|
99 | 99 | "type": "checklist", |
100 | 100 | "items": |
101 | 101 | [ |
102 | | - { |
103 | | - "key": "dump_download_firmware", |
104 | | - "title": "Dump or Download Firmware for Analysis", |
105 | | - "description": "Using the identified debug ports try to dump the firmware from the device for reverse engineering. Desoldering the SPI flash and using a tool to dump the firmware from it directly. Try downloading the firmware from the vendor site, however it might be encrypted.", |
106 | | - "tools": "desoldering station, jtagulator, minicom, PuTTy, Bus Pirate, Raspberry Pi Pico" |
107 | | - }, |
108 | | - { |
109 | | - "key":"firmware_analysis", |
110 | | - "title":"Firmware Analysis", |
111 | | - "description":"Reverse engineering the dumped firmware. Identify encryption if used and try to decrypt it. Use emulation software to help analyze it. Analyze and search the firmware for hardcoded passwords/keys and other sensitive information.", |
112 | | - "tools":"binwalk, QEMU, Ghidra, grep, strings, hexdump, readelf" |
113 | | - }, |
| 102 | + { |
| 103 | + "key": "dump_download_firmware", |
| 104 | + "title": "Dump or Download Firmware for Analysis", |
| 105 | + "description": "Using the identified debug ports try to dump the firmware from the device for reverse engineering. Desoldering the SPI flash and using a tool to dump the firmware from it directly. Try downloading the firmware from the vendor site, however it might be encrypted.", |
| 106 | + "tools": "desoldering station, jtagulator, minicom, PuTTy, Bus Pirate, Raspberry Pi Pico" |
| 107 | + }, |
| 108 | + { |
| 109 | + "key":"firmware_analysis", |
| 110 | + "title":"Firmware Analysis", |
| 111 | + "description":"Reverse engineering the dumped firmware. Identify encryption if used and try to decrypt it. Use emulation software to help analyze it. Analyze and search the firmware for hardcoded passwords/keys and other sensitive information.", |
| 112 | + "tools":"binwalk, QEMU, Ghidra, grep, strings, hexdump, readelf" |
| 113 | + } |
114 | 114 | ] |
115 | 115 | }, |
116 | 116 | { |
|
0 commit comments