This repository aims to consolidate firmwares from various IoT producst from different brands, models, etc. This will be useful for IoT vulnerability research works, etc. Most of the firmware files available online are for newer versions. However, this repo aims to archive firmware from older and potentially vulnerable versions. There are still online locations which archives it, but there are not able to be found anywwhere online (or atleast I am not able to find it).
My collection methods involves extracting directly from IoT devices I have physical access to, or from the wayback machine (https://web.archive.org/).
I will be using the Github "release" feature to store the firmware files, as it is too large for normal upload. Each release will be tagged with the respective device brand, name, model and firwmare version.
The following lists the relevant wayback machine APIs to hunt for older firmware files. Refer to my notes: https://jarrettgxz-sec.gitbook.io/penetration-testing-ethical-hacking-concepts/iot-hardware-hacking/resource/firmware-download. I will also list the common ones here:
- General
- Linksys
https://web.archive.org/cdx/search/cdx?url=downloads.linksys.com/downloads/*&filter=original:.*MODELNAME.*(bin|img)$&collapse=urlkey&output=text
https://web.archive.org/cdx/search/cdx?url=downloads.linksys.com/support/assets/firmware/*&filter=original:.*MODELNAME.*(bin|img)$&collapse=urlkey&output=text
- D-Link
- TP-Link