Binwalk 2.2.1 by Craig Heffner or ReFirmLabs

DQncG85LDRiWQakH software open_source_software Craig Heffner From duckduckgo.com/?q=binwalker&t=canonical&ia=web > https://duckduckgo.com/?q=binwalker+software&t=canonical&ia=web > https://tools.kali.org/forensics/binwalk (https://duckduckgo.com/?q=binwalker&t=canonical&ia=web also links to this tools.kali.org webpage) > https://github.com/ReFirmLabs/binwalk > https://github.com/ReFirmLabs/binwalk/archive/master.zip > https://codeload.github.com/ReFirmLabs/binwalk/zip/master This file was stored in a live boot of Lubuntu from a flash drive which was probably a 32 GB USB drive (which did NOT have a "Volume Serial Number" of "28ED-F128") > "/home/lubuntu/Downloads/binwalk-master.zip" The regular file was later moved to "Volume in drive H is My Passport \ Volume Serial Number is 1093-F3E8" > "H:\1\1285[...]\binwalk-master.zip" - files extracted from file "binwalk-master.zip": * "My Passport \ Volume Serial Number is 1093-F3E8" > ** "H:\1\1285[...]\README.md.txt" - renamed for accessibility, it was originally named "README.md" ** "H:\1\1285[...]\LICENSE.txt" - also renamed for accessibility, it was originally named "LICENSE" ** "H:\1\1285[...]\INSTALL.md.txt" - also renamed, it was originally named "INSTALL.md" I tried to use this software on an oldish version of Lubuntu via a liveboot. I couldn't easily (and didn't) install an optional dependency that a text file said would really improve binwalk. Contents of these plain text files via the stdout of type commands: <pre>H:\1\1285[...]>type README.md.txt # Binwalk [![Build Status](https://travis-ci.org/ReFirmLabs/binwalk.svg?branch=master)](https://travis-ci.org/ReFirmLabs/binwalk) [![Maintenance](https://img.shields.io/badge/Maintained%3F-yes-green.svg)](https://GitHub.com/ReFirmLabs/binwalk/graphs/commit-activity) [![GitHub license](https://img.shields.io/github/license/ReFirmLabs/binwalk.svg)](https://github.com/ReFirmLabs/binwalk/blob/master/LICENSE) [![GitHub stars](https://img.shields.io/github/stars/badges/shields.svg?style=social&label=Stars)](https://github.com/ReFirmLabs/binwalk/stargazers) Binwalk is a fast, easy to use tool for analyzing, reverse engineering, and extracting firmware images. ### Installation and Usage * [Installation](./INSTALL.md) * [API](./API.md) * [Supported Platforms](https://github.com/ReFirmLabs/binwalk/wiki/Supported-Platforms) * [Getting Started](https://github.com/ReFirmLabs/binwalk/wiki/Quick-Start-Guide) * [Binwalk Command Line Usage](https://github.com/ReFirmLabs/binwalk/wiki/Usage) * [Binwalk IDA Plugin Usage](https://github.com/ReFirmLabs/binwalk/wiki/Creating-Custom-Plugins) More information on [Wiki](https://github.com/ReFirmLabs/binwalk/wiki) # Binwalk Professional Edition After years of developing and supporting binwalk as an open source project we have finally sold out to the man and released a cloud-based firmware extraction engine called *Binwalk Pro*. After all someone needs to pay devttys0 so he can buy more milling equipment and feed his children (in that order). Please consider subscribing and reap the benefits of getting actual customer support for all your firmware extraction needs. Please visit https://www.refirmlabs.com/binwalk-pro/ for more information. H:\1\1285[...]>type LICENSE.txt The MIT License (MIT) Copyright (c) 2010-2015 Craig Heffner Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. H:\1\1285[...]