1.1 KiB
1.1 KiB
Firmware Layout Checklist
First Pass
- Identify outer container, partition headers, compression, checksums, and appended images
- Record partition names, offsets, sizes, filesystem types, mount points, and hashes
- Separate bootloader, kernel, initramfs, rootfs, config, and update payloads
Boot Or Update Chain
- Boot ROM or vendor bootstrap
- Bootloader or secure boot stage
- Kernel and initramfs
- Root filesystem init path and services
- Update verifier, installer, and post-install hooks
Evidence To Keep Together
- Boundary facts: offsets, sizes, signatures, hashes, partition names
- Consumed state: keys, certs, passwords, default configs, scripts, or service files
- Reachable effect: debug service, auth branch, update bypass, or recovered artifact
Common Pitfalls
- Editing extracted files before recording pristine offsets and hashes
- Mixing config recovered from one partition with behavior sourced from another without proving the link
- Treating an extracted secret as decisive without showing where the boot or update flow actually consumes it