Ebipụtala koodu maka nyocha nchekwa firmware FwAnalyzer

Cruise, ụlọ ọrụ ọkachamara na teknụzụ ịnya ụgbọ ala na-akpaghị aka, meghere Koodu isi mmalite oru ngo FwAnalyzer, nke na-enye ngwaọrụ maka nyocha ihe onyonyo firmware dabere na Linux yana ịchọpụta adịghị ike na mwepu data n'ime ha. Edere koodu ahụ na Go na kesara site nyere ikike n'okpuru Apache 2.0.

Na-akwado nyocha nke onyonyo site na iji ext2/3/4, FAT/VFat, SquashFS na sistemụ faịlụ UBIFS. Iji mepee onyonyo a, a na-eji ngwa ọkọlọtọ, dị ka e2tools, mtools, squashfs-tools na ubi_reader. FwAnalyzer na-ewepụta osisi ndekọ na onyonyo a wee nyochaa ọdịnaya dabere na usoro iwu. Enwere ike ijikọ iwu na metadata sistemụ faịlụ, ụdị faịlụ na ọdịnaya. Mmepụta bụ akụkọ n'ụdị JSON, na-achịkọta ozi ewepụtara na firmware ma gosipụta ịdọ aka ná ntị yana ndepụta faịlụ na-adabaghị n'iwu edoziri.

Ọ na-akwado ịlele ikike ịnweta faịlụ na akwụkwọ ndekọ aha (dịka ọmụmaatụ, ọ na-achọpụta ohere ide maka onye ọ bụla ma na-edozi UID/GID na-ezighi ezi), na-ekpebi ọnụnọ faịlụ nwere ike iji ọkọlọtọ suid na iji mkpado SELinux, na-achọpụta igodo ezoro ezo na nwere ike. faịlụ dị ize ndụ. Ọdịnaya ahụ na-egosipụta okwuntughe injinia agbahapụla na data nbipu, na-egosipụta ozi ụdị, na-achọpụta/na-enyocha ngwaike site na iji hashes SHA-256, yana nyocha site na iji masks static na okwu oge niile. Ọ ga-ekwe omume ijikọ edemede nyocha mpụga na ụfọdụ ụdị faịlụ. Maka ngwa ngwa dabere na gam akporo, a na-akọwapụta paramita nrụpụta (dịka ọmụmaatụ, iji ro.secure=1 mode, ro.build.type state na SELinux activation).

Enwere ike iji FwAnalyzer mee ka nyocha nke okwu nchekwa dị mfe na firmware nke atọ, mana ebumnuche ya bụ inyocha ogo firmware nke ndị na-ere nkwekọrịta nke ndị ọzọ nwere ma ọ bụ wetara ya. Iwu FwAnalyzer na-enye gị ohere ịmepụta nkọwa ziri ezi nke steeti firmware wee chọpụta ihe ndị na-adịghị anabata, dị ka ịnye ikike ịnweta na-ezighi ezi ma ọ bụ ịhapụ igodo nzuzo na koodu nbipu (dịka ọmụmaatụ, ịlele na-enye gị ohere izere ọnọdụ ndị dị ka. agbahapụ ejiri mee ihe n'oge ule nke ihe nkesa ssh, akọwara ụzọ paswọọdụ injinia, inweta ịgụ /etc/config/shadow ma ọ bụ echefuru igodo nhazi nke mbinye aka dijitalụ).

isi: opennet.ru