{"guid":"IE5aOu8FUaPfpFv5v4rtJg","title":"An introduction to Firmware Analysis","subtitle":"Techniques - Tools - Tricks","slug":"30C3_-_5477_-_en_-_saal_1_-_201312271245_-_an_introduction_to_firmware_analysis_-_stefan_widmann","link":"http://events.ccc.de/congress/2013/Fahrplan/events/5477.html","description":"This talk gives an introduction to firmware analysis: It starts with how to retrieve the binary, e.g. get a plain file from manufacturer, extract it from an executable or memory device, or even sniff it out of an update process or internal CPU memory, which can be really tricky. After that it introduces the necessary tools, gives tips on how to detect the processor architecture, and explains some more advanced analysis techniques, including how to figure out the offsets where the firmware is loaded to, and how to start the investigation.\n","original_language":"eng","persons":["Stefan Widmann"],"view_count":795,"promoted":false,"date":"2013-12-27T01:00:00.000+01:00","release_date":"2013-12-28T01:00:00.000+01:00","updated_at":"2026-08-18T15:15:05.998+02:00","tags":["30c3","Security \u0026 Safety"],"length":2411,"duration":2411,"thumb_url":"https://static.media.ccc.de/media/congress/2013/5477-h264-hd.jpg","poster_url":"https://static.media.ccc.de/media/congress/2013/5477-h264-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/congress/2013/IE5aOu8FUaPfpFv5v4rtJg-timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/congress/2013/IE5aOu8FUaPfpFv5v4rtJg-thumbnails.vtt","frontend_link":"https://media.ccc.de/v/30C3_-_5477_-_en_-_saal_1_-_201312271245_-_an_introduction_to_firmware_analysis_-_stefan_widmann","url":"https://media.ccc.de/public/events/IE5aOu8FUaPfpFv5v4rtJg","conference_title":"30C3","conference_url":"https://media.ccc.de/public/conferences/30c3","related":[{"event_id":684,"event_guid":"import-3c6185884db88b4055","weight":2},{"event_id":1226,"event_guid":"import-ed5bb2398b87bd6661","weight":4},{"event_id":1470,"event_guid":"import-384abf403ee27a0804","weight":4},{"event_id":1606,"event_guid":"import-dc19512cf9bb9158fd","weight":2},{"event_id":1764,"event_guid":"PuDWTZPratvP-gVrrPScWQ","weight":4},{"event_id":1783,"event_guid":"3rqxJH8xZ4waSOXtJbxrDg","weight":5},{"event_id":1787,"event_guid":"Veo2ucE-l2cA-V-EaA_ckA","weight":5},{"event_id":1801,"event_guid":"I1Wkt7x8Yy2ZnP2kOGAuXA","weight":5},{"event_id":1822,"event_guid":"L10c_0Q6XDadTgKo1fzSXQ","weight":2},{"event_id":1826,"event_guid":"Ae-3k2zOoIDF16EaC2uCWA","weight":4},{"event_id":1832,"event_guid":"toykIIIHEXC1x8F7xoiYRw","weight":4},{"event_id":1849,"event_guid":"qU7LRRIvEiZBJAvAY5z_Ig","weight":3},{"event_id":1850,"event_guid":"n-OE9MQoWcUq2LFZB2e6DQ","weight":3},{"event_id":2162,"event_guid":"_lVlmBO98KMg4M-n-_A3FA","weight":3},{"event_id":2165,"event_guid":"hnRe8t6JYI_8PYnFh-dsug","weight":6},{"event_id":2291,"event_guid":"2f68e356-6c3f-4034-9640-c06d717ed96b","weight":2},{"event_id":2879,"event_guid":"3f61827f-8b17-47b4-a43c-e0dce6532cbe","weight":5},{"event_id":3309,"event_guid":"9335f1f1-c0c5-5378-b686-fffd6781c5ce","weight":5},{"event_id":4817,"event_guid":"be19fbe3-e825-4e67-93f9-a6aeda2e31af","weight":3},{"event_id":4845,"event_guid":"c21cb389-aba3-4eaa-ba1f-76f966b1686e","weight":3}],"recordings":[{"length":2384,"mime_type":"audio/mpeg","language":"eng","filename":"30c3-5477-en-An_introduction_to_Firmware_Analysis_mp3.mp3","state":"downloaded","folder":"mp3","high_quality":true,"width":640,"height":360,"updated_at":"2014-06-29T00:22:17.479+02:00","label":"eng 360p","size":55,"recording_url":"https://cdn.media.ccc.de/congress/2013/mp3/30c3-5477-en-An_introduction_to_Firmware_Analysis_mp3.mp3","url":"https://media.ccc.de/public/recordings/3687","event_url":"https://media.ccc.de/public/events/IE5aOu8FUaPfpFv5v4rtJg","conference_url":"https://media.ccc.de/public/conferences/30c3"},{"length":2411,"mime_type":"video/mp4","language":"eng","filename":"30c3-5477-en-An_introduction_to_Firmware_Analysis_h264-hq.mp4","state":"downloaded","folder":"mp4","high_quality":true,"width":640,"height":360,"updated_at":"2016-01-27T11:03:59.101+01:00","label":"eng 