[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6FF6YC3QB10PYC6B1P8BED2":3,"skill-same:01M6FF6YC3QB10PYC6B1P8BED2":48},{"skillNo":4,"name":5,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":15,"categories":16,"keywords":17,"publishedAt":21,"linkOnly":22,"markdownContent":23,"markdownBody":23,"frontMatter":24,"refName":25,"commitSha":26,"skillDirectory":27,"forksCount":28,"repositoryHtmlUrl":29,"repositoryHomepageUrl":30,"ownerHtmlUrl":31,"ownerBlogUrl":6,"ownerDescription":32,"updatedAt":33,"install":34,"resources":47},"01M6FF6YC3QB10PYC6B1P8BED2","firmware-analyst",null,"ComeOnOliver\u002Fskillshub","ComeOnOliver","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F43215937?v=4","01M6E5JNFECJAAVFE0W7SMWWD2","Haoran Shu","01M6E5JNNDQS7AJZDYFQ8TPZCK",67,"MIT","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Frmyndharis\u002Fantigravity-skills\u002Ffirmware-analyst\u002FSKILL.md",[],[18,19,20],"firmware","firmware analyst","analyst","2026-11-10 10:12:30",false,"# Download from vendor\nwget http:\u002F\u002Fvendor.com\u002Ffirmware\u002Fupdate.bin\n\n# Extract from device via debug interface\n# UART console access\nscreen \u002Fdev\u002FttyUSB0 115200\n# Copy firmware partition\ndd if=\u002Fdev\u002Fmtd0 of=\u002Ftmp\u002Ffirmware.bin\n\n# Extract via network protocols\n# TFTP during boot\n# HTTP\u002FFTP from device web interface\n```\n\n### Hardware Methods\n```\nUART access         - Serial console connection\nJTAG\u002FSWD           - Debug interface for memory access\nSPI flash dump     - Direct chip reading\nNAND\u002FNOR dump      - Flash memory extraction\nChip-off           - Physical chip removal and reading\nLogic analyzer     - Protocol capture and analysis\n```\n\n## Use this skill when\n\n- Working on download from vendor tasks or workflows\n- Needing guidance, best practices, or checklists for download from vendor\n\n## Do not use this skill when\n\n- The task is unrelated to download from vendor\n- You need a different domain or tool outside this scope\n\n## Instructions\n\n- Clarify goals, constraints, and required inputs.\n- Apply relevant best practices and validate outcomes.\n- Provide actionable steps and verification.\n- If detailed examples are required, open `resources\u002Fimplementation-playbook.md`.\n\n## Firmware Analysis Workflow\n\n### Phase 1: Identification\n```bash\n# Basic file identification\nfile firmware.bin\nbinwalk firmware.bin\n\n# Entropy analysis (detect compression\u002Fencryption)\n# Binwalk v3: generates entropy PNG graph\nbinwalk --entropy firmware.bin\nbinwalk -E firmware.bin  # Short form\n\n# Identify embedded file systems and auto-extract\nbinwalk --extract firmware.bin\nbinwalk -e firmware.bin  # Short form\n\n# String analysis\nstrings -a firmware.bin | grep -i \"password\\|key\\|secret\"\n```\n\n### Phase 2: Extraction\n```bash\n# Binwalk v3 recursive extraction (matryoshka mode)\nbinwalk --extract --matryoshka firmware.bin\nbinwalk -eM firmware.bin  # Short form\n\n# Extract to custom directory\nbinwalk -e -C .\u002Fextracted firmware.bin\n\n# Verbose output during recursive extraction\nbinwalk -eM --verbose firmware.bin\n\n# Manual extraction for specific formats\n# SquashFS\nunsquashfs filesystem.squashfs\n\n# JFFS2\njefferson filesystem.jffs2 -d output\u002F\n\n# UBIFS\nubireader_extract_images firmware.ubi\n\n# YAFFS\nunyaffs filesystem.yaffs\n\n# Cramfs\ncramfsck -x output\u002F filesystem.cramfs\n```\n\n### Phase 3: File System Analysis\n```bash\n# Explore extracted filesystem\nfind . -name \"*.conf\" -o -name \"*.cfg\"\nfind . -name \"passwd\" -o -name \"shadow\"\nfind . -type f -executable\n\n# Find hardcoded credentials\ngrep -r \"password\" .\ngrep -r \"api_key\" .\ngrep -rn \"BEGIN RSA PRIVATE KEY\" .\n\n# Analyze web interface\nfind . -name \"*.cgi\" -o -name \"*.php\" -o -name \"*.lua\"\n\n# Check for vulnerable binaries\nchecksec --dir=.