Extracting Firmware from Linux Router using the U-Boot Bootloader and UART

In this video, we discuss how to extract firmware from a Linux Router using UART access to the device's bootloader. This device used U-Boot as the embedded system's bootloader which provides us with a way to extract flash memory contents using a few handy U-Boot commands. Then we use a small python script to convert the U-Boot hex dump to a binary file which we can analyze with binwalk.

video on finding UART:
   • Finding UART and Getting a Root Shell...  

tool to convert u-boot hex dump output to a binary file:
https://github.com/nmatt0/firmwaretools

U-Boot command documentation:
https://u-boot.readthedocs.io/en/late...

IoT Hackers Hangout Community Discord Invite:
  / discord  

🛠️ Stuff I Use 🛠️

🪛 Tools:
XGecu Universal Programmer: https://amzn.to/4dIhNWy
Multimeter: https://amzn.to/4b9cUUG
Power Supply: https://amzn.to/3QBNSpb
Oscilloscope: https://amzn.to/3UzoAZM
Logic Analyzer: https://amzn.to/4a9IfFu
USB UART Adapter: https://amzn.to/4dSbmjB
iFixit Toolkit: https://amzn.to/44tTjMB

🫠 Soldering & Hot Air Rework Tools:
Soldering Station: https://amzn.to/4dygJEv
Microsoldering Pencil: https://amzn.to/4dxPHwY
Microsoldering Tips: https://amzn.to/3QyKhrT
Rework Station: https://amzn.to/3JOPV5x
Air Extraction: https://amzn.to/3QB28yx

🔬 Microscope Setup:
Microscope: https://amzn.to/4abMMao
Microscope 0.7X Lens: https://amzn.to/3wrV1S8
Microscope LED Ring Light: https://amzn.to/4btqiTm
Microscope Camera: https://amzn.to/3QXSXsb

About Me:
My name is Matt Brown and I'm an Hardware Security Researcher and Bug Bounty Hunter. This channel is a place where I share my knowledge and experience finding vulnerabilities in IoT systems.

Soli Deo Gloria

💻 Social:
twitter:   / nmatt0  
linkedin:   / mattbrwn  
github: https://github.com/nmatt0/

#iot #uboot #linux #uart #iotsecurity