360p","size":114,"recording_url":"https://cdn.media.ccc.de/congress/2013/mp4/30c3-5477-en-An_introduction_to_Firmware_Analysis_h264-hq.mp4","url":"https://media.ccc.de/public/recordings/3686","event_url":"https://media.ccc.de/public/events/IE5aOu8FUaPfpFv5v4rtJg","conference_url":"https://media.ccc.de/public/conferences/30c3"},{"length":2411,"mime_type":"video/webm","language":"eng","filename":"30c3-5477-en-An_introduction_to_Firmware_Analysis_webm.webm","state":"downloaded","folder":"webm","high_quality":true,"width":640,"height":360,"updated_at":"2016-01-27T11:03:59.139+01:00","label":"eng 360p","size":80,"recording_url":"https://cdn.media.ccc.de/congress/2013/webm/30c3-5477-en-An_introduction_to_Firmware_Analysis_webm.webm","url":"https://media.ccc.de/public/recordings/3685","event_url":"https://media.ccc.de/public/events/IE5aOu8FUaPfpFv5v4rtJg","conference_url":"https://media.ccc.de/public/conferences/30c3"},{"length":2411,"mime_type":"video/mp4","language":"eng","filename":"30c3-5477-en-An_introduction_to_Firmware_Analysis_h264-hd.mp4","state":"downloaded","folder":"mp4-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2016-01-26T08:07:11.729+01:00","label":"eng 1080p","size":298,"recording_url":"https://cdn.media.ccc.de/congress/2013/mp4-hd/30c3-5477-en-An_introduction_to_Firmware_Analysis_h264-hd.mp4","url":"https://media.ccc.de/public/recordings/4536","event_url":"https://media.ccc.de/public/events/IE5aOu8FUaPfpFv5v4rtJg","conference_url":"https://media.ccc.de/public/conferences/30c3"},{"length":2411,"mime_type":"video/mp4","language":"eng","filename":"30c3-5477-en-An_introduction_to_Firmware_Analysis_h264-iprod.mp4","state":"downloaded","folder":"mp4-lq","high_quality":false,"width":512,"height":288,"updated_at":"2016-01-26T08:07:14.879+01:00","label":"eng 288p","size":41,"recording_url":"https://cdn.media.ccc.de/congress/2013/mp4-lq/30c3-5477-en-An_introduction_to_Firmware_Analysis_h264-iprod.mp4","url":"https://media.ccc.de/public/recordings/4628","event_url":"https://media.ccc.de/public/events/IE5aOu8FUaPfpFv5v4rtJg","conference_url":"https://media.ccc.de/public/conferences/30c3"},{"length":null,"mime_type":"application/x-subrip","language":"eng","filename":"30c3-5477-en-An_introduction_to_Firmware_Analysis.en.srt","state":"complete","folder":"","high_quality":true,"width":null,"height":null,"updated_at":"2021-02-21T17:45:12.938+01:00","label":"eng","size":null,"recording_url":"https://cdn.media.ccc.de/congress/2013/30c3-5477-en-An_introduction_to_Firmware_Analysis.en.srt","url":"https://media.ccc.de/public/recordings/44350","event_url":"https://media.ccc.de/public/events/IE5aOu8FUaPfpFv5v4rtJg","conference_url":"https://media.ccc.de/public/conferences/30c3"},{"length":null,"mime_type":"application/x-subrip","language":"fin","filename":"30c3-5477-en-An_introduction_to_Firmware_Analysis.fi.srt","state":"translated","folder":"","high_quality":true,"width":null,"height":null,"updated_at":"2023-09-02T02:39:36.304+02:00","label":"fin (translated)","size":null,"recording_url":"https://cdn.media.ccc.de/congress/2013/30c3-5477-en-An_introduction_to_Firmware_Analysis.fi.srt","url":"https://media.ccc.de/public/recordings/69684","event_url":"https://media.ccc.de/public/events/IE5aOu8FUaPfpFv5v4rtJg","conference_url":"https://media.ccc.de/public/conferences/30c3"},{"length":2411,"mime_type":"audio/opus","language":"eng","filename":"30c3-5477-en-An_introduction_to_Firmware_Analysis_opus.opus","state":"downloaded","folder":"opus","high_quality":true,"width":0,"height":0,"updated_at":"2014-11-11T12:42:55.054+01:00","label":"eng","size":26,"recording_url":"https://cdn.media.ccc.de/congress/2013/opus/30c3-5477-en-An_introduction_to_Firmware_Analysis_opus.opus","url":"https://media.ccc.de/public/recordings/4764","event_url":"https://media.ccc.de/public/events/IE5aOu8FUaPfpFv5v4rtJg","conference_url":"https://media.ccc.de/public/conferences/30c3"}]}