[+] Check binaries for weak functions (radare mode)
This module identifies the usage of critical binary functions in firmware via radare2.
Examples of binary functions are system, strcpy, printf and strcat. These functions are configured in the configuration
file config/functions.cfg. The module counts the usages per binary. For strcpy functions it also counts strlen functions
right before the strcpy function. Additionally it checks if the binary is a known Linux binary or unknown and probably
a vendor binary.
[*] Vulnerable functions: fprintf mmap popen printf sprintf strcat strcpy system
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/lib/apache2/modules/mod_proxy_ftp.so (-rw-r--r-- root root) - common linux file: yes - Vulnerable function: strcat / Function count: 3 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/lib/conf-migrate/upgrade-run.d/video-config-migrator (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 19 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/lib/libimpl_wsd_tr2.so (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 1 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/lib/libwsanalytics.so (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 5 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/lib/libaprutil-1.so.0.6.1 (-rw-r--r-- root root) - common linux file: yes - Vulnerable function: printf / Function count: 39 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/lib/systemd/systemd-sleep (-rw-r--r-- root root) - common linux file: yes - Vulnerable function: system / Function count: 1 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/lib/systemd/systemd-shutdown (-rw-r--r-- root root) - common linux file: yes - Vulnerable function: system / Function count: 2 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/lib/systemd/system-generators/rendezvous-generator (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 3 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/powerd (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 1 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/video-service (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 9 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/vdo-mode-ctrl (-rw-r--r-- root root) - common linux file: no - Vulnerable function: fprintf / Function count: 1 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/dptzd (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 22 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/axfer (-rw-r--r-- root root) - common linux file: yes - Vulnerable function: printf / Function count: 51 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/htpasswd (-rw-r--r-- root root) - common linux file: yes - Vulnerable function: printf / Function count: 13 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/vdo-mode-ctrl (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 1 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/htpasswd (-rw-r--r-- root root) - common linux file: yes - Vulnerable function: sprintf / Function count: 6 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/stclient (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 30 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/stclient (-rw-r--r-- root root) - common linux file: no - Vulnerable function: sprintf / Function count: 2 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/vdo-client (-rw-r--r-- root root) - common linux file: no - Vulnerable function: fprintf / Function count: 46 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/audio-service (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 3 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/temperature_ctrld (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 63 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/vdo-client (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 46 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/focusd (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 46 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/vdo-blend-client (-rw-r--r-- root root) - common linux file: no - Vulnerable function: fprintf / Function count: 1 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/indexer (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 245 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/vdo-blend-client (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 1 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/busctl (-rw-r--r-- root root) - common linux file: yes - Vulnerable function: system / Function count: 1 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/dbus-daemon (-rw-r--r-- root root) - common linux file: yes - Vulnerable function: printf / Function count: 17 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/storage_manager (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 66 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/supervisedio_cgi (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 2 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/storage_manager (-rw-r--r-- root root) - common linux file: no - Vulnerable function: sprintf / Function count: 1 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/storage_serverreport_tool (-rw-r--r-- 211 211) - common linux file: no - Vulnerable function: printf / Function count: 1 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/dynamic_overlayd (-rw-r--r-- 312 312) - common linux file: no - Vulnerable function: printf / Function count: 8 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/scp.openssh (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 32 / networking: yes
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/dynamic_overlayd (-rw-r--r-- 312 312) - common linux file: no - Vulnerable function: sprintf / Function count: 2 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/scp.openssh (-rw-r--r-- root root) - common linux file: no - Vulnerable function: sprintf / Function count: 8 / networking: yes
