PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Sonicwall Firmware Deep Dive - SWI Firmware Decryption

bishopfox.com | research | #reverse-engineering | #firmware | #security-research | #sonicwall | #firmware-decryption | #swi-format
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

First of a three-part series: a walkthrough of decrypting SonicWall's little-documented SWI firmware format used by NSsp 15700 and NSv updates, opening the file system for further SonicOS research.
Published
Collected

Related coverage

blog · bishopfox.com
Tearing Down (Sonic)Walls: Decrypting SonicOSX Firmware
Bishop Fox reverse-engineered SonicWall's SonicOSX firmware encryption, unlocking file-system access for research, and released Sonicrack to extract keys from VMware bundles and decrypt images.
research · swarm.ptsecurity.com
Slowburn: Looking through AMD Platform Configuration Blobs infrastructure
A deep dive into AMD Platform Configuration Blocks (APCB v1-v3) in motherboard SPI flash on an ASUS TUF Gaming A18, covering headers and structures via OpenSIL; started as a vulnerability write-up.
research · swarm.ptsecurity.com
Injection for an athlete
Digging into a Garmin sports watch via its Android app, a researcher found exported content providers leaking the user's email and profile ID and device data; the hunt began with firmware extraction.
research · github.com
php2shell: Pure HTTP Full-Chain RCE and ASLR Bypass on Stock PHP 8.4 Configurations
Overcomes historical constraints where PHP heap exploitation required display_errors=On, restricted memory limits, or target application vulnerabilities, demonstrating reliable pure-HTTP RCE and ASLR defeat against standard production ini configurations.
research · github.com
Infinity Core: Linux Kernel Core Subsystems LPE and Container Escape Research
Unlike most modern Linux kernel exploits that depend on networking, eBPF, or unprivileged user namespaces, these vulnerabilities reside in fundamental kernel core subsystems, rendering standard container sandboxes and Android application domain restrictions ineffective against local privilege escalation.
research · eshard.com
Autonomous Systems are changing the Defence Threat Model | #1
Why rapid autonomy, embedded AI and battlefield scale make implementation security a strategic engineering issue.
Back