Chip-Off Firmware Extraction and Reverse Engineering of Arris SB6121 Cable Modem

Matt Brown demonstrates how to desolder an SPI flash chip from a cable modem, read its contents, and unpack the filesystem using binwalk.

In this video, we demonstrate a chip-off firmware extraction on the Arris SURFboard SB6121 cable modem. Then, we unpack the squashfs filesystems with binwalk and explore their contents. flash chip datasheet: winbond.com/resource-files/w25q64fv%20revs%2007182017.pdf XGecu T56 universal programmer site: autoelectric.cn/EN/TL866_main.html Wine wrapper for XGecu software: github.com/radiomanV/TL866 IoT Hackers Hangout Community Discord Invite: discord.com/invite/vgAcxYdJ7A 🛠️ Stuff I Use 🛠️ 🪛 Tools: XGecu Universal Programmer: amzn.to/4dIhNWy Multimeter: amzn.to/4b9cUUG Power Supply: amzn.to/3QBNSpb Oscilloscope: amzn.to/3UzoAZM Logic Analyzer: amzn.to/4a9IfFu USB UART Adapter: amzn.to/4dSbmjB iFixit Toolkit: amzn.to/44tTjMB 🫠 Soldering & Hot Air Rework Tools: Soldering Station: amzn.to/4dygJEv Microsoldering Pencil: amzn.to/4dxPHwY Microsoldering Tips: amzn.to/3QyKhrT Rework Station: amzn.to/3JOPV5x Air Extraction: amzn.to/3QB28yx 🔬 Microscope Setup: Microscope: amzn.to/4abMMao Microscope 0.7X Lens: amzn.to/3wrV1S8 Microscope LED Ring Light: amzn.to/4btqiTm Microscope Camera: amzn.to/3QXSXsb About Me: My name is Matt Brown and I'm an Hardware Security Researcher and Bug Bounty Hunter. This channel is a place where I share my knowledge and experience finding vulnerabilities in IoT systems. - Soli Deo Gloria 💻 Social: twitter: twitter.com/nmatt0 linkedin: linkedin.com/in/mattbrwn/ github: github.com/nmatt0/ #hacking #linux #reverseengineering #iot #firmware