Skip to content

Detect reverse bytes? #910

@hedgehogform

Description

@hedgehogform

I found some firmware that requires you to do the command:

objcopy -I binary -O binary --reverse-bytes=4 cloudipcamera_mxic25l12835f.BIN cloudipcamera_mxic25l12835f.BIN.swapped

from this article

Would be cool if binwalk could detect this kind of thing.

First one is scrambled one. the 2nd is the swapped one.

┌──(snufkin㉿SHADOW-PC)-[/mnt/c/Users/Snufkin/Downloads/mtd]
└─$ xxd -l 100 firm.pck
00000000: 2681 6125 1257 aa77 0805 b400 6d62 6f6f  &.a%.W.w....mboo
00000010: 7470 496d 6167 6500 a0c7 0408 0000 0000  tpImage.........
00000020: e051 c800 e8a5 8cbf 65f8 b200 805a 474d  .Q......e....ZGM
00000030: 0000 0000 00b4 0408 0000 0000 756e 694c  ............uniL
00000040: 0000 0078 0000 0000 0000 0000 0000 0000  ...x............
00000050: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000060: 0000 0000                                ....

┌──(snufkin㉿SHADOW-PC)-[/mnt/c/Users/Snufkin/Downloads/mtd]
└─$ xxd -l 100 firm.swapped 
00000000: 2561 8126 77aa 5712 00b4 0508 6f6f 626d  %a.&w.W.....oobm
00000010: 6d49 7074 0065 6761 0804 c7a0 0000 0000  mIpt.ega........
00000020: 00c8 51e0 bf8c a5e8 00b2 f865 4d47 5a80  ..Q........eMGZ.
00000030: 0000 0000 0804 b400 0000 0000 4c69 6e75  ............Linu
00000040: 7800 0000 0000 0000 0000 0000 0000 0000  x...............
00000050: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000060: 0000 0000                                ....

┌──(snufkin㉿SHADOW-PC)-[/mnt/c/Users/Snufkin/Downloads/mtd]

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions