Skip to content

Commit fdb8c3d

Browse files
scriptingxssgitbook-bot
authored andcommitted
GitBook: [gitbook] one page modified
1 parent f3f67ae commit fdb8c3d

File tree

1 file changed

+6
-3
lines changed

1 file changed

+6
-3
lines changed

README.md

Lines changed: 6 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -97,15 +97,18 @@ Each of the listed methods vary in difficulty and should not be considered an ex
9797

9898
Once the firmware image is obtained, explore aspects of the file to identify its characteristics. Use the following steps to analyze firmware file types, potential root filesystem metadata, and gain additional understanding of the platform it's compiled for.
9999

100-
Leverage binutils such as:
100+
Leverage utilities such as:
101101

102102
```text
103103
file <bin>
104104
strings
105-
strings -n5 <bin>
105+
strings -n5 <bin>
106+
strings -n16 <bin>#longer than 16
107+
strings -tx <bin> #print offsets in hex
106108
binwalk <bin>
107109
hexdump -C -n 512 <bin> > hexdump.out
108110
hexdump -C <bin> | head # might find signatures in header
111+
fdisk -lu <bin> #lists a drives partition and filesystems if multiple
109112
```
110113

111114
If none of the above methods provide any useful data, the following is possible:
@@ -120,7 +123,7 @@ If the binary may be encrypted, check the entropy using binwalk with the followi
120123

121124
Low entropy = Not likely to be encrypted
122125

123-
High entropy = It's likely encrypted \(or compressed in some way\).
126+
High entropy = Its likely encrypted \(or compressed in some way\).
124127

125128
Alternate tools are also available using Binvis online and the standalone application.
126129

0 commit comments

Comments
 (0)