compsecdirect/autodyne repository overview

⁠Autodyne: Automated firmadyne by CompSec Direct

⁠Purpose

Improve Firmadyne (https://github.com/firmadyne/firmadyne⁠) and make it simpler to extract, emulate firmware for analysis.

⁠Usage

1. Get firmware samples to analyze. mkdir samples samples-output Add firmware to samples folder
2. Edit the docker-compose.yml to include the desired "Manufacturer name" (can be anything) and path to samples.
   a. command section has "foo", "1.bin" ; this is the "Manufacturers Name" and file name.
   b. volumes section has path to firmware samples and mapping to local images.
3. Copy the relevant sections multiple times (given x samples).
   a. copy section from emulator-1 until next entry.
   b. manually increment the desired ip address.
4. make build and make start
5. docker exec CONTAINERID bash
6. tmux ls
7. tmux a -t "ImageID X Where X is the database id generated by firmadyne.
   a. This tmux session is the console session to the firmware sample.

⁠Notes

1. If you did not get a tmux session; a failure occurred during the seven firmadyne steps. We keep a samples-out folder to collect and debug emulation efforts.
   a. ex 2.bin-extractor-output 2.bin-getArch-output 2.bin-inferNetwork-output 2.bin-makeImage-output

⁠Authors

o Charles Boyd
o DJ Forbes