nccgroup / depthcharge

A U-Boot hacking toolkit for security researchers and tinkerers
https://depthcharge.readthedocs.io
BSD 3-Clause "New" or "Revised" License
258 stars 14 forks source link

Add U-Boot Config Checker #5

Closed jynik closed 3 years ago

jynik commented 4 years ago

Implement a checker similar in usage/reporting to checksec and kconfig-hardened-check that ingests either a U-Boot .config or Depthcharge device configuration file and flags potentially risky enabled commands or configuration items.

Output options should include:

This work will undoubtedly help prioritize some additional depthcharge.Operation implementations, based on what we find to be most common across samples.

jynik commented 3 years ago

Staged in next @ 94da310476f2aacf2016bd1b290ae76c458e46af.