News for hackers. Stuff that matters.

bootbloopers

Show HN: Tool for Auditing Embedded Linux Hosts

https://github.com/nstarke/embedded_linux_audit

I just shipped a major new feature to my embedded linux auditing tool - the ability to audit the kernel on embedded hosts. The agent that runs on the embedded host sends kernel information to the companion APIs, which then build a compatible kernel module that then gets loaded by the agent on the target host. Then the agent can communicate with the kernel module to do things like read/write...

( Read More... | no comments | 3 points | on HN )

Show HN: U-Boot Fw_env.config Bruteforcer

https://github.com/nstarke/U-Boot-fw_env_scan

I created a tool today for embedded device security assessments. Basically what it does it searches the linux `mtd` partitions to find the U-Boot environment variable location and then gives the correct format for the `fw_env.config` file that the U-Boot utilities `fw_setenv` and `fw_printenv` use. So, if those utilities are not installed with the proper config file on the embedded device,...

( Read More... | no comments | on HN )

Show HN: Raw Binary Program Analysis Tool

https://github.com/nstarke/BaseAddressDiscoverererer

I built a tool for analyzing raw binary programs (programs without an ELF, PE, Mach-O header) to determine the file offset that the program begins at and the load address the program is mapped into memory at. The tool can also do find the instruction set architecture for common platforms. I put a lot of effort into making it as easy as possible to run, and there is a quick start script that...

( Read More... | no comments | 2 points | on HN )
This seems like something that would be fairly easy to show proof for using ghidra/binary ninja/ida pro.

I wonder why they didn’t provide any disassembly/decompiler output, or other information on the offending binary

Re:Erica Synths DIY Prototyping Breadboard on Tuesday June 18, 2024 @11:36PM (#40724523)
Addac systems has had a similar product for a while:

https://www.addacsystem.com/en/products/modules/addac200-ser...

A small MBR-based fuzzer for testing BIOS Services and System Motherboards. Tests Port IO and BIOS Services (int 0x13).