\u002Fbin\u002F\n```\n\n### Phase 4: Binary Analysis\n```bash\n# Identify architecture\nfile bin\u002Fhttpd\nreadelf -h bin\u002Fhttpd\n\n# Load in Ghidra with correct architecture\n# For ARM: specify ARM:LE:32:v7 or similar\n# For MIPS: specify MIPS:BE:32:default\n\n# Set up cross-compilation for testing\n# ARM\narm-linux-gnueabi-gcc exploit.c -o exploit\n# MIPS\nmipsel-linux-gnu-gcc exploit.c -o exploit\n```\n\n## Common Vulnerability Classes\n\n### Authentication Issues\n```\nHardcoded credentials     - Default passwords in firmware\nBackdoor accounts         - Hidden admin accounts\nWeak password hashing     - MD5, no salt\nAuthentication bypass     - Logic flaws in login\nSession management        - Predictable tokens\n```\n\n### Command Injection\n```c\n\u002F\u002F Vulnerable pattern\nchar cmd[256];\nsprintf(cmd, \"ping %s\", user_input);\nsystem(cmd);\n\n\u002F\u002F Test payloads\n; id\n| cat \u002Fetc\u002Fpasswd\n`whoami`\n$(id)\n```\n\n### Memory Corruption\n```\nStack buffer overflow    - strcpy, sprintf without bounds\nHeap overflow           - Improper allocation handling\nFormat string           - printf(user_input)\nInteger overflow        - Size calculations\nUse-after-free          - Improper memory management\n```\n\n### Information Disclosure\n```\nDebug interfaces        - UART, JTAG left enabled\nVerbose errors          - Stack traces, paths\nConfiguration files     - Exposed credentials\nFirmware updates        - Unencrypted downloads\n```\n\n## Tool Proficiency\n\n### Extraction Tools\n```\nbinwalk v3           - Firmware extraction and analysis (Rust rewrite, faster, fewer false positives)\nfirmware-mod-kit     - Firmware modification toolkit\njefferson            - JFFS2 extraction\nubi_reader           - UBIFS extraction\nsasquatch            - SquashFS with non-standard features\n```\n\n### Analysis Tools\n```\nGhidra               - Multi-architecture disassembly\nIDA Pro              - Commercial disassembler\nBinary Ninja         - Modern RE platform\nradare2              - Scriptable analysis\nFirmware Analysis Toolkit (FAT)\nFACT                 - Firmware Analysis and Comparison Tool\n```\n\n### Emulation\n```\nQEMU                 - Full system and user-mode emulation\nFirmadyne            - Automated firmware emulation\nEMUX                 - ARM firmware emulator\nqemu-user-static     - Static QEMU for chroot emulation\nUnicorn              - CPU emulation framework\n```\n\n### Hardware Tools\n```\nBus Pirate           - Universal serial interface\nLogic analyzer       - Protocol analysis\nJTAGulator           - JTAG\u002FUART discovery\nFlashrom             - Flash chip programmer\nChipWhisperer        - Side-channel analysis\n```\n\n## Emulation Setup\n\n### QEMU User-Mode Emulation\n```bash\n# Install QEMU user-mode\napt install qemu-user-static\n\n# Copy QEMU static binary to extracted rootfs\ncp \u002Fusr\u002Fbin\u002Fqemu-arm-static .\u002Fsquashfs-root\u002Fusr\u002Fbin\u002F\n\n# Chroot into firmware filesystem\nsudo chroot squashfs-root \u002Fusr\u002Fbin\u002Fqemu-arm-static \u002Fbin\u002Fsh\n\n# Run specific binary\nsudo chroot squashfs-root \u002Fusr\u002Fbin\u002Fqemu-arm-static \u002Fbin\u002Fhttpd\n```\n\n### Full System Emulation with Firmadyne\n```bash\n# Extract firmware\n.\u002Fsources\u002Fextractor\u002Fextractor.py -b brand -sql 127.0.0.1 \\\n    -np -nk \"firmware.bin\" images\n\n# Identify architecture and create QEMU image\n.\u002Fscripts\u002FgetArch.sh .\u002Fimages\u002F1.tar.gz\n.\u002Fscripts\u002FmakeImage.sh 1\n\n# Infer network configuration\n.\u002Fscripts\u002FinferNetwork.sh 1\n\n# Run emulation\n.\u002Fscratch\u002F1\u002Frun.sh\n```\n\n## Security Assessment\n\n### Checklist\n```markdown\n[ ] Firmware extraction successful\n[ ] File system mounted and explored\n[ ] Architecture identified\n[ ] Hardcoded credentials search\n[ ] Web interface analysis\n[ ] Binary security properties (checksec)\n[ ] Network services identified\n[ ] Debug interfaces disabled\n[ ] Update mechanism security\n[ ] Encryption\u002Fsigning verification\n[ ] Known CVE check\n```\n\n### Reporting Template\n```markdown\n# Firmware Security Assessment\n\n## Device Information\n- Manufacturer:\n- Model:\n- Firmware Version:\n- Architecture:\n\n## Findings Summary\n| Finding | Severity | Location |\n|---------|----------|----------|\n\n## Detailed Findings\n### Finding 1: [Title]\n- Severity: Critical\u002FHigh\u002FMedium\u002FLow\n- Location: \u002Fpath\u002Fto\u002Ffile\n- Description:\n- Proof of Concept:\n- Remediation:\n\n## Recommendations\n1. ...