|
下载看了看,根目录就initrd64里边,你可以找个ext3或者ext4分区,从iso中提取initrd64到用户目录,然后:
用binwalk看看这个cpio压缩包里的文件被压缩在那一段。
binwalk initrd64
发现有一段lzma压缩的数据,那就是它了,有的initrd是gz压缩的
root@ThinkPad:/home/my9823/Downloads# binwalk initrd64
DECIMAL HEXADECIMAL DESCRIPTION
--------------------------------------------------------------------------------
0 0x0 ASCII cpio archive (SVR4 with no CRC), file name: ".", file name length: "0x00000002", file size: "0x00000000"
112 0x70 ASCII cpio archive (SVR4 with no CRC), file name: "REAMDE", file name length: "0x00000007", file size: "0x0000003A"
292 0x124 ASCII cpio archive (SVR4 with no CRC), file name: "TRAILER!!!", file name length: "0x0000000B", file size: "0x00000000"
512 0x200 LZMA compressed data, properties: 0x5D, dictionary size: 67108864 bytes, uncompressed size: -1 bytes
4972442 0x4BDF9A Cisco IOS experimental microcode, for "4"
为了防止看花眼,建个目录进去载解压
mkdir 123;
cd 123;
dd if=../initrd64 bs=512 skip=1 |unlzma|cpio -idm
好了,123目录就是initrd64的全部文件。大概280M左右。
|
|