Replies: 1 comment 15 replies
-
Hey @LoganDark! It's possible that the OFRAK automatic identifiers cannot figure out what type of binary you have, but that doesn't mean that OFRAK cannot pull it apart. If you're using the GUI, the next step to try would be using the "Analyze" button, which will (among other things) try to run Binwalk on the firmware. The firmware attributes in the bottom left of the GUI will be amended to include whatever results Binwalk finds. These can be used for manually carving up the file into bits that OFRAK does know how to unpack. After that, you can export a script to automate the process and turn it into an OFRAK component. Do you already know anything about the firmware format? |
Beta Was this translation helpful? Give feedback.
-
I have a firmware image I received directly from a manufacturer and when I drop it into OFRAK, all it says is basically "yep that definitely looks like a binary". The entire thing is just "GenericBinary, FilesystemEntry, File".
When I try to unpack the programmer that consumes the firmware image, I get:
Unable to find any analyzer for attributes ProgramAttributes Filter: (ComponentTypeFilter(Analyzer) and ((AnalyzerOutputFilter(ProgramAttributes) and ((ComponentTypeFilter(Identifier) and ComponentTargetFilter(GhidraAutoLoadProject, GhidraProject, Pe, Program, GenericBinary, File, FilesystemEntry, LinkableBinary)) or (not ComponentTypeFilter(Identifier) and (ComponentTargetFilter(Pe) then ComponentTargetFilter(Program) then ComponentTargetFilter(GhidraAutoLoadProject, File, LinkableBinary) then ComponentTargetFilter(GhidraProject, GenericBinary, FilesystemEntry))))) then ((AnalyzerOutputFilter(ProgramAttributes) and ((ComponentTypeFilter(Identifier) and ComponentTargetFilter(GhidraAutoLoadProject, GhidraProject, Pe, Program, GenericBinary, File, FilesystemEntry, LinkableBinary)) or (not ComponentTypeFilter(Identifier) and (ComponentTargetFilter(Pe) then ComponentTargetFilter(Program) then ComponentTargetFilter(GhidraAutoLoadProject, File, LinkableBinary) then ComponentTargetFilter(GhidraProject, GenericBinary, FilesystemEntry))))))))
What do I do now?
I'm using a Ghidra docker image compiled from the latest commit (d8e22a9).
Beta Was this translation helpful? Give feedback.
All reactions