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/dbus-daemon (-rw-r--r-- root root) - common linux file: yes - Vulnerable function: system / Function count: 16 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/storage_manager (-rw-r--r-- root root) - common linux file: no - Vulnerable function: system / Function count: 2 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/overlayd (-rw-r--r-- 299 299) - common linux file: no - Vulnerable function: printf / Function count: 45 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/depd (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 4 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/addon-pre-installer (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 1 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/res_finder (-rw-r--r-- root docker) - common linux file: no - Vulnerable function: printf / Function count: 3 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/vdo-input-client (-rw-r--r-- root root) - common linux file: no - Vulnerable function: fprintf / Function count: 6 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/addon-pre-installer-finalizer (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 1 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/vdo-input-client (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 6 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/vdo-input-ctrl (-rw-r--r-- root root) - common linux file: no - Vulnerable function: fprintf / Function count: 1 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/send_event (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 1 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/ruleengined (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 2 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/vdo-input-ctrl (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 1 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/overlayimage.cgi (-rw-r--r-- root messagebus) - common linux file: no - Vulnerable function: printf / Function count: 11 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/wsd (-rw-r--r-- 205 205) - common linux file: yes - Vulnerable function: printf / Function count: 1 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/recording_serverreport_tool (-rw-r--r-- 211 211) - common linux file: no - Vulnerable function: printf / Function count: 5 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/ctod (-rw-r--r-- root video) - common linux file: no - Vulnerable function: printf / Function count: 2 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/pdbtool (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 29 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/systemd-tmpfiles (-rw-r--r-- root root) - common linux file: yes - Vulnerable function: printf / Function count: 3 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/motion (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 15 / networking: yes
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/ptzaurus_server_report (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 1 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/mqtt-messaging-service (-rw-r--r-- 422 422) - common linux file: no - Vulnerable function: system / Function count: 1 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/export-recording (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 15 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/param_upgrader (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 9 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/io2d (-rw-r--r-- root root) - common linux file: no - Vulnerable function: fprintf / Function count: 7 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/vdo-user-encode-client (-rw-r--r-- root root) - common linux file: no - Vulnerable function: fprintf / Function count: 37 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/htdigest (-rw-r--r-- root root) - common linux file: yes - Vulnerable function: printf / Function count: 8 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/video-scene-manager (-rw-r--r-- root root) - common linux file: no - Vulnerable function: system / Function count: 4 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/vdo-user-encode-client (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 37 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/video-service-legacy (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 8 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/lightd (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 32 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/io2d (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 39 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/ptzaurus (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 163 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/lightd (-rw-r--r-- root root) - common linux file: no - Vulnerable function: sprintf / Function count: 3 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/vdo-stream-ctrl (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 3 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/sync-streamer-video-conf (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 2 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/event_switch (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 6 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/ptzaurus (-rw-r--r-- root root) - common linux file: no - Vulnerable function: sprintf / Function count: 2 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/ssh-keygen (-rw-r--r-- root root) - common linux file: yes - Vulnerable function: printf / Function count: 30 / networking: yes
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/io_cgi (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 17 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/com.axis.CaptureMode1 (-rw-r--r-- 315 315) - common linux file: no - Vulnerable function: printf / Function count: 15 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/scheduled (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 9 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/ssh-keygen (-rw-r--r-- root root) - common linux file: yes - Vulnerable function: sprintf / Function count: 13 / networking: yes
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/scheduled (-rw-r--r-- root root) - common linux file: no - Vulnerable function: sprintf / Function count: 1 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/presettourd (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 23 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/presettourd (-rw-r--r-- root root) - common linux file: no - Vulnerable function: sprintf / Function count: 18 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/vdo-virtual-input-server (-rw-r--r-- root root) - common linux file: no - Vulnerable function: fprintf / Function count: 9 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/handle_eventdecl (-rw-r--r-- 150 150) - common linux file: no - Vulnerable function: printf / Function count: 1 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/addon-registry (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 1 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/vdo-virtual-input-server (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 9 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/editcgi.cgi (-rw-r--r-- root _ssh) - common linux file: no - Vulnerable function: printf / Function count: 3 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/htdbm (-rw-r--r-- root root) - common linux file: yes - Vulnerable function: printf / Function count: 12 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/htdbm (-rw-r--r-- root root) - common linux file: yes - Vulnerable function: sprintf / Function count: 6 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/vdo-output-ctrl (-rw-r--r-- root root) - common linux file: no - Vulnerable function: fprintf / Function count: 1 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/lightlogic (-rw-r--r-- root root) - common linux file: no - Vulnerable function: system / Function count: 1 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/journalctl (-rw-r--r-- root root) - common linux file: yes - Vulnerable function: system / Function count: 1 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/metadatad (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 8 / networking: yes
