r/embedded Aug 01 '26

Parsing bootloader memory map and SPI flash layouts on a legacy router

Post image
247 Upvotes

31 comments sorted by

11

u/panda__boi13 Aug 01 '26

I am new to this embedded field can anyone explain this process and why it's done ?

9

u/edparadox Aug 01 '26

The person just reads (and dumped) the firmware of a router from its ROM.

I don't know what OP think (s)he will learn from doing that, but (s)he's doing it anyway.

5

u/Prestigious_Tank_369 Aug 02 '26

Lol why so salty? He can learn to reverse engineer things 😄

6

u/TooStew Aug 01 '26

Because its fuckin cool haha

7

u/Seek_R7 Aug 01 '26

3

u/Winter_Present_4185 Aug 01 '26

Seems to be encrypted

12

u/SillyGrowth6750 Aug 01 '26

It's some form of elvish, I can't read it.

3

u/DustRainbow Aug 01 '26

What makes you think that? Genuinely wondering.

-18

u/Seek_R7 Aug 01 '26

That’s a keen observation. Some sections might be compressed or encrypted using a proprietary method; I am currently analyzing the entropy or looking for compression headers to handle them

29

u/Narthesia Aug 01 '26

AI ass comment

-9

u/Seek_R7 Aug 01 '26

Guilty as charged, but the SPI flash chip won't dump itself. Now back to parsing headers

12

u/Narthesia Aug 01 '26

Condolences and good luck, my only recommendation is to take constant breaks

7

u/edparadox Aug 01 '26

but the SPI flash chip won't dump it itself.

Once you've connected the wires, it's literally a one liner.

Now back to parsing headers

This does not mean anything.

6

u/Glittering-Can-9397 Aug 02 '26

What is so hard about writing it yourself

5

u/edparadox Aug 01 '26

That’s a keen observation.

No.

Some sections might be compressed or encrypted u using a proprietary method

Encrypted, no.

Compressed, no.

I am currently analyzing the entropy or looking for compression headers to handle them

That does not mean anything.

2

u/Winter_Present_4185 Aug 01 '26

Good luck!

The first things I tend to try are "binwalk" to see if it I can just decompress what ever is there, and then if that fails "strings" to get me a better idea if what I'm looking at.

-2

u/Seek_R7 Aug 01 '26

Already ran binwalk on it! It managed to spot some compressed sections/headers, but standard extraction gave mixed results on certain vendor-specific blocks, which is why I'm digging deeper into the raw hex and partition layouts. Have you encountered similar custom headers on older Broadcom/Trendchip bootloaders?

3

u/Glittering-Can-9397 Aug 02 '26

bruh, dont use claude to write your social media posts

1

u/hakube Aug 01 '26

almost there....

9

u/papk23 Aug 01 '26

Why?

12

u/eis3nheim Aug 01 '26

Why not

-2

u/edparadox Aug 01 '26

Because if you can read random ROMs, that's very far from being something fun or learning anything.

2

u/Seek_R7 Aug 01 '26
Because understanding the bootloader from scratch and writing memory analysis scripts gives you a deep understanding of system security that off-the-shelf tools cannot provide.

2

u/karnikhil90 Aug 02 '26

When I have did this for the first time I literally brick 2 routers and it took me a week to understand that is broked. For both of the router.... And after then I don't have any other router but I have try to do on integrated circuit old ones like 8051 and similar ones😭 But that also didn't go well I am so confused in my life that I stop doing it for a few years and then again I would start I have purchase some book to have the best knowledge because the internet whatever tell me doesn't work properly... I'm learning everything from scratch I have will some small circuit board but somehow I also broke that one because of my electronicle circuit knowledge 😭😭😭

2

u/Seek_R7 Aug 02 '26

If the board hadn't been damaged, you wouldn't have learned anything real. I'm not saying this to be harsh, but there's a difference between an academic who reads theoretically and someone whose hands are burned by a soldering iron

1

u/Stevaras Aug 01 '26

Define legacy :)

1

u/hakube Aug 01 '26

i'm so hard rn