Billion BiGuard S20

[Christoph Langbein]

Compiled without problems, but the output is confusing. 
Long time output like this:
VD PRIM!
rc: -1 fread(@00000864)
VD SUP!
VD SUP!
VD SUP!
VD PRIM!
rc: -1 fread(@00000a51)
VD PRIM!
rc: -1 fread(@00000b6d)
VD SUP!
VD SUP!
VD PRIM!
rc: -1 fread(@00000ce1)
VD PRIM!
rc: -1 fread(@00000ce4)
VD PRIM!
rc: -1 fread(@00000dcc)
VD PRIM!
rc: -1 fread(@00000ddf)
<---SNIP-->
then:
Matching CPIO signature #2 at offset 183048
Score: 50%
Matching GZIP signature #0 at offset 203665
Score: 32%
Matching GZIP signature #0 at offset 259078
Score: 32%
Matching FAT signature #7 at offset 288570
Score: 22%
Matching GZIP signature #0 at offset 466382
Score: 36%
Matching GZIP signature #0 at offset 593610
Score: 36%
Matching FAT signature #7 at offset 1057744
Score: 22%
Matching FAT signature #7 at offset 1144757
Score: 22%
Matching CPIO signature #2 at offset 1204733
Score: 50%
Matching CPIO signature #2 at offset 1314038
Score: 50%
Matching CPIO signature #2 at offset 1402040
Score: 50%
Matching GZIP signature #0 at offset 1474626
Score: 30%
Matching GZIP signature #0 at offset 1935912
Score: 100%
Matching FAT signature #7 at offset 1979646
Score: 22%
Matching CPIO signature #2 at offset 2071383
Score: 50%
Matching GZIP signature #0 at offset 2220275
Score: 36%
Matching GZIP signature #0 at offset 2394315
Score: 36%
Matching CPIO signature #2 at offset 2653094
Score: 50%
Matching GZIP signature #0 at offset 2816033
Score: 36%
Matching GZIP signature #0 at offset 2855225
Score: 36%
<--SNIP-->
with different scores (Logfile size is 1,9M).  After that long time as
above and then 100% ZIP Score mixed with cpio again. I think this are
the jars embeded in the firmware.
I've no idea what to do next ...

Christoph

Am Dienstag, den 04.03.2008, 11:36 +0100 schrieb Benjamin Henrion:
> On Tue, Mar 4, 2008 at 11:13 AM, Christoph Langbein
> <christoph at greatescape.de> wrote:
> > Hello,
> >  I own an Billion BiGuard S20
> >  (http://www.billion.com/product/ssl-ipsec-vpn/biguards20-ssl-vpn-security-gateway.html). The Router is using the applet from www.javassh.org and one applet I think from http://properjavardp.sourceforge.net/ . Old firmware versions have an OS Fingerprint shown as Linux OS, this has changed with the current firmware. But I'm not really sure.
> >
> >  The firmware is named BiGuardS20_v313.afw. I've tried to mount it
> >  loopback, no success.a "file BiGuardS20_v313.afw" shows
> >  BiGuardS20_v313.afw: data
> >  The firmware begins with 3.13^@ÿÿÿX1234567890abcdei<84><98>.
> >  Any hints how I could open such an image ?
> 
> Try this tool to see if it detects something:
> 
> http://uwfirmforce.wikidot.com/
> 
> If you have problems compiling it, I can give you a binary.
>