\n```\n\n## Ethical Guidelines\n\n### Appropriate Use\n- Security audits with device owner authorization\n- Bug bounty programs\n- Academic research\n- CTF competitions\n- Personal device analysis\n\n### Never Assist With\n- Unauthorized device compromise\n- Bypassing DRM\u002Flicensing illegally\n- Creating malicious firmware\n- Attacking devices without permission\n- Industrial espionage\n\n## Response Approach\n\n1. **Verify authorization**: Ensure legitimate research context\n2. **Assess device**: Understand target device type and architecture\n3. **Guide acquisition**: Appropriate firmware extraction method\n4. **Analyze systematically**: Follow structured analysis workflow\n5. **Identify issues**: Security vulnerabilities and misconfigurations\n6. **Document findings**: Clear reporting with remediation guidance\n",{},"main","def8531e65114c0fca8fb8551c1871ee0eed705c","skills\u002Frmyndharis\u002Fantigravity-skills\u002Ffirmware-analyst",24,"https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub","https:\u002F\u002Fskillshub.wtf","https:\u002F\u002Fgithub.com\u002FComeOnOliver","AI & Blockchain Engineer\r\n","2026-06-24 22:07:19",{"source":7,"skillName":5,"commands":35,"prompt":45,"zipAvailable":46},[36,39,42],{"tool":37,"command":38},"npx","npx skills add ComeOnOliver\u002Fskillshub --skill firmware-analyst",{"tool":40,"command":41},"bunx","bunx skills add ComeOnOliver\u002Fskillshub --skill firmware-analyst",{"tool":43,"command":44},"pnpm","pnpm dlx skills add ComeOnOliver\u002Fskillshub --skill firmware-analyst","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Frmyndharis\u002Fantigravity-skills\u002Ffirmware-analyst\u002FSKILL.md",true,[],[49,63,73,82,88,95],{"skillNo":50,"name":51,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":52,"categories":53,"keywords":59,"publishedAt":21},"01M6FKJN13GMG4KY57J3QD8GY5","model-hierarchy-skill","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzscole\u002Fmodel-hierarchy-skill\u002Fmodel-hierarchy-skill\u002FSKILL.md",[54],{"categoryNo":55,"categoryName":56,"taxonomyType":57,"taxonomyTypeDesc":58},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[60,61,62],"model","model hierarchy","model hierarchy skill",{"skillNo":64,"name":65,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":66,"categories":67,"keywords":69,"publishedAt":21},"01M6FKJJJ6GCAMR4PPPRD12M5X","zoom-mcp","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fzoom-mcp\u002FSKILL.md",[68],{"categoryNo":55,"categoryName":56,"taxonomyType":57,"taxonomyTypeDesc":58},[70,71,72],"MCP","zoom","zoom mcp",{"skillNo":74,"name":75,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":76,"categories":77,"keywords":78,"publishedAt":21},"01M6FKJE3KYT3KPEZMEEHYKA6K","zoom-apps-sdk","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fzoom-apps-sdk\u002FSKILL.md",[],[79,80,81,71],"sdk","zoom apps sdk","apps",{"skillNo":83,"name":84,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":85,"categories":86,"keywords":87,"publishedAt":21},"01M6FKJ9EDH9Q5VWDF8HAJRSP0","windows","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fwindows\u002FSKILL.md",[],[84],{"skillNo":89,"name":90,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":91,"categories":92,"keywords":94,"publishedAt":21},"01M6FKJ666BEEFC3AE9GJ72Q93","whiteboard","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fwhiteboard\u002FSKILL.md",[93],{"categoryNo":55,"categoryName":56,"taxonomyType":57,"taxonomyTypeDesc":58},[90],{"skillNo":96,"name":97,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":98,"categories":99,"keywords":100,"publishedAt":21},"01M6FKJ21WFCDGTJQ2Q91T9DVW","websockets","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fwebsockets\u002FSKILL.md",[],[97]]