>type INSTALL.md.txt Before You Start ================ Binwalk supports Python 2.7 - 3.x. Although most systems have Python2.7 set as their default Python interpreter, binwalk does run faster in Python3. Installation procedures for both are provided below. Installation ============ Installation follows the typical Python installation procedure: ```bash # Python2.7 $ sudo python setup.py install ``` ```bash # Python3.x $ sudo python3 setup.py install ``` **NOTE**: Older versions of binwalk (e.g., v1.0) are not compatible with the latest version of binwalk. It is strongly recommended that you uninstall any existing binwalk installations before installing the latest version in order to avoid API conflicts. Dependencies ============ Besides a Python interpreter, there are no installation dependencies for binwalk. All dependencies are optional run-time dependencies, and unless otherwise specified, are available from most Linux package managers. Although all binwalk run-time dependencies are optional, the `python-lzma` module is highly recommended for improving the reliability of signature scans. This module is included by default in Python3, but must be installed separately for Python2.7: ```bash $ sudo apt-get install python-lzma ``` Binwalk uses the `nosetest` library for tests and `coverage` for test-coverage: ```bash $ sudo pip install nose coverage ``` Binwalk uses the `pycrypto` library to decrypt some known encrypted firmware images: ```bash # Python2.7 $ sudo apt-get install python-crypto ``` ```bash # Python3.x $ sudo apt-get install python3-crypto ``` Binwalk uses [pyqtgraph](http://www.pyqtgraph.org) to generate graphs and visualizations, which requires the following: ```bash # Python2.7 $ sudo apt-get install libqt4-opengl python-opengl python-qt4 python-qt4-gl python-numpy python-scipy python-pip $ sudo pip install pyqtgraph ``` ```bash # Python3.x $ sudo apt-get install libqt4-opengl python3-opengl python3-pyqt4 python3-pyqt4.qtopengl python3-numpy python3-scipy python3-pip $ sudo pip3 install pyqtgraph ``` Binwalk's `--disasm` option requires the [Capstone](http://www.capstone-engine.org/) disassembly framework and its corresponding Python bindings: ```bash # Python2.7 $ sudo apt-get install python-pip $ sudo pip install capstone ``` ```bash # Python3.x $ sudo apt-get install python3-pip $ sudo pip3 install capstone ``` Binwalk relies on multiple external utilties in order to automatically extract/decompress files and data: ```bash # Install standard extraction utilities $ sudo apt-get install mtd-utils gzip bzip2 tar arj lhasa p7zip p7zip-full cabextract cramfsprogs cramfsswap squashfs-tools sleuthkit default-jdk lzop srecord ``` ```bash # Install sasquatch to extract non-standard SquashFS images $ sudo apt-get install zlib1g-dev liblzma-dev liblzo2-dev $ git clone https://github.com/devttys0/sasquatch $ (cd sasquatch && ./build.sh) ``` ```bash # Install jefferson to extract JFFS2 file systems $ sudo pip install cstruct $ git clone https://github.com/sviehb/jefferson $ (cd jefferson && sudo python setup.py install) ``` ```bash # Install ubi_reader to extract UBIFS file systems $ sudo apt-get install liblzo2-dev python-lzo $ git clone https://github.com/jrspruitt/ubi_reader $ (cd ubi_reader && sudo python setup.py install) ``` ```bash # Install yaffshiv to extract YAFFS file systems $ git clone https://github.com/devttys0/yaffshiv $ (cd yaffshiv && sudo python setup.py install) ``` ```bash # Install unstuff (closed source) to extract StuffIt archive files $ wget -O - http://downloads.tuxfamily.org/sdtraces/stuffit520.611linux-i386.tar.gz | tar -zxv $ sudo cp bin/unstuff /usr/local/bin/ ``` Note that for Debian/Ubuntu users, all of the