BLE-Firmware-Analysis

Tool that analyzes stripped Bluetooth Low Energy Firmware (from vendors: TI & Nordic). Functions are identified and are commented based on NIST recommendations.

Steps for Usage

1. Go to the respective directory (ti/nordic)
2. Place the firmware binary/binaries in the src folder. For each binary, also place its corresponding BinExport file in the same directory. [See more on generating BinExport file below]
3. In the terminal session you're running, ensure that GHIDRA_DIR contains the path to your ghidra installation. If not, then either export GHIDRA_DIR with this path, or for permanent changes, modify the GHIDRA_DIR variable in the run.sh script.
4. Ensure you have python3 installed in your system. Also ensure that you have bindiff installed. [See more about BinDiff below]
5. Ensure that run.sh has executing privilege. (Do chmod +x run.sh)
6. To view intermediate results, run with: ./run.sh --debug
7. Final results are stored in the ./results directory, with a csv that holds the mapping of address to the matched function names, and a json that contains commented information for BLE focused functions matched, on the basis of NIST recommendations.

Using Docker

In place of steps 3-6, follow the below instructions, to run in the docker container.

• Go to the root directory of this project. Build the Dockerfile using the command docker build -t ble-firmware-env .
• Use this to run the docker container once it is built: docker run --rm -it -v "${PWD}\ti:/workdir" -w /workdir ble-firmware-env ./run.sh
• Use ${PWD} in case of Windows systems, and ${pwd} in case of Linux.
• Use --debug to view intermediate results.

Regarding BinExport and BinDiff

It is preferred to use Ghidra 10.4, and BinExport for 10.3+ Ghidra versions, as these are known to be compatible with each other.

Also, install Bindiff 8 and verify its successful installation from the command line.

To install and use BinExport in Ghidra's GUI, you need to first of all open Ghidra GUI, and create a new project. Then go to File and select "Install Extensions...". From there, locate and select the zip folder of BinExport that you've just downloaded. Now, import the binary and click anywhere on the code window. Press O to open the Export Program As dialogue box, and select BinExport. Alternatively locate this option from the File menu. Once the BinExport is ready, place this along with the actual binary in the folder specified above, for running of the scripts.