Uploaded bySaumil Shah
Announcing ARMX Docker - DC11332
Saumil Shah, CEO of Net Square, introduces ARMX, an ARM firmware emulation framework aimed at creating a virtual IoT device for runtime analysis, reverse engineering, and exploit development. The document outlines the boot-up process of IoT devices, including various components like CPU, kernel drivers, and user processes, as well as the challenges of emulation. Additionally, it provides links to resources and demos associated with the ARMX project.
More Related Content
Similar to Announcing ARMX Docker - DC11332
Announcing ARMX Docker - DC11332
- 1. (c) SAUMIL SHAH @DC11332 DEEPDIVE INTO SAUMIL SHAH @therealsaumil 15 June 2021 DC11332 meetup
- 2. (c) SAUMIL SHAH @DC11332 #WHO AM I Saumil Shah CEO, Net Square @therealsaumil educating, entertaining and exasperating audiences since 1999
- 3. (c) SAUMIL SHAH @DC11332 AWord From Our Sponsors KEEP CALM AND NAMASTE !
- 4. (c) SAUMIL SHAH @DC11332 IntroducingARMX • An ARM Firmware Emulation Framework. • Ultimate Goal - create an IoT VM! • A Virtual IoT device makes for easy – runtime analysis – reverse engineering – fuzzing – exploit development • Gain insight into embedded hardware by trying to emulate it.
- 5.
- 6. (c) SAUMIL SHAH @DC11332 Insidean IoT device…
- 7. (c) SAUMIL SHAH @DC11332 CPUand Hardware Kernel Drivers File System nvram User Processes API UI libnvram …same same but different
- 8. (c) SAUMIL SHAH @DC11332 compressedFS CPU Kernel Boot Loader mounted FS nvram init scripts Services Apps libnvram The IoT Boot Up Process conf conf conf conf firmware Loads Kernel. Uncompresses FS to ramdisk, invokes init process. ramdisk userland Reads config from nvram. Builds system config files on the fly. Starts up system services. Invokes Applications and Application services. READY POWER ON
- 9. (c) SAUMIL SHAH @DC11332 QEMU CPUand Limited Hardware Kernel Drivers uncompressed Filesystem emulated nvram init scripts Services Apps libnvram Emulation: Goals and Challenges x x x x BUILDROOT Match the kernel with the one on the device chroot environment Implemented as an INI file, preloaded before "boot up" conf conf Fix to match QEMU environment Not all drivers load successfully
- 10. (c) SAUMIL SHAH @DC11332 JUSTRELEASED!
- 11. (c) SAUMIL SHAH @DC11332 ARMXdocker container
- 12. (c) SAUMIL SHAH @DC11332 ARMXdirectory layout
- 13. (c) SAUMIL SHAH @DC11332 Startingan ARMX device
- 14.
- 15. (c) SAUMIL SHAH @DC11332 QEMU CPUand Limited Hardware Kernel Kernel and hostfs ready hostfs NFS /armx
- 16.
- 17. (c) SAUMIL SHAH @DC11332 QEMU CPUand Limited Hardware Kernel Drivers NFS /armx emulated nvram nvram and userland init scripts conf conf init scripts libnvram
- 18.
- 19. (c) SAUMIL SHAH @DC11332 QEMU CPUand Limited Hardware Kernel Drivers NFS /armx emulated nvram init scripts Services Apps libnvram ARM-X: Device "booted up" x x x x conf conf
- 20.
- 21.
- 22.
- 23. (c) SAUMIL SHAH @DC11332 Firmware Firmware .binfile from Web/FTP UART Serial Console Direct from Flash memory
- 24. (c) SAUMIL SHAH @DC11332 1:Web/FTP site
- 25. (c) SAUMIL SHAH @DC11332 2:Hidden UART interfaces
- 26. (c) SAUMIL SHAH @DC11332 3:Take it directly from the chip!
- 27.
- 28. (c) SAUMIL SHAH @DC11332 HEREBE THE GOODS https://github.com/therealsaumil/armx ! Announcements: @therealsaumil
- 29. (c) SAUMIL SHAH @DC11332 Thankyou and … QUESTIONS? @therealsaumil