28 lines
1.1 KiB
Markdown
28 lines
1.1 KiB
Markdown
# Firmware Layout Checklist
|
|
|
|
## First Pass
|
|
|
|
- Identify outer container, partition headers, compression, checksums, and appended images
|
|
- Record partition names, offsets, sizes, filesystem types, mount points, and hashes
|
|
- Separate bootloader, kernel, initramfs, rootfs, config, and update payloads
|
|
|
|
## Boot Or Update Chain
|
|
|
|
1. Boot ROM or vendor bootstrap
|
|
2. Bootloader or secure boot stage
|
|
3. Kernel and initramfs
|
|
4. Root filesystem init path and services
|
|
5. Update verifier, installer, and post-install hooks
|
|
|
|
## Evidence To Keep Together
|
|
|
|
- Boundary facts: offsets, sizes, signatures, hashes, partition names
|
|
- Consumed state: keys, certs, passwords, default configs, scripts, or service files
|
|
- Reachable effect: debug service, auth branch, update bypass, or recovered artifact
|
|
|
|
## Common Pitfalls
|
|
|
|
- Editing extracted files before recording pristine offsets and hashes
|
|
- Mixing config recovered from one partition with behavior sourced from another without proving the link
|
|
- Treating an extracted secret as decisive without showing where the boot or update flow actually consumes it
|