Firmware analysis

When it applies

You have a firmware image — a vendor download, an OTA update, or a flash dump — for a router, IoT device, or network appliance in scope. Offline firmware analysis is the static counterpart to network-appliance-attacks: it explains why a device is vulnerable and often yields the exact version, hardcoded creds, or patched-function diff behind an edge CVE.

Why it works

Firmware ships the whole system: a packed filesystem, config, keys, and binaries. Vendors routinely leave hardcoded credentials, private keys, debug/backdoor accounts, and old vulnerable services in the image — all readable offline, with no traffic to the live device, once you carve the filesystem out of the container.