Debian 7.0,我使用binwalk提取了firmware.bin映像。提取的内容是squashfs-root
包含子目录的文件夹和一个单独的file.squashfs
文件。我试过unsquashfs
这个文件.squashfs文件,但操作失败:
unsquashfs -l file.squashfs
Can't find a SQUASHFS superblock on file.squashfs
问题是什么?
编辑:是的,sasquatch file.squashfs
有效:
sasquatch D1000.squashfs
SquashFS version [768.256] / inode count [-1073676288] suggests a SquashFS image of a different endianess
Non-standard SquashFS Magic: qshs
Reading a different endian SQUASHFS filesystem on D1000.squashfs
Parallel unsquashfs: Using 2 processors
Trying to decompress using default gzip decompressor...
Trying to decompress with lzma...
Detected lzma compression
413 inodes (430 blocks) to write
答案1
由于file
无法识别它,供应商可能使用了自定义的 SquashFS 魔术签名。我预计这unsquashfs
也会给您带来无法找到有效超级块的错误。
给大脚野人尝试一下;它是 unsquashfs 的修改版本,试图支持此类供应商黑客攻击。