Ps-22a.bin

dd if=ps-22a.bin of=bootloader.bin bs=1k skip=0 count=256 dd if=ps-22a.bin of=kernel.bin bs=1k skip=256 count=768 dd if=ps-22a.bin of=rootfs.bin bs=1k skip=1024 If Binwalk identifies SquashFS:

unsquashfs -d rootfs_extracted rootfs.bin If JFFS2: ps-22a.bin

modprobe mtdram modprobe mtdblock dd if=rootfs.bin of=/tmp/mtdfile losetup /dev/loop0 /tmp/mtdfile mount -t jffs2 /dev/loop0 /mnt If unknown custom format – check for CRC , TABLE headers, or use firmware-mod-kit : dd if=ps-22a

grep -r "password" rootfs_extracted/ grep -r "telnet\|ssh\|serial" rootfs_extracted/ Warning: Modifying ps-22a.bin can brick the device. Always back up original. Replacing a file in SquashFS: unsquashfs rootfs.bin # edit files in squashfs-root/ mksquashfs squashfs-root/ new_rootfs.bin -comp xz -b 256K Rebuilding full firmware: Concatenate modified parts: ps-22a.bin