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/vdo-stream-monitor (-rw-r--r-- root root) - common linux file: no - Vulnerable function: fprintf / Function count: 1 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/vdo-output-ctrl (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 1 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/vdo-stream-monitor (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 1 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/virtualinputd (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 1 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/html/axis-cgi/geolocation/get.cgi (-rw-r--r-- root _ssh) - common linux file: no - Vulnerable function: printf / Function count: 3 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/actionengined (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 48 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/html/axis-cgi/geolocation/set.cgi (-rw-r--r-- root _ssh) - common linux file: no - Vulnerable function: printf / Function count: 3 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/actionengined (-rw-r--r-- root root) - common linux file: no - Vulnerable function: sprintf / Function count: 5 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/html/axis-cgi/zipstream/setfpsmode.cgi (-rw-r--r-- 150 messagebus) - common linux file: no - Vulnerable function: printf / Function count: 62 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/html/axis-cgi/zipstream/getschemaversions.cgi (-rw-r--r-- 150 messagebus) - common linux file: no - Vulnerable function: printf / Function count: 62 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/html/axis-cgi/zipstream/setgop.cgi (-rw-r--r-- 150 messagebus) - common linux file: no - Vulnerable function: printf / Function count: 62 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/html/axis-cgi/zipstream/setminfps.cgi (-rw-r--r-- 150 messagebus) - common linux file: no - Vulnerable function: printf / Function count: 62 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/html/axis-cgi/zipstream/setstrength.cgi (-rw-r--r-- 150 messagebus) - common linux file: no - Vulnerable function: printf / Function count: 62 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/html/axis-cgi/zipstream/liststrengths.cgi (-rw-r--r-- 150 messagebus) - common linux file: no - Vulnerable function: printf / Function count: 62 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/html/axis-cgi/zipstream/getstatus.cgi (-rw-r--r-- 150 messagebus) - common linux file: no - Vulnerable function: printf / Function count: 63 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/html/axis-cgi/zipstream/listfpsmodes.cgi (-rw-r--r-- 150 messagebus) - common linux file: no - Vulnerable function: printf / Function count: 62 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/html/axis-cgi/zipstream/listgopmodes.cgi (-rw-r--r-- 150 messagebus) - common linux file: no - Vulnerable function: printf / Function count: 62 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/actionengined (-rw-r--r-- root root) - common linux file: no - Vulnerable function: system / Function count: 6 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/html/axis-cgi/apidiscovery.cgi (-rw-r--r-- 150 docker) - common linux file: no - Vulnerable function: printf / Function count: 1 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/html/axis-cgi/zipstream/getstatus.cgi (-rw-r--r-- 150 messagebus) - common linux file: no - Vulnerable function: sprintf / Function count: 1 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/html/axis-cgi/apidiscovery.cgi (-rw-r--r-- 150 docker) - common linux file: no - Vulnerable function: system / Function count: 1 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/html/axis-cgi/certificate2/cert.cgi (-rw-r--r-- root _ssh) - common linux file: no - Vulnerable function: printf / Function count: 2 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/html/axis-cgi/remoteservice.cgi (-rw-r--r-- 150 _ssh) - common linux file: no - Vulnerable function: printf / Function count: 2 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/html/axis-cgi/jpg2/image.cgi (-rw-r--r-- 150 docker) - common linux file: no - Vulnerable function: printf / Function count: 2 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/html/axis-cgi/customhttpheader.cgi (-rw-r--r-- root _ssh) - common linux file: no - Vulnerable function: printf / Function count: 1 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/html/axis-cgi/packagemanager.cgi (-rw-r--r-- 150 _ssh) - common linux file: no - Vulnerable function: printf / Function count: 3 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/html/axis-cgi/pwdgrp.cgi (-rw-r--r-- root root) - common linux file: no - Vulnerable function: strcat / Function count: 10 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/html/axis-cgi/mqtt/event.cgi (-rw-r--r-- 150 _ssh) - common linux file: no - Vulnerable function: system / Function count: 2 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/html/axis-cgi/mqtt/client.cgi (-rw-r--r-- 150 _ssh) - common linux file: no - Vulnerable function: system / Function count: 3 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/html/axis-cgi/pwdgrp.cgi (-rw-r--r-- root root) - common linux file: no - Vulnerable function: system / Function count: 1 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/html/axis-cgi/oak.cgi (-rw-r--r-- root _ssh) - common linux file: no - Vulnerable function: printf / Function count: 10 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/html/axis-cgi/firmwaremanagement.cgi (-rw-r--r-- root _ssh) - common linux file: no - Vulnerable function: system / Function count: 2 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/html/axis-cgi/oak.cgi (-rw-r--r-- root _ssh) - common linux file: no - Vulnerable function: sprintf / Function count: 1 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/html/axis-cgi/io/portmanagement.cgi (-rw-r--r-- root docker) - common linux file: no - Vulnerable function: printf / Function count: 13 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/html/axis-cgi/basicdeviceinfo.cgi (-rw-r--r-- 150 messagebus) - common linux file: no - Vulnerable function: printf / Function count: 1 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/html/axis-cgi/secure_boot/custfwcerts.cgi (-rw-r--r-- root _ssh) - common linux file: no - Vulnerable function: system / Function count: 2 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/sbin/syslog-ng-ctl (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 6 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/sbin/usage-statistics (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 4 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/sbin/httpwdd (-rw-r--r-- 349 349) - common linux file: no - Vulnerable function: printf / Function count: 3 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/sbin/recording_fixer (-rw-r--r-- 211 211) - common linux file: no - Vulnerable function: printf / Function count: 5 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/sbin/systemlogd (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 4 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/sbin/policykit_cert (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 10 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/sbin/eventproducerd (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 1 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/sbin/api-discovery (-rw-r--r-- 383 383) - common linux file: no - Vulnerable function: system / Function count: 1 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/sbin/blkid.util-linux (-rw-r--r-- root root) - common linux file: no - Vulnerable function: system / Function count: 1 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/sbin/cryptsetup (-rw-r--r-- root root) - common linux file: yes - Vulnerable function: printf / Function count: 2 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/sbin/integritysetup (-rw-r--r-- root root) - common linux file: yes - Vulnerable function: printf / Function count: 2 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/sbin/policykit_system (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 8 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/sbin/ntpconfd (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 30 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/sbin/wpa_supplicant (-rw-r--r-- root root) - common linux file: yes - Vulnerable function: printf / Function count: 1305 / networking: yes
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/sbin/ptod (-rw-r--r-- 221 221) - common linux file: no - Vulnerable function: printf / Function count: 2 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/sbin/dmsetup (-rw-r--r-- root root) - common linux file: yes - Vulnerable function: printf / Function count: 17 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/sbin/dbox (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 22 / networking: yes
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/sbin/lldpcli (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 1 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/sbin/triggerd (-rw-r--r-- 231 231) - common linux file: no - Vulnerable function: printf / Function count: 18 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/sbin/eventbridged (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 1 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/sbin/confcached (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 18 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/sbin/stclient.cgi (-rw-r--r-- root _ssh) - common linux file: no - Vulnerable function: printf / Function count: 3 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/sbin/lldpcli (-rw-r--r-- root root) - common linux file: no - Vulnerable function: system / Function count: 1 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/sbin/apac-update (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 1 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/sbin/eventconsumerd (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 5 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/sbin/veritysetup (-rw-r--r-- root root) - common linux file: yes - Vulnerable function: printf / Function count: 2 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/sbin/cryptsetup-reencrypt (-rw-r--r-- root root) - common linux file: yes - Vulnerable function: printf / Function count: 2 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/sbin/basic-device-info (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 1 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/sbin/migrate_cert (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 1 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/sbin/time-service (-rw-r--r-- root root) - common linux file: no - Vulnerable function: system / Function count: 2 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/etc/fsupgrade.d/ac_converter (-rw-r--r-- root root) - common linux file: no - Vulnerable function: printf / Function count: 10 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/sbin/snmpd (-rw-r--r-- root root) - common linux file: yes - Vulnerable function: printf / Function count: 9 / networking: yes
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/sbin/basic-device-info (-rw-r--r-- root root) - common linux file: no - Vulnerable function: system / Function count: 1 / networking: no
[+] ./logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/sbin/snmpd (-rw-r--r-- root root) - common linux file: yes - Vulnerable function: system / Function count: 2 / networking: yes
==> Top 10 legacy C functions - Radare2 disasm mode
[+] fprintf - top 10 results:
46 : vdo-client : common linux file: no
37 : vdo-user-encode : common linux file: no
9 : vdo-virtual-inp : common linux file: no
7 : io2d : common linux file: no
6 : vdo-input-clien : common linux file: no
1 : vdo-stream-moni : common linux file: no
1 : vdo-output-ctrl : common linux file: no
1 : vdo-mode-ctrl : common linux file: no
1 : vdo-input-ctrl : common linux file: no
1 : vdo-blend-clien : common linux file: no
[+] mmap - top 10 results:
[+] popen - top 10 results:
[+] printf - top 10 results:
1305 : wpa_supplicant : common linux file: yes
245 : indexer : common linux file: no
163 : ptzaurus : common linux file: no
66 : storage_manager : common linux file: no
63 : temperature_ctr : common linux file: no
63 : getstatus.cgi : common linux file: no
62 : setstrength.cgi : common linux file: no
62 : setminfps.cgi : common linux file: no
62 : setgop.cgi : common linux file: no
62 : setfpsmode.cgi : common linux file: no
[+] sprintf - top 10 results:
18 : presettourd : common linux file: no
13 : ssh-keygen : common linux file: yes
8 : scp.openssh : common linux file: no
6 : htpasswd : common linux file: yes
6 : htdbm : common linux file: yes
5 : actionengined : common linux file: no
3 : lightd : common linux file: no
2 : stclient : common linux file: no
2 : ptzaurus : common linux file: no
2 : dynamic_overlay : common linux file: no
[+] strcat - top 10 results:
10 : pwdgrp.cgi : common linux file: no
3 : mod_proxy_ftp.s : common linux file: yes
[+] strcpy - top 10 results:
[+] system - top 10 results:
16 : dbus-daemon : common linux file: yes
6 : actionengined : common linux file: no
4 : video-scene-man : common linux file: no
3 : client.cgi : common linux file: no
2 : time-service : common linux file: no
2 : systemd-shutdow : common linux file: yes
2 : storage_manager : common linux file: no
2 : snmpd : common linux file: yes
2 : firmwaremanagem : common linux file: no
2 : event.cgi : common linux file: no