#04 - How To Get The Firmware - Hardware Hacking Tutorial

If you are struggling to get the firmware out of your device, this is the video for you!

In this video I will explain the possible ways we can use to to get the firmware of our IoT device.

I will do a practical example, of one of these possible ways. I will connect the PC to the UART of our sample device, I will analyze the boot log, I will access the command line interface of the boot loader, and I will dump the firmware, exploiting the dump command available in the boot loader. I will use a couple of scripts, do dump the entire EEPROM in an hexadecimal ASCII text file, and, then, to convert back this file in binary form to get the exact image of the EEPROM.

********* Links with additional Information

Channel's Author: makemehack.com/2020/02/a-short-introduction-of-…

Channel's Web Site: makemehack.com/

The sample router (Gemtek WVRTM-127ACN) on techinfodepot: en.techinfodepot.shoutwiki.com/wiki/Gemtek_WVRT…

The sample router (Gemtek WVRTM-127ACN) reverse engineered on GitHub, includes scripts to dump the EEPROM to a text file and to convert it back to binary file: github.com/digiampietro/hacking-gemtek

TTL Serial Adapter (affiliate link): amzn.to/2vvzCYB

PuTTY, the terminal emulator: putty.org/

Wireshark, Ethernet analyzer: wireshark.org/

Curl, command line tool for transferring data with URLs: curl.haxx.se/

Wget, retrieving files with URLs: gnu.org/software/wget/

Mitmproxy, a free and open source interactive HTTPS proxy: mitmproxy.org/

Bus Pirate: dangerousprototypes.com/docs/Bus_Pirate

OpenOcd, On Chip Debugger: openocd.org/

U-Boot, The Universal Boot Loader: denx.de/wiki/U-Boot

Buildroot, a simple, efficient and easy-to-use tool to generate embedded Linux systems through cross-compilation: buildroot.org/

Binwalk, a fast, easy to use tool for analyzing, reverse engineering, and extracting firmware images: github.com/ReFirmLabs/binwalk

SOIC8 SOP8 Flash Chip IC Test Clips Socket Adpter BIOS/24/25/93/95 Programmer (affiliate link): amzn.to/39A9JFd