripts to dump the EEPROM to a text file and to convert it back to binary file: https://github.com/digiampietro/hacki...

Canon EOS M50 firmware download page: https://www.canon.it/support/consumer...

D-Link DVA-5592 firmware: https://media.dlink.eu/ftp/products/d...

adbtools2, tools to hack the DVA-5592 router: https://github.com/digiampietro/adbto...

buildroot-armv7, emulation environment for the DVA-5592 router: https://github.com/digiampietro/build...

jefferson, to exctract JFFS2 file system images: https://github.com/sviehb/jefferson

Binwalk, a fast, easy to use tool for analyzing, reverse engineering, and extracting firmware images: https://github.com/ReFirmLabs/binwalk

One of the longest wikipedia article: https://en.wikipedia.org/wiki/List_of...

U-Boot, The Universal Boot Loader: https://www.denx.de/wiki/U-Boot