https://insinuator.net/tags/sgos/ Recent content in Sgos on Insinuator.net - Bold Statements Hugo en-us Thu, 26 Oct 2017 00:00:00 +0000 https://insinuator.net/2017/10/interacting-with-the-bluecoat-filesystem/ Thu, 26 Oct 2017 00:00:00 +0000 https://insinuator.net/2017/10/interacting-with-the-bluecoat-filesystem/ <p>the last <a href="https://insinuator.net/2017/10/reading-the-bluecoat-filesystem/">post</a> was about a fuse filesystem which provides a read-only access to the proprietary bluecoat filesystem. After some further investigations based on the possibilities this offered us, I started to implement a tool which allows to modify parts of the filesystem.</p> <h2 id="protection-mechanisms">Protection Mechanisms</h2> <p>Since last time, the discovered filesystem structures still had unknown fields. Some of those fields could be reconstructed and their purpose in the whole construct. The format of the <code>Partition</code>-Header for example could now be described as</p> https://insinuator.net/2017/10/reading-the-bluecoat-filesystem/ Thu, 05 Oct 2017 00:00:00 +0000 https://insinuator.net/2017/10/reading-the-bluecoat-filesystem/ <p>You may remember our <a href="https://insinuator.net/2016/12/research-diary-blue-coat/">last post</a> regarding the SGOS system and the proprietary file system. Since then, we got access to a newer version of the system (6.6.4.2). Still not the most current one (which seems to be 6.7.1.1) nor of the 6.6.x branch (which seems to be 6.6.5.1) though. As this system version also used the same proprietary filesystem (although it initially booted from a FAT32 partition), I decided to take a deeper look into this.</p>