Cruise, ib lub tuam txhab tshwj xeeb hauv automated tsav technologies, qhov project source codes , uas muab cov cuab yeej rau kev tshuaj xyuas Linux-based firmware dluab thiab txheeb xyuas qhov muaj peev xwm tsis zoo thiab cov ntaub ntawv xau hauv lawv. Cov cai sau ua lus Go thiab muaj ntawv tso cai nyob rau hauv Apache 2.0.
Txhawb kev txheeb xyuas cov duab siv ext2/3/4, FAT/VFat, SquashFS thiab UBIFS cov ntaub ntawv. Txhawm rau qhib cov duab, cov khoom siv hluav taws xob siv tau siv, xws li e2tools, mtools, squashfs-tools thiab ubi_reader. FwAnalyzer rho tawm cov npe ntoo ntawm daim duab thiab tshuaj xyuas cov ntsiab lus raws li cov cai. Cov cai tuaj yeem khi rau cov ntaub ntawv kaw lus metadata, hom ntaub ntawv, thiab cov ntsiab lus. Cov zis yog ib daim ntawv tshaj tawm hauv JSON hom, sau cov ntaub ntawv muab rho tawm los ntawm lub firmware thiab tso tawm cov lus ceeb toom thiab cov npe ntawm cov ntaub ntawv uas tsis ua raws li cov cai ua tiav.
Nws txhawb kev tshawb xyuas cov cai nkag mus rau cov ntaub ntawv thiab cov npe (piv txwv li, nws tshawb pom kev nkag mus rau txhua tus neeg thiab teeb tsa UID / GID tsis raug), txiav txim siab muaj cov ntaub ntawv ua tiav nrog tus chij suid thiab siv SELinux tags, txheeb xyuas cov yuam sij tsis nco qab thiab muaj peev xwm. cov ntaub ntawv txaus ntshai. Cov ntsiab lus hais txog kev tso tseg engineering passwords thiab debugging cov ntaub ntawv, qhia txog cov ntaub ntawv version, txheeb xyuas / txheeb xyuas cov cuab yeej siv SHA-256 hashes, thiab tshawb nrhiav siv lub ntsej muag zoo li qub thiab cov lus qhia tsis tu ncua. Nws tuaj yeem txuas cov ntawv txheeb xyuas sab nraud rau qee hom ntaub ntawv. Rau Android-raws li firmware, tsim tsis tau txhais (piv txwv li, siv ro.secure = 1 hom, ro.build.type xeev thiab SELinux ua kom).
FwAnalyzer tuaj yeem siv los ua kom yooj yim rau kev txheeb xyuas cov teeb meem kev nyab xeeb hauv firmware thib peb, tab sis nws lub hom phiaj tseem ceeb yog los saib xyuas qhov zoo ntawm firmware uas yog tswv lossis muab los ntawm cov neeg muag khoom cog lus thib peb. FwAnalyzer cov cai tso cai rau koj los tsim kom muaj qhov tseeb tshwj xeeb ntawm lub xeev firmware thiab txheeb xyuas qhov tsis txaus ntseeg, xws li muab cov cai nkag tsis raug lossis tawm hauv cov yuam sij ntiag tug thiab kev debugging code (piv txwv li, kuaj xyuas tso cai rau koj kom tsis txhob muaj xwm txheej xws li siv thaum kuaj ntawm ssh server, engineering password, nyeem /etc/config/shadow or tsim cov kos npe digital).
Tau qhov twg los: opennet.ru
