skywalker365

Reversing Raw Binary Firmware Files in Ghidra

This brief tutorial will show you how to go about analyzing a raw binary firmware image in Ghidra.

Prep work in Binwalk

I was recently interested in reversing some older Cisco IOS images. Those images come in the form of a single binary blob, without any sort of ELF, Mach-o, or PE header to describe the binary.

While I am using Cisco IOS Images in this example, the same process should apply to other Raw Binary Firmware Images.

How to mount a qcow2 disk image

This is a quick guide to mounting a qcow2 disk images on your host server. This is useful to reset passwords, edit files, or recover something without the virtual machine running.

Step 1 - Enable NBD on the Host

modprobe nbd max_part=8

	#!/usr/bin/env python

	try:
	import gdb
	inside_gdb = True
	except ImportError:
	inside_gdb = False


	if inside_gdb:

	from cryptography.hazmat.backends import default_backend
	from cryptography.hazmat.primitives import hashes, padding
	from cryptography.hazmat.primitives.asymmetric import ec
	from cryptography.hazmat.primitives.kdf.hkdf import HKDF
	from cryptography.hazmat.primitives.ciphers import Cipher, algorithms, modes
	from secrets import token_bytes


	class DiffieHellman:
	def __init__(self):