Cisco ASA Static Analysis Guide
ID: a0f5691f-44b6-57f5-85fd-25f2f04375c0
STIX ID: report--a0f5691f-44b6-57f5-85fd-25f2f04375c0
Feed Name: NCC Research
Threat Score
This blog post documents a methodology and toolset (asafw) for extracting, modifying, and repacking Cisco ASA firmware (asa*.bin and qcow2 images) to enable debugging and targeted analysis; it shows how to enable gdb on devices, automates unpack/repack workflows, and datamines hundreds of firmware images to map mitigations and identify which branches are vulnerable to CVE-2016-1287 and CVE-2016-6366, and publishes a mitigation summary and scripts to aid large-scale firmware testing.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.