above dependencies can be installed automatically using the included `deps.sh` script: ```bash $ sudo ./deps.sh ``` Installing the IDA Plugin ========================= If IDA is installed on your system, you may optionally install the binwalk IDA plugin: ```bash $ python setup.py idainstall --idadir=/home/user/ida ``` Likewise, the binwalk IDA plugin can be uninstalled: ```bash $ python setup.py idauninstall --idadir=/home/user/ida ``` Uninstalling Binwalk ==================== If binwalk has been installed to a standard system location (e.g., via `setup.py install`), it can be removed by running: ```bash # Python2.7 $ sudo python setup.py uninstall ``` ```bash # Python3 $ sudo python3 setup.py uninstall ``` Note that this does _not_ remove any of the manually installed dependencies. H:\1\1285[...]></pre> Hashes of the binary file and the text files via 7z, simplified by gVim (see https://archive.org/details/DMb0jYpgDMbnxeeQ for the vim command used to simplify it): H:\>7z h -scrc* "H:\1\1285[...]\binwalk-master.zip" 39655745 bytes (38 MiB) Size: 39655745 CRC32 for data: 8766C71F CRC64 for data: 728152AB3DA641E3 SHA256 for data: C1AA20E94E1DD12A2FC84D90C2CF7E97C2F0C45DDC0CFD404914F8D38F0442B4 SHA1 for data: 2F8846102A92CE3CF431FE0B1E0752C88F1CB573 BLAKE2sp for data: 1D4B4B8FD9487DD9817C7D732AA26B9600DD0986A512550676685D04E330CA2B H:\>7z h -scrc* "H:\1\1285[...]\README.md.txt" 1698 bytes (2 KiB) Size: 1698 CRC32 for data: D71F74C6 CRC64 for data: C5918BC2ED89A876 SHA256 for data: E679C7ED39F46BAE150D0BF29806AC60ED76B397935FA5E37C50AD5F837CBA70 SHA1 for data: 522C3E56B023EBA7D21B6CB3A470EA31B2C250F9 BLAKE2sp for data: F9BC9A8779F29C153541CC179B975C57CB8B559B23494ABB541AAA355049E366 H:\>7z h -scrc* "H:\1\1285[...]\LICENSE.txt" 1085 bytes (2 KiB) Size: 1085 CRC32 for data: B1159819 CRC64 for data: 679471737ACAAD3F SHA256 for data: 6B78992F9D9F79AA751DE4DBED15069FF663B706C4A9F9505C962ACE49C9ADA0 SHA1 for data: EF53B2A881493FF495032066771AED6CEAE431B8 BLAKE2sp for data: F033DB5A6986D05C37B712CA0B6A0510C1D8515DCE75E0228D4B47DF4E7FF91F H:\>7z h -scrc* "H:\1\1285[...]\INSTALL.md.txt" 4529 bytes (5 KiB) Size: 4529 CRC32 for data: 2862A6BA CRC64 for data: EEF7D3D7143F8C19 SHA256 for data: B62B77ACDE0E11F67808A67614DAF76F0EBB8AB2A860AE00D1633280EF475E62 SHA1 for data: 7DFA9FD456E08804E3B4FB159D7B51E947135030 BLAKE2sp for data: F46C023B25228B9EDDDFF8D2424786BD5BFD14CA41DA98C410DA0FB79FE2E83C See also: * version number seen at ** https://github.com/ReFirmLabs/binwalk/blob/master/setup.py * author named seen at ** tools.kali.org/forensics/binwalk * https://archive.org/details/github.com-ReFirmLabs-binwalk_-_2020-02-03_02-18-40 - if you are big brain enough to install from a .bundle file identifier from two pastebin.com paste IDs (DQncG85L DRiWQakH) found at https://archive.org/details/pastebincom-pastes_2014-05-30 Internet Archive HTML5 Uploader 1.6.4 Binwalk 2.2.1 - ReFirmLabs; Binwalk v2.2.1 by Craig Heffner; github.com; ReFirmLabs; binwalk; codeload.github.com; Binwalk 2.2.1; Binwalk v2.2.1; Craig Heffner; Linux software; CLI software; file signatures; find file signatures; find file signatures in data; find file signatures in binary data; binary data; from codeload.github.com; README.md; LICENSE; INSTALL.md; readme; readme file; license file; installation; text file; installation instructions Binwalk 2.2.1 by Craig Heffner or ReFirmLabs leedusmcclein@gmail.com 2021-02-06 06:26:26 2021-02-06 06:26:26 [curator]validator@archive.org[/curator][date]20210206062703[/date][comment]checked for malware[/comment] community