Firmware Modification Kit

This kit gives the user the ability to make changes to a firmware image without recompiling the firmware sources. It works by extracting the firmware into its component parts, then extracting the file system image. The user can then make modifications to the extracted file system, then rebuild the firmware image.

It is most useful for quick debugging of problems without having to rebuild the entire firmware image. It can even be deployed 'on the road'. A variety of formats are supported, mainly linux based GPL images known to be around; additionally, it can be used to customize DD-WRT web GUIs.

We've written a few custom utilities (i.e. untrx, wrt_vx_imgtool, spliter3) to support various devices. We've also made modifications to squashfs-tools and added known variants of squashfs-tools.

Recently, Binwalk was also integrated, to help identify and support even more firmware types and segment/filesystem types.

NO GUARANTEE IS PROVIDED. WITH EVERY REBUILT IMAGE YOU STAND THE CHANCE OF BRICKING YOUR DEVICE (EITHER A SOFT OR HARD BRICK). DO NOT USE THIS TOOL IF YOU CAN NOT RECOVER FROM SUCH A BRICK. BY USING THIS TOOL YOU ASSUME LIABILITY OF ALL DAMAGES, TANGIBLE AND INTANGIBLE, RESULTING FROM THE USE OR MIS-USE OF THIS SOFTWARE.

Un-guaranteed support fir firmware image formats for the following devices:

1. WRT54G v1 - v6
2. WRT54GS v1 - v6
3. WRTSL54G v?
4. M10 (Cisco Valet)
5. ASUS WL-330g
6. ASUS WL-500g/p
7. ASUS WL-520g
8. ASUS WL-530g
9. Belkin 7230-4 (some versions)
10. Belkin 7231-4 (?)
11. Buffalo WHR-G54S
12. Buffalo WHR-HP-G54
13. Siemens SE505
14. Trendnet TEW-632BRP
15. D-Link DIR615 (maybe, untested)
16. many others..

Some specific firmware types:

1. OpenWrt
2. Tomato
3. X-Wrt
4. DD-WRT v23 for all models
5. DD-WRT v24 SP1+ (for some models ONLY)

The following filesystems can be extracted and assembled:

1. squashfs 2.x (zlib)
2. squashfs 2.x (lzma)
3. squashfs 3.x (zlib)
4. squashfs 3.x (lzma)
5. squashfs 3.x (lzma with prepended encoding params)
6. squashfs 3.x (lzma with other variations)
7. JFFS2
8. cramfs (zlib)

This utility has recently taken on a new contributor who wrote his own new rendition of the extraction and rebuild scripts and inclusion (or creation) of related tools. His are superior at identifying more types of firmwares. His scripts have the -ng.sh filename.

The original scripts are still necessary and could work on some firmware images that the newer scripts may not work on. Therefore, they are being kept around, at least for now.

Homepage

http://code.google.com/p/firmware-mod-kit/