LG webOS Smart TV
Kayvon2008 (Talk | contribs) (→Partition structure) |
Kayvon2008 (Talk | contribs) |
||
| Line 15: | Line 15: | ||
Overall I found six SquashFS, extracted by binwalk and four EXT4 partitions, extracted by MobileRevelator and TestDisk: Partition 0 (/mnt/lg/uhdcp), Partition 1 (/var/db), Partition 2 (/mnt/lg/cmn_data) and Partition 3(/media). | Overall I found six SquashFS, extracted by binwalk and four EXT4 partitions, extracted by MobileRevelator and TestDisk: Partition 0 (/mnt/lg/uhdcp), Partition 1 (/var/db), Partition 2 (/mnt/lg/cmn_data) and Partition 3(/media). | ||
| + | |||
| + | ==SquashFS files== | ||
| + | |||
| + | The six SquashFS files contain the stock LG WebOS. The "/etc/issue" file contains the operating system version. In the dataset it contains "webOS TV 3.5.0". | ||
| + | |||
| + | |||
| + | ===Partition 0 (/mnt/lg/uhdcp) and Partition 1 (/var/db)=== | ||
| + | |||
| + | Partition 0 (/mnt/lg/uhdcp) and Partition 1 (/var/db) don't seem containing useful data from a forensics perspective. | ||
| + | |||
| + | |||
| + | |||
| + | |||
| + | ===Partition 2 (/mnt/lg/cmn_data)=== | ||
| + | |||
| + | Partition 2 (/mnt/lg/cmn_data) seems containing the most interesting files from a forensics perspective. | ||
==Links== | ==Links== | ||
* https://blog.digital-forensics.it/2020/12/a-journey-into-iot-forensics-episode-2.html | * https://blog.digital-forensics.it/2020/12/a-journey-into-iot-forensics-episode-2.html | ||
Revision as of 04:05, 27 November 2021
LG Smart TVs usually run the webOS operating system. If it is older, they may run Android (Google TV), or SmartView. ZENA forensics has made an analysis on a 55SK8000PUA tv.
Contents |
Partition structure
Four EXT4 partitions can be found.
7-zip revealed a SquashFS at the beginning of the image.
The Squashfs has a Linux-style folder schema and seems to contain the WebOS files.
I decided then to run "binwalk" on the image: the tool found 6 SquashFS file systems.
Overall I found six SquashFS, extracted by binwalk and four EXT4 partitions, extracted by MobileRevelator and TestDisk: Partition 0 (/mnt/lg/uhdcp), Partition 1 (/var/db), Partition 2 (/mnt/lg/cmn_data) and Partition 3(/media).
SquashFS files
The six SquashFS files contain the stock LG WebOS. The "/etc/issue" file contains the operating system version. In the dataset it contains "webOS TV 3.5.0".
Partition 0 (/mnt/lg/uhdcp) and Partition 1 (/var/db)
Partition 0 (/mnt/lg/uhdcp) and Partition 1 (/var/db) don't seem containing useful data from a forensics perspective.
Partition 2 (/mnt/lg/cmn_data)
Partition 2 (/mnt/lg/cmn_data) seems containing the most interesting files from a forensics perspective.
