Skip to content

README_EN.md

Latest commit

 

History

History
84 lines (63 loc) · 2.32 KB

README_EN.md

File metadata and controls

84 lines (63 loc) · 2.32 KB

Firmware Analysis Plus (Fap)

Fap is a greate simulator based on the firmadyne that can run common router firmware from TP-Link, D-Link and other IoT manufacturer.

Build

Installing Fap is easy. We strongly recommend installing Fap on the latest version of Ubuntu 20.04 and binwalk-f4a5759. VMware Image and docker docker-menu.sh is also available.

git clone https://github.com/liyansong2018/firmware-analysis-plus.git
cd firmware-analysis-plus
./setup.sh

Usage

Modify password in the fap.config

[DEFAULT]
sudo_password=toor
firmadyne_path=/home/lys/Tools/firmware-analysis-plus/firmadyne

Monitor firmware

./fap.py -q ./qemu-builds/2.5.0/ ./testcases/iot.bin

Shut down the simulator

./shutdown.py

Reset the simulator

./reset.py

Help information

./fap.py --help                                          
usage: fap.py [-h] [-q qemu_path] [-b compiled_binwalk] [-t network_infer_time] firm_path

options:
  -h, --help            show this help message and exit
  -q qemu_path, --qemu qemu_path
                        The qemu version to use (must exist within qemu-builds directory). If not specified, the qemu
                        version installed system-wide will be used
  -b compiled_binwalk, --binwalk compiled_binwalk
                        Has binwalk been compiled? yes or no, 1 or 0
  -t network_infer_time, --time network_infer_time
                        Network infer time

List of firmware supported

Common

  • wnap320_V3.7.11.4_firmware.tar
  • DIR-601_REVB_FIRMWARE_2.01.BIN
  • DIR890A1_FW103b07.bin
  • DIR-505L_FIRMWARE_1.01.ZIP
  • DIR-615_REVE_FIRMWARE_5.11.ZIP
  • DGL-5500_REVA_FIRMWARE_1.12B05.ZIP
  • WRT54G3G_2.11.05_ETSI_code.bin
  • NBG-416N_V1.00(USA.7)C0.zip
  • TEW-638v2%201.1.5.zip
  • Firmware_TEW-411BRPplus_2.07_EU.zip
  • DGND3700 Firmware Version 1.0.0.17(NA).zip
  • DIR-300A1_FW105b09.bin
  • HG532eV100R001C01B020_upgrade_packet.bin
  • DIR-860/865/880...
  • ...

Custom