FW – Datavoir.IO

Datavoir-FW

Deconstructed firmware knowledge sets

Deconstructed. Disentangled.

The building blocks of firmware tell us how it was engineered and what truly is important inside the device they run on. Prevalent code sharing and common upstream manufacturers means that building blocks are often shared across vendors and device families.

Datavoir-FW is a knowledge set created to aid in the development of scalable IoT and non-IoT device emulation by making it easy to identify common building blocks, how they interoperate, and reducing the emulator development time for similar devices.

Features

Unpack. Analyze. Discover.

Multiple Unpacking Techniques

Knowledge extracted from rare firmware that lack compatibility from unpackers like binwalk is brought front and center to give you a complete firmware deconstruction picture, so no firmware is left behind

Static and Dynamic Analysis

From file hashes and MIME types to embedded URIs, over a dozen static and dynamic analyses generate action-ready insight from our hard-to-find, rare firmware to enable tunable emulation fidelity

Rare Firmware Knowledge

From well-known to not-so-well-known vendors, back from the early days of IoT to today's ICS drivers, you can be certain that your use case is fully covered

Research Challenge? Meet Large Sample Size.

Firmware Vendors

0 +

Device Models

0 +

Firmware Files

0 +

Analytics

Static. Dynamic. Magically Integrated.

Files

File metadata, including size, MIME type, hashes and encodings

Vulnerabilities

CVEs and publicly reported vulnerabilities (if it is in a blog post, it is in Datavoir.IO)

Network Profiles

Passive and active network profiles of software packages and firmware

Cryptography

Embedded public keys, private keys and any other cryptomaterial

Executables

ELF or PE executables, identified headers and control flow graphs (CFGs)

Meta Analytics

Software similarities, file distributions, network signatures