从 bin 文件中提取

Question

所以我尝试了这个：

root@kali:~/Desktop/fmk# binwalk upgrade-2.4.0.bin 
DECIMAL       HEXADECIMAL     DESCRIPTION
--------------------------------------------------------------------------------
512           0x200           LZMA compressed data, properties: 0x6D, dictionary size: 8388608 bytes, uncompressed size: 2805816 bytes
927576        0xE2758         Squashfs filesystem, little endian, version 4.0, compression:xz, size: 12316692 bytes, 2963 inodes, blocksize: 262144 bytes, created: 2015-08-04 02:40:49

然后我使用了以下 dd：

sudo dd if=upgrade-2.4.0.bin of=pineapple.squashfs bs=1 count=12316692

而且我不能解开菠萝。在菠萝上找不到 SQUASHFS 超级块.squashfs

Answer 1

你必须设置壁球所在的偏移量

Usage: dd [OPERAND]...
   or:  dd OPTION
Copy a file, converting and formatting according to the operands.
   bs=BYTES        read and write up to BYTES bytes at a time
   cbs=BYTES       convert BYTES bytes at a time
   conv=CONVS      convert the file as per the comma separated symbol list
   count=N         copy only N input blocks
   ibs=BYTES       read up to BYTES bytes at a time (default: 512)
   if=FILE         read from FILE instead of stdin
   iflag=FLAGS     read as per the comma separated symbol list
   obs=BYTES       write BYTES bytes at a time (default: 512)
   of=FILE         write to FILE instead of stdout
   oflag=FLAGS     write as per the comma separated symbol list
   seek=N          skip N obs-sized blocks at start of output
   skip=N          skip N ibs-sized blocks at start of input
   status=LEVEL    The LEVEL of information to print to stderr;
                   'none' suppresses everything but error messages,
                   'noxfer' suppresses the final transfer statistics,
                   'progress' shows periodic transfer statistics
...

因此，要提取文件系统

dd if=upgrade-2.4.0.bin of=pineapple.squashfs bs=1 skip=927576

Answer 2

我用：

宾沃克-我升级-2.4.0.bin